{ "Event": { "published": true, "date": "2026-04-20", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-20", "timestamp": 1776730526, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "d68dd3ed-1d77-4a2a-a71c-486cf188675b", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1776643342, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776643342, "uuid": "86af5634-017f-49a2-8855-d95e5ce5e9b8", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776643342, "uuid": "0d9224ab-e728-4e69-93a9-ce293fb5bb66", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776643342, "uuid": "52b2269e-c462-422f-8126-b994aadafa31", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776643342, "uuid": "888bdc7e-fd1c-448f-a0b9-8527a5e932da", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776643342, "uuid": "67c3ef29-2a15-4458-b935-5d6d092acb0e", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1776643824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776643824, "uuid": "477ff8ad-669d-4d4d-8b17-48d98dc86df1", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776643824, "uuid": "468c2746-3921-46b3-b7a9-9d0112efc664", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776643824, "uuid": "21e5a8ff-1e32-40b5-a357-1d3ce5d39d32", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776643824, "uuid": "49c40dc6-d334-43cd-92f9-5800018970d2", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776643824, "uuid": "2f167117-d878-4cea-9011-a6f3338b7941", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4662af87-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776644231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644231, "uuid": "b2d552f1-9c39-4b1c-83fc-7fda6f4865fe", "comment": "Malware payload (Mirai)", "value": "edcc5ae2de5de7ab77b14f1750d10bfa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644231, "uuid": "c8b16535-7664-4bee-8254-88c205cffffc", "comment": "Malware payload (Mirai)", "value": "05d47634e064d5d78d15c1edccdeb5e1439949a716e28750c6679c6a02a127d3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644231, "uuid": "3092c3d9-3843-4497-9255-1ae4a73ff173", "value": "T101132B42322C0E5BC6A65AB0253F17E093BFE9A020F4F585655F9B868275F761087F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644231, "uuid": "c4462d38-09bb-4c5a-89b7-a8dee0c060f7", "value": "768:s2+mLyDPtK4waS1U54GHGeRwb55aasLp5jpx8RbhooAcd/:dnyrt7waS1U54QZkcFMPAY/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776644231, "uuid": "3dc18423-d126-4536-a78e-8903c8e81768", "value": 41892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644231, "uuid": "dd642c7c-4e65-432b-b380-050696465614", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d2bee0e-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776644242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "f778d2a7-0529-4b2e-aeec-731e9e17242c", "comment": "Malware payload (Mirai)", "value": "02974e68500bfa0c13f05d4d9d7e8616", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "7a33abe3-a005-4dac-a19b-8d9c4c468739", "comment": "Malware payload (Mirai)", "value": "7bf39d1f2ae496d69716ca14afa887107f191884f1346e165d24cd7307777703", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "107ecd7c-70a6-4b09-981f-bcc08424aa1f", "value": "T1D9234A21B9392F17C4D4A8BA22F74768B2F5165E25B8CB5E3D320E4EFF14A8095173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "9099ad0e-0bd8-4a80-865e-5fc72750b139", "value": "768:yzomnlRq91dCPgsIrU6Tabz2rlkGqfrnxoO+6E0R0:yzVnlRS1dCPgs8U6azw6nxiD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776644242, "uuid": "b3e73bbf-169e-46e0-8a24-31d954943280", "value": 46820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "7a9102bc-39e3-4cb6-843a-390a7527c639", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d3268bc-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776644242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "321cb519-b501-494f-82b8-dfef8532bd0b", "comment": "Malware payload (Mirai)", "value": "aba53863824d7434c0e7ffc6e462e960", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "2772a2d4-4450-41e1-b801-a8e05e5a24e2", "comment": "Malware payload (Mirai)", "value": "63d0c3526b4facf1833952c51417ec372e2bed9d4526ad7e2d28118e7d690881", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "e9e02ed1-1fbf-440b-8326-edef116e5ae3", "value": "T1601307DBB405AD7CF81FEBBE94174909F631375550830B2667A7FCA36C321A49922E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "f24686e3-2948-44cd-84a6-c8ef33a717ea", "value": "768:NvePhohSIJ6a5HSNCI4UzV7SbRJEziew9Yny0U8roJ:FWe0I0fNl4UzdSnE2ewinyx8UJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776644242, "uuid": "1c45fcb2-fab9-4e98-92e8-5a57e2be58c6", "value": 43608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "18f796c7-bc2b-4a01-b619-9ad51daf661d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d32b86c-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776644242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "fa25da50-4087-466c-9ca5-93e0cf39312f", "comment": "Malware payload (Mirai)", "value": "846bf633b6283a647f0a7da0f7573d43", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "f9a436cc-a303-4378-8001-d8d74c0023c4", "comment": "Malware payload (Mirai)", "value": "148d31c590732b49fd4632ac63d4c7f0d4e56c8900204968a6adfdac1e7e7c3e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "e0b9f5a4-08bd-421d-9f17-95c1718cdcbf", "value": "T15C218221390054766E3DEC197606E00D00C55BEF3D3BB7F8DDD5A81AE1B80487AA2D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "fe23b353-36c2-451a-92f2-2e6ff8d2c8af", "value": "24:0FdBjeBeNIGmk7eK/Jv9o0wS/pdTdb4B4dAiVEiRzI2zu43vWyOcMBMlsGc40G:0Bhml6JvzwiTd8GdAZiRZl3jOssK0G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776644242, "uuid": "e0fd9f76-35de-4b8f-b4f2-56bf905636e7", "value": 1434, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "067421e6-12ac-4b8f-a191-dbb8bb4333c5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d33e70d-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776644242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "eaebf91b-640a-452b-96f4-b09444e14855", "comment": "Malware payload (Mirai)", "value": "b896224dfd94d435cd90cd1334486509", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "0d97120f-8be9-4dbb-b4c4-cf1d1e7c1677", "comment": "Malware payload (Mirai)", "value": "b89cfc08d8abe6eed52db45e83e51f39f9c67b864c41ab658f10f4ede463f00e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "3d2a71c4-893c-4462-be21-af879ff5d98b", "value": "T14B43971E2E619FFCFBAD863587F39E219648339216E1C684E15CDA011E7034E745FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "afa902c6-b628-408d-8f83-329a3ab51489", "value": "768:RaT+l5PNxAGJYmzrEIPfEIXwKE5jNxAjACOFym6OCLdc34pAOreBAWslnk/zw+:Rn5FxAGJtzh6H5jN2ZLdc3EzCw+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776644242, "uuid": "a705b5e1-859a-48cb-9d6e-01b3cdb254af", "value": 57108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "dc53f1e8-cb2e-4ae3-96a6-dc6da0ac3e7f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d36c7ff-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776644242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "7c082359-fe63-4da0-8494-f5a8c6adce07", "comment": "Malware payload (Mirai)", "value": "2167fb8b9188de58a9302c4195c56f27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "fdc4270d-ab85-4710-abb3-29baa7a0b19c", "comment": "Malware payload (Mirai)", "value": "bcd8805da45aaa227c3979c999890c3d5778d078d0a22f0d552b47a364387638", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "1c83265e-6881-484f-a646-848b73723a8c", "value": "T1C943710ABF650EB7EC6FDD3709A9174524CD651B21A87B3A7D34D81CF20B25B19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "2a9dcb10-1141-405f-8bc9-1efc8b590f50", "value": "768:oLWu89xw1IlGGUantlZIxY966x1EnB6NTcWlp21wmNOUGpCIMtjej5dIne2el9e2:oLWu8fwgUHkkLg9gzStS1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776644242, "uuid": "0d230519-a417-49c9-844e-8d241d180b1b", "value": 59220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "589c4ecc-67c8-4864-b631-304b917998f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d38f04b-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776644242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "f8da9c7b-f6e3-40cd-a85c-570b6a4dd91d", "comment": "Malware payload (Mirai)", "value": "fe021dec91b2715bbce4d49aecb4b2f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "add2bc67-dfe9-4f99-b0e2-251117382553", "comment": "Malware payload (Mirai)", "value": "4e3a95f73f130edb913771611fcd42304ba5a1b0b926b6b47d771a6e720bf47c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "177ab50d-4db0-400e-ad69-f453ad5df53f", "value": "T19D130807B94680FDC0ADC374477AB53AD53335BE1239B3B63BD8FA129986EA10E1D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "6a0f051b-ff13-4d13-a28d-747620a0083c", "value": "768:HO5xyjKy5klOY5lYDJN+Tb4/oTgjSAnW4t/TWufBT74h0:C4jKy5klH5lYFsTbUoTB+xt/TWuFsh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776644242, "uuid": "f1b7eeba-836a-46d2-a3ca-27499bc6b0d9", "value": 42752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644242, "uuid": "4565b7a3-785b-4c73-a307-1225302a60bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c8b41d5-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776644295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644295, "uuid": "2898e3df-abcc-4e22-b1b0-c4ce5d1c6f25", "comment": "Malware payload (Mirai)", "value": "dc66e37b40a6768f4028226133137b2e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644295, "uuid": "aea3cf13-3d99-4d48-b876-f35c98e240f3", "comment": "Malware payload (Mirai)", "value": "6af9a42eb78caa4023f8ba153940f131c415e521519c9f64c0829c373eff2ff4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644295, "uuid": "05b4a6ec-e295-43ab-88cd-1432cb9c3df7", "value": "T1E2037DBAC4296D84D5154275A8358A7C6F63E110D3833FFA5B4989A68047EFCFA0A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644295, "uuid": "9734fc73-e84d-42f5-ad73-e6f77fd48869", "value": "768:Ha9fewtwwF6KHX/3ee1dEigANW3/rfCXoCfaCi:HadewtrVbCcKfHMaCi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776644295, "uuid": "3c402f7d-1525-4070-b281-9c2451fa830b", "value": 39212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644295, "uuid": "ad157182-d410-4386-af85-db5710ba7f3d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776644296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644296, "uuid": "df37ce78-12f6-4d10-9582-457f344f1e45", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644296, "uuid": "bb44e107-5cdb-44af-9484-52447715af1f", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644296, "uuid": "d0769bf3-c4b8-4b23-957e-96aceea4dd47", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644296, "uuid": "db70e99b-3961-4e25-85b3-ecc22e48db11", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776644296, "uuid": "1eed5070-ff51-4780-92bf-0ee6ab14e68c", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94143a99-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776644361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644361, "uuid": "591aeb0f-56eb-45c8-a1c1-5b2ddda59300", "comment": "Malware payload (Mirai)", "value": "98fd6352a298b0d30b352c0939ab098b", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644361, "uuid": "788eede2-4138-4e73-9d1d-fcefec958a7d", "comment": "Malware payload (Mirai)", "value": "7a39216ae5b891d3efb0764f4ac57e3c92683e9108ca74d269231934b345adbc", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644361, "uuid": "85129fc7-66ae-4270-82fc-78d41099a081", "value": "T1EC330A96B8818A12C5D413BAFE2E118E33136768D3DFB2139E106F1477C696F0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644361, "uuid": "a91d17bb-954c-410e-ab71-aff511caf902", "value": "1536:gdnM5V7dJfTYKk8nYGrCGvgLiIyi55eeQO3:nJLrvk2Ybv5eeQO3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776644361, "uuid": "df75ef73-d37c-4c1e-a683-f608951ae028", "value": 54400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644361, "uuid": "67d3acd5-f1de-4395-9ec3-16f57760cf07", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9416ab3a-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776644361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644361, "uuid": "80d38f24-a8f4-4b9e-9d21-2012c1f1e97b", "comment": "Malware payload (Mirai)", "value": "cb6f88e1d269e87f8f8d9926ead17f0e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644361, "uuid": "a8c380c4-8341-4d66-a69f-22781d975be2", "comment": "Malware payload (Mirai)", "value": "98d09a1953100ec6113eac0db272966c649c628bed1ef57b583c84ae82833ee9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644361, "uuid": "02bdad42-928a-492a-ba12-a58f1599c264", "value": "T1A6035CC8B903DDF8FC1606F42136F77A9BB6F07A2128DD97C39995329C42A05A5062", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644361, "uuid": "26bf6d6d-a11c-4139-b3c7-04bd469996dd", "value": "768:wZT8epBPi4gJW0KMcjp49A9/YuEGatqU3EgouBnk6Py5iE9Ee4V:wZIezPi4gJW0KMgp49Ax8Rv3FxBnk6PY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776644361, "uuid": "cdcc39b5-4ac7-46d6-87f1-141f5e793360", "value": 39356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644361, "uuid": "bf8641e8-3d8a-4526-bdba-9aeef97cf8c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "941bc814-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776644361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644361, "uuid": "d319661e-5692-4747-8a89-edd1f3017ea8", "comment": "Malware payload (Mirai)", "value": "e92fb78bed113ef8d74acf7d70c08572", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644361, "uuid": "1d85f804-1a3d-406c-b7d6-2e02e7b55003", "comment": "Malware payload (Mirai)", "value": "956a2e661a24581fbc638794fac6e6251ba8a241fed69a8fee81683e75c44b70", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644361, "uuid": "1e43e6fa-1119-477b-86ad-ea6888c95c64", "value": "T156F2F892B8929D26C6E4237AFAAE018D336163E8D1EF3217DD215F047BCA51F0D67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644361, "uuid": "82d7ec61-2c3c-4e55-99d9-5c407bd90814", "value": "768:KY8dbugYpYSaHXsL7uyMln5EPC8wa80eCSCc5TZxY4o/i/IPN:KLSgjtXrL8wQYZxY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776644361, "uuid": "37967419-1a74-45b0-a293-a1636c14b645", "value": 37160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644361, "uuid": "a4dbd99d-204a-4151-b59b-64e6ea3d8bce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "941de4ff-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776644361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644361, "uuid": "f4f93013-6915-4407-b685-965bf9c08fa9", "comment": "Malware payload (Mirai)", "value": "612c127d6abd9861844fad5045d09b61", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644361, "uuid": "a5983c7b-9b60-4a89-aa5c-e826bcc4cbb9", "comment": "Malware payload (Mirai)", "value": "4f2de54171472ad12fcd08d4dead5dae02e8ac86e7528cf45744b0e17b536887", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644361, "uuid": "72e5db95-5b68-4b78-9ece-ebf34fcde20e", "value": "T17DB32B46EA818B03C0D5177ABAEF42453323A754D3DB730689186FB43F86BAF4E675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644361, "uuid": "1c89538e-caad-408a-b3e8-e2a4b3389895", "value": "3072:jowtPc4BAtYhkbB0x3U3ofmJ5AM/9W9hl:UwtPc4BAChkbB05UWmJGM/9Wl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776644361, "uuid": "8bc94cbe-3e88-478a-97ad-5a484b999406", "value": 114584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644361, "uuid": "98a91c42-bc5b-48ee-b1bf-29a283c0e222", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b571e88-3c55-11f1-bc00-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1776647353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776647353, "uuid": "2a7530b1-afd9-4190-8694-28c1f12ea3db", "comment": "Malware payload (Smoke Loader)", "value": "f467913f2804676632ab82f9d3f46755", "object_relation": "md5", "Tag": [ { "name": "pw-8871", "colour": "#1f365f", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776647353, "uuid": "22eb53c9-e52b-4d38-80ef-6b0c9750d5c6", "comment": "Malware payload (Smoke Loader)", "value": "c7c506ed3e073c24a1e9999dfd6c99ef6f1eb37878d0055d5710445280feac46", "object_relation": "sha256", "Tag": [ { "name": "pw-8871", "colour": "#1f365f", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776647353, "uuid": "269ff854-da2c-4c0c-b43f-28c349723bd9", "value": "T1E50733EDB94E5C720F635A3BF0916E04867C3A479F6B65665D6CC3C172FEE8388026", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776647353, "uuid": "e7b4be3c-28b8-46be-8a80-0b973642034c", "value": "393216:zRRHr9MghM5FsITF3IJ5tK9J/xvTjYDFvLEwBwyZN1EH/VF6SjPQ2alu:zPHBhMv5IJ5s9J/xvTjYDFvLEwBwyKHF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776647353, "uuid": "46212c87-7889-4a01-9e81-a16ed8cdce8f", "value": 18240030, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776647353, "uuid": "d9c8d294-6208-499f-bacb-b4596059dfcd", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96a6260f-3a60-11f1-bc00-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1776647723, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776647723, "uuid": "dad587a7-e8a7-43ab-b2c8-6c67e2b766c3", "comment": "Malware payload (SantaStealer)", "value": "eab63c490102d94c5a3b3914195c3530", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776647723, "uuid": "527ff599-decc-402b-8f98-23518d801836", "comment": "Malware payload (SantaStealer)", "value": "8f3ddbc6090f6bbb75805de8ca284953696e283b438cfa9a45c3713c6ebcb70c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776647723, "uuid": "a32454ef-9a31-417a-bb88-a6cf0f09eda2", "value": "T18267E0DBF60DB9B4F315956AC7D0EA086F8FF8B180E391A001D11B3396AE946DB874", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776647723, "uuid": "3c87e7e7-f1e0-41c7-b054-c4a95dfbf856", "value": "5db62f1c7bafdda66124cfde5230bea0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776647723, "uuid": "11bdc172-5695-438b-86b6-2cca61307447", "value": "786432:hP1TC3oQmx3imvWEmBjsWdMruJZrize+SkjRn:p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776647723, "uuid": "c5640671-e009-443c-8d7f-d5dfeb650d0a", "value": 30016722, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776647723, "uuid": "bb02011a-fa7c-4a37-b670-5adec5279a33", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e182b108-3c58-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776648786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776648786, "uuid": "a0fa2ecd-439a-48c4-80fa-e63c38ccc13b", "comment": "Malware payload", "value": "96799388ab10edec993fd157f74d58d0", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776648786, "uuid": "c0180deb-1bcd-41df-8f3d-1c55ea1de56b", "comment": "Malware payload", "value": "be75dedbd87cd5456f03cf507410ce65abd5259827ab9df71dd24ff4f96f1d80", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776648786, "uuid": "b0111068-ea11-474d-ad4d-fccc374efd75", "value": "T17DC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776648786, "uuid": "697b4370-1222-48a3-8dcd-fb0b7392b47c", "value": "12288:b+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byFH9I1P0QKw6FE1:b+QqldA/TSO713u7xnFH9IaQKHs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776648786, "uuid": "70a61eba-7dca-44ef-a784-504d64aa694f", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776648786, "uuid": "48646c8e-2d0f-41c0-a692-7f2bfa4f12c1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b31e0b3b-22fb-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1776649026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649026, "uuid": "8d096c8f-cc5a-4f76-af3a-8565b2d55307", "comment": "Malware payload", "value": "a13ca15baa4497860f4bccccba22cb94", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649026, "uuid": "509f68d7-0e80-4fbe-ab8d-346d8cb99754", "comment": "Malware payload", "value": "dad19f62110c968534945db59497ca4c848080ec35209fdc460156aa4f17b61c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649026, "uuid": "adece0a5-4de8-4cad-b9a4-d9f202f4e544", "value": "T108C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649026, "uuid": "103b78d5-1ce6-413c-bcc8-97a646eef241", "value": "12288:iA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWASFyorOIic/7MP1:1m6Jj6ESfUxZ91kmY/99z8tFXicT6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776649026, "uuid": "4a97cbb0-a3ab-44f3-bdc0-c212db2e3bb9", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649026, "uuid": "cfd19f4f-fe2f-4861-a73b-78203c2d380e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70e2897b-3c59-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776649026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649026, "uuid": "bc6af263-bd74-4376-8309-6db474f303e4", "comment": "Malware payload", "value": "fef0227a0788bda0a7cb601febad366b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649026, "uuid": "e7ca414b-6d3d-4c70-be8e-b7d17a432abb", "comment": "Malware payload", "value": "b3adc2f6095e6a7fef43720066b6007bf02ab373ed9579fbb20adc1f8844a26b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649026, "uuid": "19694eed-a03a-48fd-9efa-878608d10978", "value": "T136B4230A85D01FFF899ACB9946D4A4762FF467952F93565BC0CD20700AEA203E6EFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649026, "uuid": "ef4f43bd-3e7e-4e68-85fd-2e47bd9fd579", "value": "12288:7vOi3UDYXndLQ/jJOjB89RitlR0XjuIkVp69d3iY829uhBdbY7vPpCkIt:7WiEGnlQ/jwyil0X7kWv3icYdb9l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776649026, "uuid": "55bb42c9-698e-4f1b-8fce-7485d5f30f23", "value": 540419, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649026, "uuid": "96b6d54b-ab7e-4341-96b8-7c8240ce5658", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70f16b00-3c59-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776649026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649026, "uuid": "25c64454-c4e6-489f-8ea7-c0820ca90c98", "comment": "Malware payload", "value": "471ad66fc97c27e811211dc5390ac993", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649026, "uuid": "3cf4665e-a53f-46bd-8008-6adcbe6226c8", "comment": "Malware payload", "value": "fb390eb459b052b366a29ccea41f99201d37e3df88840daa82c35c20828951d7", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649026, "uuid": "08ec1e39-f489-4a4f-95db-f2fd3ea86ae9", "value": "T120C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649026, "uuid": "b1e2fddf-d18b-45c5-925d-64076a86fcb5", "value": "12288:6A7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWCSFyorOIic/7MPT:Nm6Jj6ESfUxZ91kmY/99z8jFXicTk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776649026, "uuid": "6ba5f285-fec4-4fbf-b528-0741198e57d2", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649026, "uuid": "d3c74781-2ec5-4061-aec3-28f00eb0e276", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70fe0393-3c59-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776649027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649027, "uuid": "a70e0733-f744-4ab0-9e79-e95d46a33357", "comment": "Malware payload", "value": "8cc8227f83e5948f41a3770adac7ef62", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649027, "uuid": "06c8a309-5c1b-4bb6-adf1-73d274049ca8", "comment": "Malware payload", "value": "e0fa6ca375027ad686eacc32c916c24b488f712010ea072381dc7bf38efe9f80", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649027, "uuid": "af83047a-dc3d-4607-9f45-80aa6bcf751e", "value": "T1E2C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649027, "uuid": "820cd93d-c0d1-4d1f-a184-b8a9f9b5c21a", "value": "12288:qA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWqSFyorOIic/7MPb:9m6Jj6ESfUxZ91kmY/99z8bFXicTM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776649027, "uuid": "cabeb1e1-c602-4a43-8af8-b2ea29958e24", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649027, "uuid": "524082ce-2d60-48d7-9ff3-4140be884dd5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a534bc5-3902-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776649568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649568, "uuid": "52ae68e8-6d24-4541-b7c8-265da5feccd4", "comment": "Malware payload", "value": "8c29ecd623766acc45b6f93feb2fd386", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649568, "uuid": "5734948f-d93f-4549-9ff9-5e05b5d76d01", "comment": "Malware payload", "value": "206d814c0f93f68d84815ef4ac5d437e61c039efd1183d661165eb643057f7be", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649568, "uuid": "bb981485-20ea-4511-976f-a3c100117601", "value": "T1B6B4231AF4D078CFD68ACDA394291C785F6C96C9CD126B7247C4EE9312842F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649568, "uuid": "5df20ecb-e19e-4468-851a-6037dc13b1ea", "value": "12288:xTibgSMFBOBSlqrxKu7FxPbzJTVBU+8JM9hAC8Z3QVOBRkbKQDiUbpKQ:4cSMFYvKkxpTKJM9mCw3QVOMWAPbp/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776649568, "uuid": "aec485d5-e332-493f-a8f8-2be35cb3e2af", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649568, "uuid": "4dfbfe6f-1e3f-42c6-a9bf-16f107a715b2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4ae5515-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776649570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "3de12ca1-d42c-451d-a4d1-c9038cdd9261", "comment": "Malware payload", "value": "ee0310a15f533b6470938edd36139e15", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "4e69ac2f-5edc-416b-8a8f-32a4bfc60eaa", "comment": "Malware payload", "value": "a21372f396d99a872b741b8cc3752a421d8b28f65fa326356b72a6301a3297fe", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "1afa49d0-eb1f-4e89-94d2-4a4f58e1b49a", "value": "T11DC423792755F0C46206F2FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "71e61581-1243-4ee1-909e-7b1773302216", "value": "12288:wA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWPSFyorOIic/7MPi:bm6Jj6ESfUxZ91kmY/99z8KFXicTF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776649570, "uuid": "07227701-c7bd-4590-aead-6d8410032463", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "f26f0fcf-3209-4ce8-8c5d-2a0ce3df6a2b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4b27727-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776649570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "6adfec52-7ca6-44b7-bd37-ac4f37e055e1", "comment": "Malware payload", "value": "5f7290ab6a130399c1c0779e16773eb0", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "009baecb-ff97-4c13-a117-09af4763a879", "comment": "Malware payload", "value": "1bb63045693104a1451e34d52b777318b1dc6a9c9f58053a862c040a582f7525", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "2d1fe6d1-e6dc-447b-ba59-d2cae3a54680", "value": "T101C423B7179AB0897503E3E4814C6D94C9AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "23150128-ec70-4a43-a741-c53d2fa72b71", "value": "12288:teElNtIBB2gX3U5nA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezD:teSIBBfHpm6Jj6ESfUxZ91kmY/9Hev", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776649570, "uuid": "c7e854c1-f1e4-47ef-885c-35fba9e85784", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "b2ba370d-ef34-4dc4-8af9-96397aed7d21", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4b7cf06-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776649570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "f301dca8-3f24-43cb-b626-a4bdbbc90171", "comment": "Malware payload", "value": "d689a03875c57304768861d896ea9574", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "9f57f1f8-2b93-46fd-8b87-cf016ab4905f", "comment": "Malware payload", "value": "e5d0b4c616f0838da16e19199bd73e8be39c26170227351f92ee5d7a699ed854", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "847b9ac0-0a0d-4cac-9bed-ddc489c94df4", "value": "T1DAB423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "3968023e-2137-49ff-a7ee-45ee2f23664e", "value": "12288:Okmht7DrvdyiWCCH1oHF9nJ/qjuyxgoJrrzTPwko:OkmHzMrH1ELnKxgoJnn8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776649570, "uuid": "33a147a6-f6a5-4b9b-842f-d71f441596ee", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "15c5edc2-f4b5-427b-b785-3f05638cbb04", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4b7e97d-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776649570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "e7eafbb2-b25c-490e-8fd1-69fa06c9f6c8", "comment": "Malware payload", "value": "b0018a8ccc098bd93486ed00694ba76e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "7d01f06c-f424-4629-a852-d915de2a641b", "comment": "Malware payload", "value": "9c08813088c643dc8b282b13775f6b6427f29132f36c07ad21ba96b1c212de2c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "86d47d23-75ee-4005-983c-b8212673bec7", "value": "T16FB42369227F71900C7543A84B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "80065382-e8be-4d99-941e-6dfc0a825fac", "value": "12288:W7JZAaFpehqO3g/ALyYG0ZaDajTCXMO8xzDOe3W8:uLpexA/f0Za6TCXKBxm8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776649570, "uuid": "99f13732-af4f-4b52-bf8f-ac4506b7304f", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "7dd23027-01a7-4171-8ae7-acd132a3e6cf", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4c70661-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776649570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "2edeadad-7fc4-40d5-acbd-c28dffa5fc3e", "comment": "Malware payload", "value": "58b667746f9c43d34e7211a8cec591ba", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "f06e953a-2600-4801-9725-628e62236094", "comment": "Malware payload", "value": "2568bcd549b5b82badfa24ae7b11e5327c13b804a9b49ebe44f7ca6a0e6557d6", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "effb1eda-982b-4a63-b7dd-a30704d31c30", "value": "T184C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "7fd69914-9e14-4b4d-9482-f733c37aa0c5", "value": "12288:kA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWtSFyorOIic/7MPY:Pm6Jj6ESfUxZ91kmY/99z8MFXicT7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776649570, "uuid": "9ed416a5-26d9-46e0-a00b-5080a2d9dc09", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "69e8c08b-d93a-4209-917c-99701077b52e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dfc1b5e-23b7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (SmartLoader)", "timestamp": 1776649570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "4e2f255d-bb49-4899-9e51-dc75eb9482b3", "comment": "Malware payload (SmartLoader)", "value": "5ac6200ae6e1703ea25992fde339602d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "45d55117-223d-4a0c-ab2d-ee7b8196f29f", "comment": "Malware payload (SmartLoader)", "value": "b169daa90b9850235a725220584c61210c2339f9bf4b2b6726fc8e82133066f6", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "d839d3c4-8b07-4e11-8e8b-d93a1d05887f", "value": "T115C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "4ee8ed8d-6286-4e84-964e-db2a2c5ee881", "value": "12288:OA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpW+SFyorOIic/7MPT:Bm6Jj6ESfUxZ91kmY/99z8/FXicTQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776649570, "uuid": "ac1417c8-7bd1-4142-96f8-b0c6667f8aed", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "e7b44c50-2b18-437e-ac8f-3c596c03265a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4f3b1cc-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776649570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "b093c7aa-ed5f-4562-b0e3-af9fff1098c3", "comment": "Malware payload", "value": "daf7e36151dd9416b18f8a20b7efaff9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "192c854a-6c57-4a81-b77c-f32e8bb3b3db", "comment": "Malware payload", "value": "f538efbff6c53fffcbf507729f0b84092ff694e19a1343901a5ecde4c8085b7c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "14de2d11-65af-46ea-b6ef-ba7756d45ca4", "value": "T153B423CD64BED0A87B658DDA9FDCFFD30CFC4036AD7526F2A51C1A13A1C400B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "7b4e59c5-7108-4df9-9aca-11ec1637ff03", "value": "12288:SB/e4pqNFTFbEXkRDoGbDDGIabs/7iiEVwYg2l3/2Nyy:SBm4pgTroGTabs/7iiWw0Dy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776649570, "uuid": "b3e5882a-e63a-4df2-9f6b-87c7bd0e9692", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "44897e6a-1edc-4904-9553-f9e5a8902103", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4fcfe12-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776649570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "bb0db4af-0622-48b9-bcf6-8944238714a8", "comment": "Malware payload", "value": "81bdb66c145bd48b6e9352c70c6accae", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "4a0ce4fd-47f7-4ca0-99f4-c9e49fe55617", "comment": "Malware payload", "value": "d0054dcbeb298fc9e475f0ddd749fed401d41142018f255698b433dbe58f3285", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "328c457e-4f64-4fa3-9e5c-16b75bcca955", "value": "T128B423CD64BED4A87B658DDA9FDCBFD30CFC403A6D7526F2A51C1A13A0C400B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "6b1f0fa0-5a5e-43c0-9aea-33c9ba7a248d", "value": "12288:pB/e4pqNFTFbEXknDoGbDDGIabs/7iiEVwYg2l3/2NyL:pBm4pgTFoGTabs/7iiWw0DL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776649570, "uuid": "fb963c60-1510-462f-b155-10eb27d40c9f", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "43511376-bf88-4ce9-8bb3-9f69145176b9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5168eaf-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776649570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "d9882112-9ca1-4ec3-bb68-6c25e91f7abc", "comment": "Malware payload", "value": "6e2700c77fdd7c63a3378aeb7cf5d04d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "fa419383-384a-4892-83b9-889af3c3f154", "comment": "Malware payload", "value": "1ae3b2317215cdd87d7da92f2a5070a763a9f3aa312d9d1a9375b6e7c3b19c25", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "be463927-9764-40ba-8f88-dc890c255e11", "value": "T107B4231AF4D478CFD68ACDA394292C785F6C96C9CD122B7247C4EE9312442F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "6fbb2edd-0de3-469e-8d51-ff6239b3efb7", "value": "12288:BTibgSMFBOBSlqraKu7FxPbzJTVBU+8JM9hAC8Z3JVOBRkbKQDiUbpKK:IcSMFYQKkxpTKJM9mCw3JVOMWAPbpd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776649570, "uuid": "599401a4-b881-46b1-8699-04bb936da834", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649570, "uuid": "985123af-6a9f-4c33-8434-2eb44aaaefb0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd6b72cc-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776650470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650470, "uuid": "524f11a3-a852-4644-aebc-e70fc2bdc243", "comment": "Malware payload", "value": "364572e91eea1ae57dc042c7c0887b2c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650470, "uuid": "571c167c-6f10-4d6c-ab38-8ec10e22506c", "comment": "Malware payload", "value": "54d402ee25a34e07f469667f73be067dc5894c26a25fdbbff216366e2d168563", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650470, "uuid": "76409904-6e2a-4364-839c-e63cf5c6d498", "value": "T117B423F5AB506BCC9D20522F2F4A27CE19274B41B403C54A1AD2875A421FAFF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650470, "uuid": "d1fa4bb5-5651-4ca0-9001-cef6f0333e44", "value": "12288:qBRdpQ73iBVYWiCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUR:qHUw2Wz9XgbM0azTHiQIouD9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776650470, "uuid": "7538ac63-b2ce-4e14-84fc-1eaa981c40f3", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650470, "uuid": "3f0627ad-7d48-4495-95c8-01dbdf6f07eb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd775b87-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776650470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650470, "uuid": "7aa700c0-0be0-4bdf-bf0e-6e5646ca80ba", "comment": "Malware payload", "value": "28c9aa64957604633c4eb03b6c17de23", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650470, "uuid": "aef27191-678e-4c1e-ad74-4f00a3b3de96", "comment": "Malware payload", "value": "ddbd02d716f1724895d889a8d8af71a0261cb157c4b8836dce2fee64c47e5018", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650470, "uuid": "950c1d57-2ef9-4a23-b250-04b8a0579f1b", "value": "T17CC423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650470, "uuid": "f9ea4c23-a5a6-4672-984a-36b40acda9d8", "value": "12288:syBXIs7rM1kcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5o:RImQ1EEA/f0Za6TCXKBxeu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776650470, "uuid": "f6791e3b-96ea-4704-aef7-0f4508b2e33d", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650470, "uuid": "0e3d61b9-19cf-47de-9846-a3373da0f827", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd9b9021-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776650470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650470, "uuid": "8f73c0ca-4bf2-414c-a595-624bac998626", "comment": "Malware payload", "value": "a7161a8ec32b9f6e7c4d205bcb77a6f5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650470, "uuid": "775ce140-eaec-4f03-9143-dd72f5d96c51", "comment": "Malware payload", "value": "4948661c5e26477b30f2bb31af592b7ef7ca7160236d40a9391572c5ec7eb85d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650470, "uuid": "953d87b8-a758-4dc0-b02d-9b11612e3789", "value": "T175C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650470, "uuid": "2844b9c1-68b1-4cf4-b382-ec0162b44553", "value": "12288:byBXIs7rM11cqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5s:uImQ1BEA/f0Za6TCXKBxeK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776650470, "uuid": "380588d6-630a-4b85-88bc-1db01ee262bc", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650470, "uuid": "209300f0-8982-4778-b649-68478df422ca", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdc4169d-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776650471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650471, "uuid": "39fd02b3-2631-4d98-9df6-8ee993295469", "comment": "Malware payload", "value": "24949733c026d610775a1da070613451", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650471, "uuid": "cf1aa0e3-6e42-4840-97aa-6e7be1b342f9", "comment": "Malware payload", "value": "7d0bd74b25b04ac5224e2f397fefc0cf522a57fe075110fdd760710b6744c868", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650471, "uuid": "d0507e13-5390-491b-933a-f38c772b493b", "value": "T159B423F5A7506BCC9D20522F2F4A2BCE19274B41B403C54A1AD2875A421FAFF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650471, "uuid": "7addda31-0c9d-4c98-822a-0c1378efda70", "value": "12288:oBRdpQ73iBVYW3CwvEXgbvM0a4OTHiQIIFzuK9Gd9IUo:oHUw2Wy9XgbM0azTHiQIouDE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776650471, "uuid": "c2994200-0d14-454a-8b13-6cc342c250c1", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650471, "uuid": "33943ae2-2f24-4a06-ba75-f9b016456af8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce92a378-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776650472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650472, "uuid": "79341de2-125e-48dd-89dd-3c3eb9fb5189", "comment": "Malware payload", "value": "7775d8d054c00e0f730458e29a1b858e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650472, "uuid": "da9a9767-8d2a-468c-8472-7afb12a161f1", "comment": "Malware payload", "value": "bb93ba176d812e51758ea53c808f6d43b0491a40ccd7bd8bbda90948467c7fb4", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650472, "uuid": "93b845dc-12f9-4de9-a7d3-26a26a1472c1", "value": "T1C2B423CE5A286CAC5BE85E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650472, "uuid": "c623a9fb-8575-4062-a345-5cc6bc8d4f15", "value": "12288:7GRl4nbDDGIabs/7iiEVwYg2l3/2NHGy+wK8W:DTabs/7iiWw0KBxW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776650472, "uuid": "ae7d45ef-6599-4364-830b-05ac8b6a6a21", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650472, "uuid": "67ec12bd-8ae9-4dce-a68a-c5e3f5476341", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce9d4d38-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776650472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650472, "uuid": "35f44455-def0-428d-b02e-f39280b6cbac", "comment": "Malware payload", "value": "f6366b6dfea9be23299222a47abdb9d2", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650472, "uuid": "9e2a9c9c-949a-496a-b4bc-91e7e7fdfe9f", "comment": "Malware payload", "value": "3eb0be518c4ff8883976ae33abdc1644ac02e90152bc69e0ed0d62a1f6f3fc00", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650472, "uuid": "81802492-5954-4f9b-ab44-ffb9e14bd02e", "value": "T1EEB423CE5A286CAC5BE85E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650472, "uuid": "c2a32c7e-be2b-43a5-8efd-9a9371c1f61e", "value": "12288:3GRl4nbDDGIabs/7iiEVwYg2l3/2NHky+wK8A:XTabs/7iiWw0KfxA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776650472, "uuid": "48afcf0a-1b0f-4834-a884-2c6a62a3d50f", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650472, "uuid": "12c49f1c-dcab-4477-a57d-e51c661b61ae", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfca51c3-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776650474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650474, "uuid": "9e1e974e-af30-4fe5-9103-f59ff659030f", "comment": "Malware payload", "value": "468eeec5fd5c6285ca6a636c93aee3ae", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650474, "uuid": "62374017-9496-4c09-ac08-3b02dcfcd349", "comment": "Malware payload", "value": "33e1d0f74995473c6247cea92f2b1a0fda354769daac8af532b48a25998ce9b9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650474, "uuid": "465bb147-31e3-4eb1-abf2-266b213d03cc", "value": "T1E3C4231DA0587B51F64B6A78B323CDB09B29D03FD219C388A08407399B5BE5765CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650474, "uuid": "cdc27b80-2146-4516-9ee9-269c57b6c0f1", "value": "12288:4MU+0xq75aS9iYIp6cP/G2Bku6zXLSHXP427bB:M+J71vI/GzXuftHB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776650474, "uuid": "e05bb9b5-6bdb-4669-9014-e85fe7b3523d", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650474, "uuid": "4d13089d-351d-4274-a3bb-bc36ba6f974b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfcab6c6-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776650474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650474, "uuid": "e82195ec-ab5e-489f-a1c7-43cde2267849", "comment": "Malware payload", "value": "8944ae9833932ce0177b74b7b20b989d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650474, "uuid": "a9359104-8d70-4f3b-8523-0cbad3eb2b32", "comment": "Malware payload", "value": "c9ebb1983c2c7bb96df4c1bf59c0f4071dacd9e4cd9acecaa4f4045cd5eff40b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650474, "uuid": "79bab1a0-b023-45a1-be25-c53cbe12568f", "value": "T11955338B817C29C44F7D0E52B6EF451C62284EFC1002097B6B6644AB753E3DBCAB59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650474, "uuid": "d0721ba3-99b3-4b95-8982-284f91c3098d", "value": "24576:EoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRII0:EoZ9bq+MmMEL+hcjXHC/wnwdG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776650474, "uuid": "949597b8-2df6-4ac6-ab06-e17b8823817e", "value": 1380594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650474, "uuid": "05892661-342e-4071-9e61-7726f4961e6a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0000fa7-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776650474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650474, "uuid": "4c4f1f25-c98e-46f6-b967-a01c2df72582", "comment": "Malware payload", "value": "19a5c3ccdff399cee842fdbf512cf583", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650474, "uuid": "841f6301-695e-4837-af51-8eff1275c009", "comment": "Malware payload", "value": "1d86848202376b1100b50723344ca4d6342af7726c0419cd608daf927e201a26", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650474, "uuid": "5bef6f80-a60b-495c-ba7b-1fb361235a4c", "value": "T187B42369227F71900C7543A94B468124FC3E5E72AE00DD93EDDCAB4D8F5BB199638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650474, "uuid": "e4fa590f-6c93-44e6-9e01-dcdf5d849982", "value": "12288:V7JZAaFpeOqO3g/ALyYG0ZaDajTCXMO8xzDOe3We:JLpeEA/f0Za6TCXKBxme", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776650474, "uuid": "e02d41cc-9f37-4eb5-8ad0-aff4958f8fd4", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650474, "uuid": "59bff2d8-3d7a-4c02-b14e-340b93f9f373", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0009437-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776650474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650474, "uuid": "d8192717-ebda-4e3e-a9ff-5c71fee7b98e", "comment": "Malware payload", "value": "81e736344d1d9b07996797722cb90215", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650474, "uuid": "c7d96343-a0bb-4ad5-a94b-c9039cab9b29", "comment": "Malware payload", "value": "c784a5c64fac894f2919b002e25e11edfafb935f6d281fe2bcff45bee9967648", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650474, "uuid": "1bae2873-eedb-4394-94b3-f0268ec2974f", "value": "T1E1C42304340741D5835A2B1EAEC4E6E0BEB5A0DBFA1CF940AADD7ED06DE92A177C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650474, "uuid": "a66f0861-acf7-478b-9e7c-6d19620bbd96", "value": "12288:z6wlOMWROC/FTeHo22Qm7NzofOr68mPeA924EwCp:r4MQOC/gHozN7NzomW8pA9e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776650474, "uuid": "0a1a0488-3fea-4b29-873e-eb9276aa8146", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650474, "uuid": "11f87778-3b69-48af-9024-9ddcf7073746", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0292107-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776650475, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650475, "uuid": "0b77c970-3646-455e-91e3-38c847bb6d04", "comment": "Malware payload", "value": "113f9110a43c544a262d7ce231c83271", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650475, "uuid": "06327603-ef88-42c5-9627-b6f3c0ae2bd5", "comment": "Malware payload", "value": "8e4482059e723766d29554b9655de2832973daf5948fdc878613329420ba42ab", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650475, "uuid": "e3e7917a-f494-4f1a-a7d1-3448e1dd94ab", "value": "T1FAB423CCB6CB88CC55A63134E6A20B4154DBBF33B2DF7391B5B849700DE6A6710297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650475, "uuid": "ae40d107-e1a8-454a-812e-404cbd182bd8", "value": "12288:0wsK8MG1KnyC/G76u6M0gXar5qduPct2ien3P+beW:8KGcGmuwjnQen3PwD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776650475, "uuid": "3be89d87-dd49-4aa4-a57b-6789d9bbf850", "value": 515391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650475, "uuid": "19c22acf-7a06-4172-8021-3113c8844329", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d151096-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653288, "uuid": "658b62ab-0490-457f-937b-62c454f7d2e0", "comment": "Malware payload", "value": "0a567a7a3d0245a0700e43a952084afe", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653288, "uuid": "92289a3e-b944-4714-b4b0-04dc0c9d2d96", "comment": "Malware payload", "value": "a338d37fe18143a63e40664f141fd49d8ab3037e8b652658827eebfd240c0500", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653288, "uuid": "029da2da-4496-4e0d-942b-15f1d2d75578", "value": "T122C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653288, "uuid": "0d875121-5828-4217-bb8a-53e2dc26e656", "value": "12288:L+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byYH9I1P0QKw6FEK:L+QqldA/TSO713u7xnYH9IaQKH7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653288, "uuid": "40f067a4-658c-467d-a033-dd6d471b2a82", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653288, "uuid": "b6a34723-0dff-44cf-83c9-88d3a4b5abfa", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d1fad11-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653288, "uuid": "b045d575-8a4d-4b90-97a5-919944662b39", "comment": "Malware payload", "value": "3efb109ff1e7a709b9dfe1fc02eeeb54", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653288, "uuid": "445e5d4f-e33c-46b0-95e1-2056d04a4a74", "comment": "Malware payload", "value": "8906da6017bd6386dd2e5fa29cf44ef51b1ecf85e322184b3e073836b9bfde51", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653288, "uuid": "d486f534-b7fa-4e93-9dfe-7598d6bca491", "value": "T1D9B4231AF4D078CFD68ACDA394292C785F6C96C9CD126B7247C4EE9312442F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653288, "uuid": "fc6fab67-f102-4343-ba11-fea663cb8360", "value": "12288:xTibgSMFBOBSlqrxKu7FxPbzJTVBU+8JM9hAC8Z3QVOBRkbKQDiUbpKQ:4cSMFYvKkxpTKJM9mCw3QVOMWAPbp/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653288, "uuid": "55e50d82-aa56-4e68-a124-54c927b85422", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653288, "uuid": "a3a9b1b8-c9f6-4ebb-a7a6-381c4140f18a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d2c0d8c-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653288, "uuid": "b496e7de-0c8f-4487-95ee-08ef689a62ee", "comment": "Malware payload", "value": "760de8991402a34ea3199cfc5bf5956d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653288, "uuid": "9378bbec-f09d-4854-887c-acc3afe8ad46", "comment": "Malware payload", "value": "e4322ce938429fecceb58b12d95597bd8fb5bb585530c6d857b3463ff3332e07", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653288, "uuid": "ba36ec81-6e92-4235-a384-fb04073be703", "value": "T161B423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072896DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653288, "uuid": "0b18b66f-0750-4f2a-abdb-adc2837916e3", "value": "12288:Ikmht7DrvdyiYCCH1oHF9nJ/qjuy7goJrrzTPwk2:IkmHzMRH1ELnK7goJnny", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653288, "uuid": "44590288-cc47-47b0-a929-ba5df0c2d475", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653288, "uuid": "b0e4a1ee-c02b-49fa-81fd-c6f923be700d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d40f5c7-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653288, "uuid": "57ce2509-0dd8-4c0c-8924-62dfa02f8d7e", "comment": "Malware payload", "value": "f3e0fb57216336e3684eedf37156f4a5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653288, "uuid": "1a1a14ad-37eb-493f-b352-146aad1f5a3b", "comment": "Malware payload", "value": "735d0353669b5fb79e8f759f99b3e9ce941cb5d6cf477af1d0d1587c60c4bcec", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653288, "uuid": "f238135c-c072-4557-b689-78a55618efc5", "value": "T1FAB423CD64BED0A87A658DDA9FDCFFD30CFC403A6D7526F2A51C1A13A1C400B64E95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653288, "uuid": "2e3fe1a3-f817-4f2d-8983-66bb257559b4", "value": "12288:RB/e4pqNFTFbEXknDoGbDDGIabs/7iiEVwYg2l3/2NyD:RBm4pgTFoGTabs/7iiWw0DD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653288, "uuid": "9729fb8e-aa57-4102-8876-3cfe4f22baeb", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653288, "uuid": "b007c524-f9e0-4d2b-b749-21e86790d0cb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d59a98b-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653289, "uuid": "b7ae4cae-81cd-40c7-8d34-705b586431f9", "comment": "Malware payload", "value": "660f02c42220016ed86d66a16664cef9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653289, "uuid": "d9b0c638-d4ce-4763-b30a-d886239917e4", "comment": "Malware payload", "value": "248dc94fa36d4f9c0aa25fc7f950943abc70a9db0877706a3a30cbb4b2aa3d8b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653289, "uuid": "d2efd38c-548c-42c9-a0e9-d6ccf0854340", "value": "T17BC4238BA3FE845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7525", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653289, "uuid": "f2b56dcf-673c-4630-90b8-ef30b919abb4", "value": "12288:L+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byWH9I1P0QKw6FEo:L+QqldA/TSO713u7xnWH9IaQKH1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653289, "uuid": "d018ec37-80e4-439e-82d9-ec18fd916917", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653289, "uuid": "6177ffc9-f150-4783-b614-337e4eeec1e3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d6d9ac2-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653289, "uuid": "fee93944-e8fe-48ac-bdcc-7990fd543ee5", "comment": "Malware payload", "value": "a333dccdf4b0c65fd2f4e4ce554fcc7f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653289, "uuid": "e824b5b9-13a6-45ec-bd8a-ecf4c802bb83", "comment": "Malware payload", "value": "7d84a189bcf05393ccd4ba49b7ce5eceadf04a7230bb37a4187865ca8991cbb8", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653289, "uuid": "0c2f7115-90b9-4c80-a5ef-16b9c3bad8de", "value": "T135C42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653289, "uuid": "22b3e432-05b5-4326-8d18-7367697e8931", "value": "12288:z6wlOMWROC/FTeHo22Qm7NzofOr68mxeA924EwCX:r4MQOC/gHozN7NzomW83A9A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653289, "uuid": "875ed48b-4c4a-4b6d-b016-49ca4ebe2319", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653289, "uuid": "a3d3be66-6270-4d23-9b0e-2d5296f24dca", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "602addd8-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653293, "uuid": "77af2af5-ea8f-45f0-9eb7-8512d2979592", "comment": "Malware payload", "value": "e2213239cf01ffeff8b519e182323eb5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653293, "uuid": "26024ee2-2d0a-441c-9ee9-16fa5df1bbd4", "comment": "Malware payload", "value": "742031219299f9eba454483c5ce2eea9656b5cdaf06c3d00fa45504507752dcd", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653293, "uuid": "41adf86e-4b27-4e37-ba3d-348704ad10ac", "value": "T1A9C42304340641D5835A2B1EAEC4E7E0BEB5A0DBFA1CF940AADD7ED06DE92A173C15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653293, "uuid": "0d386981-d5a8-4f32-83a1-5f7522afe44b", "value": "12288:T6wlOMWROC/FTeHo22Qm7NzofOr68m8eA924EwCG:L4MQOC/gHozN7NzomW8yA9h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653293, "uuid": "7956b1d5-785f-4442-8c03-6e7af1b792e7", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653293, "uuid": "f6430f9d-fd8b-4680-9276-6f3fdc59ec0b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6034e0f2-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653293, "uuid": "d6a37ab1-70f7-4936-a683-7090bcfa71cf", "comment": "Malware payload", "value": "ae2748ee0abb7630aafe855475c3a0e9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653293, "uuid": "7f3692cc-c47d-4dcb-82aa-b47a11ac2d45", "comment": "Malware payload", "value": "78b2baa7ad7b0e0f5d662dbb6831e759e3c503fbe19a28d350fc8781311f5a8e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653293, "uuid": "32449832-b272-4dee-a396-3ea06a1af3b6", "value": "T1A9B423F5A7606BCC9D20122F2F4A2BCE19274B41B403C54A1AD2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653293, "uuid": "61838547-b178-47c6-b101-ef28db9c6965", "value": "12288:ABRdpQ73iBVYWNCwvEXgbvM0a4OTHiQIIFzuK9Gd9IU+:AHUw2Wo9XgbM0azTHiQIouDC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653293, "uuid": "fe50d9ab-606d-436d-b3ee-91f9e9397e2d", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653293, "uuid": "416b0f19-aeb7-4441-b44c-d12805950d4a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "603f3d5f-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653293, "uuid": "a817d3d2-399d-4ed1-ab78-35c3b9d5087c", "comment": "Malware payload", "value": "c0f06b52f658812381ba88091feeb344", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653293, "uuid": "6b320729-cda4-4649-b024-b02a6865066b", "comment": "Malware payload", "value": "b3612d0c44e7452e68f513d501bfd47be6ba209138756dff3a5ec0865868d6b6", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653293, "uuid": "bec65755-c749-4a4b-9626-2be0b1e696bd", "value": "T10AC4231DA0547B51F64B6A78B323CDB09B29D03FD219C388A0840B399B5BE5B69CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653293, "uuid": "27a3a17a-29d2-4e01-ab13-ddcd394d1717", "value": "12288:EMU+0xq75aS9iYIp6cP/G2Bku6zXLkHXP427bn:g+J71vI/GzXgftHn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653293, "uuid": "cd86247d-f4a3-4afe-9d5a-7fcede27d029", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653293, "uuid": "894f6eef-6a7c-4290-a23e-ac301525431d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60a12490-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653294, "uuid": "e1b8f5b2-20dc-44cb-9489-d7972f9ad273", "comment": "Malware payload", "value": "7df89c5dba09470facc535804e47e4cd", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653294, "uuid": "e1adee38-fb2d-4a2e-82ba-817dada52f1d", "comment": "Malware payload", "value": "bf6997563fa29ea359cfc6331718754633eab40b491f49f71c3fd38bb61e338c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653294, "uuid": "4e32b11f-7908-42c1-81e6-b7a7c2ec6414", "value": "T12EC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653294, "uuid": "de3c5b31-7bdb-49dd-8045-71f19e8b7c00", "value": "12288:j+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2by7H9I1P0QKw6FE/:j+QqldA/TSO713u7xn7H9IaQKHO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653294, "uuid": "fa339b84-b039-4871-8f9b-e1fc94d8a8a7", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653294, "uuid": "0289f2b0-cbc0-45e8-8aaf-2dda68a56939", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60aa12a8-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653294, "uuid": "85bffd1b-f79a-4471-b77f-e20ac302483d", "comment": "Malware payload", "value": "2b174b45e4ea3c53632535f3938014e5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653294, "uuid": "447c85a8-7357-41c5-9c13-ad3bf1da3f46", "comment": "Malware payload", "value": "5828b8b1e9be3239c05864bf5cbd445163429458771b094218686d18120c8ecc", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653294, "uuid": "0a94405e-8c63-4b47-953f-bff6626c9c8e", "value": "T149C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653294, "uuid": "1553e4f6-e00f-4214-b174-66dcd5057d7c", "value": "12288:H+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2by0H9I1P0QKw6FEu:H+QqldA/TSO713u7xn0H9IaQKHT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653294, "uuid": "894017a0-1646-4aa0-ad48-280d3507af30", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653294, "uuid": "996f1587-c439-49a8-a2b2-e8b1fca561df", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60d235b0-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653294, "uuid": "95debf87-933f-42b9-90ac-eefbc2c0efe6", "comment": "Malware payload", "value": "10a8d83e3e7efb7c78c4aada633af8f2", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653294, "uuid": "c30e3eca-e568-4f77-b17a-45a5c49dd298", "comment": "Malware payload", "value": "835b3ed8caf6fc014582561eba4ad46e954abaffa872c9ac9a8466ab22df283f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653294, "uuid": "b1b1f163-e4cb-4793-a15a-61a91b7aa298", "value": "T1E2B423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072896DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653294, "uuid": "b6a45d83-0909-4d06-8777-7cef8fb0b5e6", "value": "12288:rkmht7DrvdyifCCH1oHF9nJ/qjuysgoJrrzTPwk9:rkmHzMQH1ELnKsgoJnnJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653294, "uuid": "357602cf-d460-4ad5-b187-596e75db780b", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653294, "uuid": "d70192d1-3102-4fbf-aaab-136915cebf1a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60de815b-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653294, "uuid": "e7e75f39-5bca-4e36-ba47-2a67b20bdf6a", "comment": "Malware payload", "value": "c5061575a4404106bf1dbabe8c084ec8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653294, "uuid": "52761bad-43f4-43e0-913e-0b3c01b4df10", "comment": "Malware payload", "value": "b3365db4097691644dac614d8197addebb967168281b54e45231268a657e552e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653294, "uuid": "5f849a1c-ccc9-45df-a20b-4758001aa881", "value": "T1D6C42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A173C19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653294, "uuid": "4fefb9bf-f870-41cd-bf19-d1405c369157", "value": "12288:D6wlOMWROC/FTeHo22Qm7NzofOr68m4eA924EwCC:74MQOC/gHozN7NzomW8WA99", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653294, "uuid": "11d0da4a-d3de-4cef-b105-46c260b22473", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653294, "uuid": "2315ffc7-0756-4078-89a9-2339e86803fa", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60e298b1-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "4eaac373-222e-4988-be97-aa952ab67482", "comment": "Malware payload", "value": "4c7fc0eac7404b49fa7ef370a2210fdb", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "f16c38d8-6335-4d63-9e1b-840d3b3bb73c", "comment": "Malware payload", "value": "fb3deed0cdbd3701da2d7622b6953edc42e14b31850e4f85dc11fe888b55a71a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653295, "uuid": "dac5b587-7d3d-4567-9379-4188f9733974", "value": "T18CB4231AF4D478CFD68ACDA394291C785F6C96C9CD122B7247C4EE9312842F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653295, "uuid": "00def24a-fca9-4a6f-b372-4b09191d4d3f", "value": "12288:pTibgSMFBOBSlqrzKu7FxPbzJTVBU+8JM9hAC8Z3qVOBRkbKQDiUbpKo:AcSMFYdKkxpTKJM9mCw3qVOMWAPbp7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653295, "uuid": "10e9e407-322f-4cf2-bd66-167f46df2133", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653295, "uuid": "a69ad5c8-61ff-4b2d-9216-161c5009390e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60e94672-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "909f1eb4-fe3f-44f3-81ce-c606b9154111", "comment": "Malware payload", "value": "27484149b1d88d1882d486c7c01e3e4d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "1b179bcb-3e25-434c-9e6b-8ec4e335461f", "comment": "Malware payload", "value": "5790a672b0a0b5fe4bbbd632afc6be47b9a9b8e840303613eafd529fa12cfcf1", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653295, "uuid": "5c9ffa57-34b2-4764-81e2-a117c3bdcf8e", "value": "T1AAC4231DA0547B51F64B6A78B323CDB09B29D03FD219C388A0840B399B5BE5B69CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653295, "uuid": "79bbf955-18f4-4e5c-bf3f-546a45c409d3", "value": "12288:GMU+0xq75aS9iYIp6cP/G2Bku6zXLpHXP427b4:2+J71vI/GzXNftH4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653295, "uuid": "645ce43d-c3f4-47b1-939e-a90d0d94cbcb", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653295, "uuid": "0843baa7-16a3-4683-9386-a8a56b73d288", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60fe23a6-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "02d78a06-ce04-4b36-bd10-b120d6318a6a", "comment": "Malware payload", "value": "a59bbc1184c9b55e8d037dde63131b82", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "96b67365-0057-4369-aee7-1f82a3f15dd9", "comment": "Malware payload", "value": "71215057655b474e7e9c8ba31f9df75b33412af3c5c70ee5d3dc776c49a6279b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653295, "uuid": "66178d22-fcc5-4144-95d7-4afc2c59d125", "value": "T125B423CD64BED0A87B658DDA9FDCBFD30CFC403A6D7526F2A51C1A13A1C400B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653295, "uuid": "8966c865-4202-434b-900e-dc74aa77b11b", "value": "12288:wB/e4pqNFTFbEXk1DoGbDDGIabs/7iiEVwYg2l3/2NyY:wBm4pgTXoGTabs/7iiWw0DY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653295, "uuid": "2f258e27-c290-4fcc-a42d-f9e49688b468", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653295, "uuid": "1b8dadec-032f-4a30-bf2b-4bfd0f7878e7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "611100d9-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776653295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "733fa88e-b812-476a-b156-aa9f3a387f19", "comment": "Malware payload", "value": "b32c3556f224e5d67b44759a47cfce26", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "6421b3c2-94d1-4625-bafc-3ef021ae5a6a", "comment": "Malware payload", "value": "0352f041574ff5f72bfacb59f8fb0277ef8af0946df45e470f1db3fe7387adfe", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653295, "uuid": "0c631211-e400-418c-b1b1-32e651ffc901", "value": "T14EC42304340641D5835A2B1EEEC4E6E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653295, "uuid": "d866924b-ca5f-42ad-9d4b-a5a1eb1fd257", "value": "12288:j6wlOMWROC/FTeHo22Qm7NzofOr68mYeA924EwCy:b4MQOC/gHozN7NzomW8uA9V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776653295, "uuid": "a8417dcd-dc1c-4450-9367-a5822a4e28a8", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653295, "uuid": "68f983dd-a642-400a-a96c-73bfa6143ad9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13965151-3c72-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776659607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776659607, "uuid": "b467934d-b917-482d-bfc5-436e5bd34e53", "comment": "Malware payload", "value": "94a1911b8f7d6534d35034ba55435c0e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776659607, "uuid": "46a312be-8127-432d-8cdc-affe8476916e", "comment": "Malware payload", "value": "d348ef77a3d6bc14afd6ad29fd388d3e1c14c0a391c63dfea7307fd751124ba9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776659607, "uuid": "5619cc4f-c66a-4663-aa2a-4f05b0b42391", "value": "T165931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776659607, "uuid": "5f205da7-9bab-42dc-ba58-76f1551f55b3", "value": "1536:nByp1tF/uwMmAIa14oXoKIMepeV7tb73WdxCrCitkb5fv2v05xLkrJK10sCxKUoh:n8iIL0GitkbFv2v05xLkr80sCxboIy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776659607, "uuid": "3c06a9a3-623e-4ef7-ac44-cb1cc4391475", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776659607, "uuid": "fa6c0f69-8890-4464-be3b-92e2f6b105be", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abc4fab6-3c73-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776660292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776660292, "uuid": "1b85a64f-732a-4255-8c85-ad66e50ff0f3", "comment": "Malware payload", "value": "d3e9f51b38df4fe74debf66ce4aa718b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776660292, "uuid": "6bf776bc-e319-4fd5-8eb6-bba893671d06", "comment": "Malware payload", "value": "dd8db43b4dccac1fc32905a706bd744c907b19470caa4c86188aa03ba0557600", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776660292, "uuid": "758efe84-c7d6-4cb8-b629-6e5c7f632bd9", "value": "T115D4D02A8D5D1FA8CDDF30FE18B6124ADE2EF04526D46F0F49EA627049577062E312", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776660292, "uuid": "38fd1716-aee7-477f-949c-542f642edb3c", "value": "12288:PluP3dlU5p7AlKzPgQnoQY6OD/utmsO8uBT97hHtn+d:PgFC5mszoSEfBhV+d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776660292, "uuid": "d73adacb-68c9-4b16-90ee-84ed0fa43ca5", "value": 624436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776660292, "uuid": "2c7d74ef-3aae-42b2-b5b2-b4aacb08e594", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34384c00-3c77-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776661810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776661810, "uuid": "c2d50c45-fbd7-498a-b0ff-4fb69ada9d68", "comment": "Malware payload", "value": "a5c27f1d2e45f095e2740cf35bee2aac", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776661810, "uuid": "4b8b3065-14e0-4d12-87a2-5d1edc30373b", "comment": "Malware payload", "value": "d25d98a9a9d20b5cb1f756b5490022a7fb1758ce36d7f243080e8dbc716c900e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776661810, "uuid": "99213f17-9c50-4701-b41e-7a13ab7faece", "value": "T18D8309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776661810, "uuid": "b5716215-52a7-458e-9e1e-fd57eee4fafe", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnPWaOVN/:XEKltp9txAX/yr2pbPWbVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776661810, "uuid": "f45a3cd2-75e5-4289-9015-354e79887b1f", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776661810, "uuid": "a340a951-3d09-460e-b1f3-249f449cd7f6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "814f7b04-3c77-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776661939, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776661939, "uuid": "35e2c94f-275a-4b87-b3c1-0dc08d2a1d9a", "comment": "Malware payload", "value": "8b577ada3dabec841f0e6fbadc798c32", "object_relation": "md5", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776661939, "uuid": "e7790d88-50d3-46a7-9dfd-1098bbe213f4", "comment": "Malware payload", "value": "9679fbaf19c262d372b814f3225bfab4dc26cd6b55ed5a84650c3f24a23fdce6", "object_relation": "sha256", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776661939, "uuid": "83ab83f1-d807-4bb0-aa81-c6848c537ee0", "value": "T1FDA83338811A1C3A4E2DB0BB358C5695F7E6AC97AF8E73DD4059C310896C7A443EE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776661939, "uuid": "54f06cca-e8ae-42c9-a6cd-3df8ccb662c7", "value": "6291456:kA1gh6nGbTrKI6wYNJQLlTAN/uO5GwEtOm9Atat4:IdTrwFNJQLSN2OYwEcmPt4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776661939, "uuid": "45ba6ee9-0bd4-4915-b4a0-51e8bb3fbfd5", "value": 207714742, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776661939, "uuid": "2a322f5b-a533-4ca2-b098-845e8a51faed", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "024264fe-3c78-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776662155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776662155, "uuid": "34739709-39bf-4419-9d3d-c984a2c53cf3", "comment": "Malware payload", "value": "6ff1455eae2a6b486a024ea4c5f9ef0d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776662155, "uuid": "63afb3f0-4bc9-4fe5-ae88-dfc09359bcca", "comment": "Malware payload", "value": "e45f4493e977488de68d30df55bf9a929f3867967efdb778113d8e54e4abb179", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776662155, "uuid": "09e508f1-cb64-4ec1-8e39-294f1893a24b", "value": "T10F32B0DCFF02873078B80BCB76602E3C7A5DBDD8AE766926BC8C0161007779D16653", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776662155, "uuid": "26f40026-2027-4d97-a874-ddce1123c10c", "value": "192:MFzrX8A7wSYOD9sZKbMRsnWaFB2vIbYm6UkXeDGvNfJ050WJi2V:2rXr7psZYMRI2gK/X8ENfJsJPV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776662155, "uuid": "76e79ab0-7c84-4d89-9e54-a32dcf394a0a", "value": 11520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776662155, "uuid": "8a5ecea8-0445-4187-813b-97b296a9ea76", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "897c0bb9-3c78-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776662382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776662382, "uuid": "840cabe1-0e0f-4259-931c-6578dd2e8e4a", "comment": "Malware payload (Phorpiex)", "value": "a437588684620a52e2f978355a581b3f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776662382, "uuid": "3cbd18fb-a565-4408-9ec3-4b468a69fafa", "comment": "Malware payload (Phorpiex)", "value": "0693d1659ff12cecfcc8ac404bec27c0eb9e2251c15a2049dc5e91268bf72e41", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776662382, "uuid": "f6d4ac8f-6b49-4e3d-b163-5f53cb9df143", "value": "T177823B0FB9424216D0D200B49A76867BD97998B637C814EBF7D08AEE1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776662382, "uuid": "b756166b-f081-4e59-9764-87061aacea71", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776662382, "uuid": "8ee6935a-d5ee-4eba-82f9-d451d0bda5ce", "value": "384:QI78VGQic1Kwvw077u9NHu/gBhav8U9cg:BAE0769Zha0U3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776662382, "uuid": "81e92d72-f770-4f96-ab5b-57c6099e554a", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776662382, "uuid": "ed405b9b-fb68-4743-9a2b-5a27fc6a0e07", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e571c9d-3c7b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Tofsee)", "timestamp": 1776663598, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776663598, "uuid": "07d4201c-8dd7-4e17-a718-97d61c6e1fae", "comment": "Malware payload (Tofsee)", "value": "d74cb7763d0f1101da4f18f1226451dc", "object_relation": "md5", "Tag": [ { "name": "130-12-180-119-8080", "colour": "#cb7cfd", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776663598, "uuid": "e5e10cfb-82f3-4a85-a3f3-42d1113f1495", "comment": "Malware payload (Tofsee)", "value": "345567816147141c9bb71b498cc183cc8bbd33787eec27c83579cc0598348f14", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-119-8080", "colour": "#cb7cfd", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776663598, "uuid": "b7e95b85-82b6-44bb-a544-8e0d2ebd2b1a", "value": "T197D60237B38A653EE07E5A365AB2E210543B7621AD138D1BD7F4085CCF261A03E3B6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776663598, "uuid": "bb6b6a56-52e2-4a2f-8912-e1a65b68dd0e", "value": "88016fcdef7f227c62171d0afad9aae4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776663598, "uuid": "212978cd-0c41-4b8c-ac18-be426d4d83ab", "value": "98304:jL8NckK2/XPeI9EWkWHcv+yjn/lufOe5:yDfPevPW8myz/lu5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776663598, "uuid": "b1908737-9f3a-492d-982d-ddd9b9328b07", "value": 12667278, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776663598, "uuid": "e755a9d4-ad48-44ee-8d66-cf8ec17de706", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad33cb30-3c7b-11f1-bc00-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1776663730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776663730, "uuid": "a1f1e2a7-6433-4e04-a657-d566c42aa103", "comment": "Malware payload (ACRStealer)", "value": "1c159e563555fb4cf7650c7ffc6d9cbf", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776663730, "uuid": "76af9355-8dc1-4d3c-a02d-86e17e1a018a", "comment": "Malware payload (ACRStealer)", "value": "a4506494fdbdd262262d6e954f0a7563560cd968cdb515d608b86648e0ba5fc4", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776663730, "uuid": "7fa0a6ff-7d06-411b-a314-27540a5c21e6", "value": "T132168D1BBCB95C6AC09AB13484736605F665B8441B2317C71AB0B6382F3B3F15BF9B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776663730, "uuid": "83ce682b-f263-4ceb-b943-f27434a73936", "value": "2933a9cd50b01d442600e145b1a257e0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776663730, "uuid": "876a9a41-a18b-4f73-bc38-c7c3b9cd92bd", "value": "49152:djZ9yzZ0mmZxvm2VsYCWq4AK14dzLLBYRjmQch4Ua:dnmseX50p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776663730, "uuid": "6672a738-36ef-48ca-bad6-7dbf0807f720", "value": 4334568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776663730, "uuid": "9b3fc867-317f-402a-b1d7-5a873bf97de3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1af40934-3c7c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776663915, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776663915, "uuid": "62e538d0-4764-403b-849e-3d093af48441", "comment": "Malware payload", "value": "1cb239e9808327f1d6f58e20c643a8a9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776663915, "uuid": "517be630-6cd1-4f9f-8785-3cf9330472db", "comment": "Malware payload", "value": "b526a8b446e4663c9554d76956e6127ca951e399cc2c1ce17f563cd6a58018b6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776663915, "uuid": "92704b4c-0b81-4a36-a2cc-0b6e599e60b6", "value": "T1C434BE0988CE49190C0EFF49668773E9DC2A3ECE0B6658DC1A75CF7C895F30A91D0A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776663915, "uuid": "524de13a-8ccb-4829-8242-8225f484f92b", "value": "6144:j60s4cm/U9CDeXU95tZKdDNJQFhinihitHqFgz:5csyXqzEdDNJQFEniAZj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776663915, "uuid": "b86be0cd-2c7d-47be-bd18-a42191671c3f", "value": 239679, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776663915, "uuid": "5a1df6e2-4151-4040-951e-8c421da4daaa", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0771dbbf-3c7d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776664311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664311, "uuid": "25074d0a-6c0c-4a57-b47f-48ed5277297d", "comment": "Malware payload", "value": "c8e44dbd9e9631b0e2d34858760a4c4c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664311, "uuid": "bcda240e-99d1-4b48-abb9-45facdbef8aa", "comment": "Malware payload", "value": "e9bd67c52174901184c775269e60e3d3e3aad376e7c6f7050d758f31cec658e7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664311, "uuid": "95f004c0-f100-49f1-802f-0b49ad0a8e22", "value": "T1E493E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA623895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664311, "uuid": "5d00937f-50ba-4290-b897-3f9e6a633ba9", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXKIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYP1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776664311, "uuid": "2def3fa5-5c78-449f-bab1-371c99b71bc8", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664311, "uuid": "1f7a0a60-0114-4e3c-ac3c-5f43bb865292", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776664627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664627, "uuid": "51027126-58b9-421b-be1b-68f3b3f9ffc6", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664627, "uuid": "b9789f90-9a59-48ad-9da0-318feb4ff8ae", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664627, "uuid": "d9612428-7274-42d3-9016-b3b705f9b7d9", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664627, "uuid": "1c800cb3-3993-4192-abd7-5e104f5dd24d", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776664627, "uuid": "640a3f2a-0cfb-43ff-b09c-d027931254c5", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecdc1127-3c7d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776664696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664696, "uuid": "faca769b-eed5-42a4-8238-afaf38c732aa", "comment": "Malware payload (Phorpiex)", "value": "1690fb52a06e7081ab0fef73ffd4da1b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664696, "uuid": "9ce1fd34-2b33-4ccb-b9c0-5f413000911a", "comment": "Malware payload (Phorpiex)", "value": "0bc6aad1faad13f94a2bba6a927a648fc49327ac224d0abe51530f91eb2d1a1c", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664696, "uuid": "e535b1ac-c719-4f4e-8620-8a07d8c0fe96", "value": "T128824B0FB9424216D0D200B49A76867BD97998B637C814EBF7D08AEE1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664696, "uuid": "3b9f31ef-bab9-4ce7-bf1f-770e852fe383", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664696, "uuid": "1cfc34f3-bba0-40dc-af00-4ae946d66167", "value": "384:eI78VGQic1Kwvw077u9NHu/gBhav8U9cJ:jAE0769Zha0Ua", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776664696, "uuid": "982da94a-d141-4583-8d68-6fdf687a1dc3", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664696, "uuid": "91f77bd3-e5a4-42ce-92c4-c4f9a60c4267", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "189a2a43-b7bb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1776665217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665217, "uuid": "536d2b61-e23b-412b-816e-2eb37e17583a", "comment": "Malware payload", "value": "e89f75f918dbdcee28604d4e09dd71d7", "object_relation": "md5", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "APT", "colour": "#cfa990", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "DarkGate", "colour": "#180653", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665217, "uuid": "6eb2935e-ec79-4716-b2b5-1c2f6afefe73", "comment": "Malware payload", "value": "6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023", "object_relation": "sha256", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "APT", "colour": "#cfa990", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "DarkGate", "colour": "#180653", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665217, "uuid": "9a09049f-3e42-491e-801e-737b6e676c00", "value": "T1EEB092DDBC61E48018E535511EA3B60D146A22EBB9018B4018C00836A96035F8D0AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665217, "uuid": "3c5c0a6a-5a1f-4676-9fe5-fd8c1669726c", "value": "3:PouVIZx/XMn30EEBuvFfD0OkADYyT0NV9kBbZWM:hax/XW3/p5mmYyT0NVuB9d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776665217, "uuid": "b8981b81-e7b3-4e4b-a31a-2e83d65f034a", "value": 114, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665217, "uuid": "78285ec1-ac0f-4ce7-a0e8-5f53c70c0122", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26340002-3c7f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776665222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665222, "uuid": "81005236-e0b4-4285-a7d1-e331bc38ff56", "comment": "Malware payload (Phorpiex)", "value": "2598d0d556987883486bbe0462fbdc28", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665222, "uuid": "2fda1ccb-ea9f-4cd9-b5b3-84150dea2040", "comment": "Malware payload (Phorpiex)", "value": "30c1114e05874981661292fcca63241571eb0186175fcddc61cbc99fd3e52d7b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665222, "uuid": "0dde11d6-0f5a-472f-9549-7c18bfccd362", "value": "T12C823B0FB9424216D0D200B49A76867BD97998B637C814EBF7D08AEE1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665222, "uuid": "43bdc02e-2b4a-4693-bc6c-df3f9fda7e0d", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665222, "uuid": "e36290d0-f7f1-428c-b0c9-a5e1a4ce4211", "value": "384:8I78VGQic1Kwvw077u9NHu/gBhav8U9c5:tAE0769Zha0Um", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776665222, "uuid": "1a12037f-cf81-4bdf-a4d4-50ab24d6a6bf", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665222, "uuid": "365f87a4-cbac-4f32-9a8e-f0c31a0e29bb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "609a8e10-3c80-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776665749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665749, "uuid": "2a5ba89a-b058-4179-b1f8-0bb351902132", "comment": "Malware payload (Phorpiex)", "value": "e3d48a25be12ecaed6a389f1e4e4ee91", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665749, "uuid": "f277d496-3dca-40c8-8c9f-f437ad42f058", "comment": "Malware payload (Phorpiex)", "value": "90ffd0ad811d9a85496a7985315343c412bff004d788ccf6d5fec30b2befaff4", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665749, "uuid": "02c22e38-86ed-4a95-b5ae-51ac51fdf062", "value": "T1B7823B0FB9424216D0D200B49676867BD979A8B637C814EBF7D08AEE1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665749, "uuid": "f1cc48d1-c6ab-4d83-9ca6-aea34d915218", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665749, "uuid": "3ad591f4-8ec4-4fd4-b8fd-5a533abdbd01", "value": "384:/I78VGQic1Kwzw077u9NHu/gBhav8U9co:cAo0769Zha0Un", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776665749, "uuid": "51272116-f512-4c46-ba81-8861e39667c1", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665749, "uuid": "c4e253ea-3490-4431-936c-a4e007488d18", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93bf8d15-3c81-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776666265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666265, "uuid": "88b281b4-f3b7-4f8d-97d8-615eea4f4c7e", "comment": "Malware payload", "value": "339558f44cadaf6d2021a9b1c6b89619", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666265, "uuid": "4fb45187-afd9-401e-acc0-3ecb4cf2ff3c", "comment": "Malware payload", "value": "4bff92e2a76449433279a0f1ae8fa5248549ac9b63be8e17f97d6624ee466db8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666265, "uuid": "a558d457-738e-4677-ab4e-cdb2454d37f3", "value": "T13134E01BA1CF974846D4E0159BDC45618BB7A02560D6FC2930E3D253AEFCF23A7678", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666265, "uuid": "ce2f1b84-dca9-4c55-a0d5-ca7c5c546e8b", "value": "6144:AIGVmhOcegnq7gOE9tWYu4rbHKVTPuwItguf:Nug/9tzrbHKRwf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776666265, "uuid": "d02cbb50-c038-4b96-875b-07be8da50033", "value": 247880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666265, "uuid": "96c50e39-dae5-4eb5-b937-38014726cb39", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef19d08c-3c82-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776666848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666848, "uuid": "d0622f1f-2077-476d-89cd-23920fc4673b", "comment": "Malware payload", "value": "8181ed84e26518ad15024199594a33f1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666848, "uuid": "ab634683-2dea-4218-a4c6-a7bbbf799409", "comment": "Malware payload", "value": "c0d96546c15948ac504193f1d3bc9adbdacb129dca30e56b93936d88ef658f35", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666848, "uuid": "18e2140b-14ed-426d-8de4-e40053e98cd3", "value": "T1B34185C6735045B2DCD5947BB2BA858075F592DB84B61BDCFBCC28FAC08CE08BE51A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666848, "uuid": "f4a59448-b3e9-48d9-a73f-7b35abfc2b39", "value": "48:9X0XEXoXMXtaXcFXNbXuZMXfmCXYgXJ3XAgXeETXqkX2YjXDtX1V:9X0XEXoXMXtaXcFXNbXuZMXftXYgXJ3Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776666848, "uuid": "e8b08332-ce83-4cd0-ae2f-9973c1ab0792", "value": 2275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666848, "uuid": "caa3910f-d832-4bef-8151-d9649b7a3f43", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef83bcc3-3c82-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776666848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666848, "uuid": "13d721b7-9c6c-4a2c-957d-19def3d065b3", "comment": "Malware payload", "value": "c8ee2b44332a79be2ff9d2d907faa00b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666848, "uuid": "24bd92d3-2e88-4230-ad79-5a845a593c13", "comment": "Malware payload", "value": "3ef2c9262b73a3a8a808ce0d083d83c112ab07ef39a1371d3efea1acbfe83b2c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666848, "uuid": "d0441510-a403-495c-8a83-9f2e6b6a21fc", "value": "T126561897B9D25953C4E83677A8BE80C833630EB99B8B52565D04FE387EBE1D90E343", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666848, "uuid": "11c0de6c-c921-4fc8-b0cf-e86e128e6bb0", "value": "49152:Gllg+mHK0W7ZdGQZu3lHUsCi5vBRhGGDPSJ7nNrj/65Eb:eg+0NW7ZW3l0sCijRh9y7NvoEb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776666848, "uuid": "2719a049-f9a6-4d1d-92e5-7ab070f639b8", "value": 6357154, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666848, "uuid": "2f7bd066-4dcd-4d6f-8d54-56564ce797c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f142d439-3c82-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776666851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666851, "uuid": "f9b9f140-6883-421f-8189-df320938b1e9", "comment": "Malware payload", "value": "6347a69099509e2c15cbd30fa1c58f8d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666851, "uuid": "73c09416-7847-4c9e-a4e7-3e80c0cd4028", "comment": "Malware payload", "value": "a4375c0a35f692ba19eb35a14d970aff83a285d46dd4ca2744fa9fc1dc2fbf2a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666851, "uuid": "3ac4abb4-4b58-4576-8bd2-e2f371d3dd24", "value": "T15E76F7636A28EB0ED62832341DB1CAC86B6D1C8645D6A417E391F318F9F307D496ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666851, "uuid": "c01db962-54fb-48a6-b463-101ac51ac09e", "value": "49152:98FyFUa36RF72PriQg0u/6HRph7MXlrKxcSdh3/1WCB67LxUpqRENRZm+JY39mGn:wCal1Upp0Pohn4jEk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776666851, "uuid": "dd4fed15-2363-4758-b681-f7ea6df67048", "value": 7143617, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666851, "uuid": "99e64ee1-395e-4a99-b553-1d8904381740", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f153cbe9-3c82-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776666851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666851, "uuid": "1e69a0fe-f4fb-4a1e-8020-051f69e4ccba", "comment": "Malware payload", "value": "33981354a184e7603620d37e01f9f4f9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666851, "uuid": "5e0516e6-e3fd-4669-8dfa-b3c7fa1e16b5", "comment": "Malware payload", "value": "1bfcaf5444e67da8630d8f7077167268be09c47a9aa4e976e1d87979fd64cd42", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666851, "uuid": "2609bb29-9510-48a3-9d3c-d211117c5dfc", "value": "T194561897B9D24953C4E43677B8BE80C433631EB99B8A16565E04FE383EBE1D90E393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666851, "uuid": "ee55e5f4-7f1e-4fc3-9d2b-51108f42a882", "value": "49152:LoY5H6qpc+Z0AbnOWu53Mgv6RT2SgbaUrzVDv7wK5EZ:XBc+ZDbnOWu53M5RqDvVBEZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776666851, "uuid": "a936b89e-01c2-41d3-bab1-3ec6bcb00012", "value": 6357154, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666851, "uuid": "7e95a39f-c807-4d52-879a-1994351207fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f15727ea-3c82-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776666851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666851, "uuid": "2e3dcc93-c00a-4847-8dca-b91fd549de80", "comment": "Malware payload", "value": "86e15724521cde03a5262ec04b4e5bbf", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666851, "uuid": "fadc9540-9778-407e-bdef-9b5dab3419fb", "comment": "Malware payload", "value": "6117f3f72eeacb24536a468c6a6f6d878987dfd88941b9622fc35b25e92581b5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666851, "uuid": "daa0d7bb-cfb4-43e9-b62c-89da49f69b13", "value": "T1FE560797B9D25957C4E83677A8BE80C433631EB98B8A16575D04FE383EBE1D90E383", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666851, "uuid": "6c57f053-9728-4ad9-8409-9c1e39ae0450", "value": "49152:vwPwCXnDiaOpHxTRkTQv7AvTRkhiLVdj0czTGr95Ek:ooCXnDiFpHxTRaQvMRFTjfzTGHEk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776666851, "uuid": "5ffdcf86-f433-4e86-8ec6-f108a24b3b42", "value": 6357154, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666851, "uuid": "b52261c1-7b05-4d19-8467-0f9bf8549775", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6bef5c1-3c85-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776668122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776668122, "uuid": "6b46fa77-5514-404b-9283-0a3346c8dd6a", "comment": "Malware payload", "value": "d532a14d367b46d4433feafdc232cd80", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776668122, "uuid": "a87dc0ab-f567-48e0-ba1d-179ba3b9892a", "comment": "Malware payload", "value": "da715fe113987eacbc65c30905f887df569781d6f5a7f96d16e064118f979862", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776668122, "uuid": "c8f2d589-c043-47e3-9c22-629fc4d19236", "value": "T14FE02648B121F6730972E3A85E86C45876F10241AE063D0C81E2009FDC82475B22CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776668122, "uuid": "e31e6d69-a0c1-4ded-a659-f9319400b046", "value": "6:SrusxtbZxLluoZFbJZbXLWBL2eeutJBC+n:Ou+tbf5uAJnbXaAeeutDC+n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776668122, "uuid": "e556074d-8544-4c33-9890-752d3c2157d8", "value": 301, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776668122, "uuid": "31eb50f6-58f8-4b73-b755-99db5c0ed521", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83465ca8-ba40-11f0-b161-82aee05be84a", "comment": "Malware payload (DarkSideRAT)", "timestamp": 1776670343, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776670343, "uuid": "3b713902-8bf8-4281-816b-a733b3fbaed1", "comment": "Malware payload (DarkSideRAT)", "value": "416275bb02a22efbf68717c00046dee3", "object_relation": "md5", "Tag": [ { "name": "DarkSideRAT", "colour": "#4f60a3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false }, { "name": "txt-to-exe", "colour": "#aa5c02", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776670343, "uuid": "4a4a9380-75b6-494e-896c-c50b2ae0571e", "comment": "Malware payload (DarkSideRAT)", "value": "f63ee52cf8bc3a075eddddeaa198ddb3bff5adf3da41dcc68f28a4e1ca2cd506", "object_relation": "sha256", "Tag": [ { "name": "DarkSideRAT", "colour": "#4f60a3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false }, { "name": "txt-to-exe", "colour": "#aa5c02", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776670343, "uuid": "9c72f47e-868b-49f9-83a9-2dacf918e1de", "value": "T1E8832A35CAAEB07ED3299A78DD020D95CF63BC8A0794BF9753E10DE60F96A501F2C5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776670343, "uuid": "a6f78754-7745-4b2d-90ff-dc88fad15483", "value": "13202ae6e20dc0e6f8ae3713ee808076", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776670343, "uuid": "f3957148-2464-4872-a0af-c8e761eb29ba", "value": "1536:+KJry/hjDGlrjeNHK3xnmF/MbA9mFYVM0:BW/hDGl/eZblyAM+VM0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776670343, "uuid": "aced3589-4d7b-44c3-84b6-ac799b49bdaa", "value": 80896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776670343, "uuid": "15bf687a-ee78-45b1-8a90-54fed4873f3b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4eee4e4a-3c97-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776675598, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776675598, "uuid": "0d2e7830-d087-4448-9e13-67e9a1ffc175", "comment": "Malware payload", "value": "bc094d073d900050a9740a15a01e3b04", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776675598, "uuid": "7c055e43-9300-42ee-bca7-9a7e734679e2", "comment": "Malware payload", "value": "650d44854e7be2fb8beeae72a1c500b61baf6da9fa1fae9258dc530ebf90e478", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776675598, "uuid": "2d99b75b-f9fd-4235-8dae-46cf985424e5", "value": "T109C1626FC87B9CEB17E1806275B1FE1880874E1BDA494811FBCB50B57BC9AA005D1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776675598, "uuid": "dcbcf93b-b509-4cbd-b60b-0c5b490d2a34", "value": "96:NTAKGWxLhdM4ggdvwuixp8n/81BCh1kkH/:VLGWxLLM4ggdYuixpI7ks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776675598, "uuid": "02eb984f-2e4d-42e2-bcee-566ebf692c49", "value": 5698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776675598, "uuid": "6c35187f-b173-4386-805b-6378956976ec", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d65f668-3ca4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776681313, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776681313, "uuid": "1ead5287-d0cc-4939-9c95-c0bf8aeca4fd", "comment": "Malware payload", "value": "4a7cef1ab59b13a94b8718bc032d12e1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776681313, "uuid": "d7069a1e-a2ca-4c6b-969d-c510af0f2e0f", "comment": "Malware payload", "value": "7519519f43a433f1072d56773fff988aa6f0d49ee14737945fddcbc40612b103", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681313, "uuid": "2503d448-cc7f-49f7-899f-ff8fdfbda486", "value": "T1F496236311251786E0A0887AC62FFDE431B91E574A4299FB98D73FFE34315E3B152A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681313, "uuid": "1ddc3e4b-758f-4572-a969-326746b160fc", "value": "e94da58d453e77ffc46043ed1c0f17f9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681313, "uuid": "c02b752d-9c45-41a0-be80-cb2b41afbfc2", "value": "196608:XRGPsFV5M/CSdWQvLjNr3anBzAtUfaA918gKt02O2UNRKW:XAB6HQNbanCUThKLFUNRK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776681313, "uuid": "7ab43622-13ed-4e81-b715-bda00227f73e", "value": 8628224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681313, "uuid": "ab65c554-7c3f-4485-937a-948fc3ff00c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3ca6343-3ca4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776681405, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776681405, "uuid": "5d46e3c6-8722-4067-ba58-cc711bbc7cc3", "comment": "Malware payload (Gafgyt)", "value": "df36d0614e743e2e7ea3e3e6a55d6cb0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776681405, "uuid": "c4c7140d-7421-4a0c-aaa9-7bfa269a2221", "comment": "Malware payload (Gafgyt)", "value": "923c657779831cdda250ae61c6836776cf3afe9ab6e58c609e8294d875be8bc6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681405, "uuid": "356a89ed-a7e0-4d79-a368-693515d3c4b9", "value": "T15E3302B3F1FCA391F1F5043D6DFA7F8A08E9D2992BFC4914EECA4616C597D0266A11", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681405, "uuid": "9146ca33-2864-4b33-8c95-32266dfdbbc5", "value": "1536:4/M0O0g/7NVf/HV1xvURAs1i5vfKMhkT6nouy8Nql:4/hfs7P/5Kdi5vyMhDoutgl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776681405, "uuid": "04b82fe0-d26f-46c0-b970-9f11644c827f", "value": 54572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681405, "uuid": "b0027cc2-ff72-4b3b-989a-d662f67eaf37", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35e10684-3ca5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776681569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776681569, "uuid": "849fed4e-ae44-4c4c-a379-6778e3d349d5", "comment": "Malware payload", "value": "1c949691360d935f5ed6afab2b011dd6", "object_relation": "md5", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776681569, "uuid": "3879d774-a988-47b9-983b-630b2c89819c", "comment": "Malware payload", "value": "cec0a8e55b95b4ddb21889c4a5370767124a35e689c2a52d68423580e80743ac", "object_relation": "sha256", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681569, "uuid": "834223ed-06c0-46f9-9182-5b6825e63041", "value": "T19EC53394E1DCF20A8E1DA7AC4526D89A861172A206E73DF80138C5F8717E6ED11FE7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681569, "uuid": "45a8d4d4-9c0a-4506-9460-583dd35204c6", "value": "49152:JcjI0YJgXz6rv5p8Kjk09VzO1WPU+3IT5b3Ut7x6uM32OjCLgHNbVamwek:JcE0yoQBaKjR/z8PKsGWNhVJwek", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776681569, "uuid": "6083dd6d-75a7-40cc-887e-91b95bcc5cc4", "value": 2683792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681569, "uuid": "f8025c1d-0b9f-489f-9e86-8e4347a76b2f", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776681922, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776681922, "uuid": "7d2d5411-eaea-4b60-9d98-46bc08a6d02c", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776681922, "uuid": "dcb3a4b4-b3f6-44a1-b706-abe00aa442e2", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681922, "uuid": "767a47c9-acd4-4bac-b0c2-ff21d408b390", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681922, "uuid": "320cea76-7084-4939-baf9-d6fd68bbb9b2", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776681922, "uuid": "93896c33-0538-4b51-b009-05352ecb2802", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0af4cf0d-3ca7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776682356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776682356, "uuid": "cc102a26-4f46-4c4a-9e52-4ef8889987fc", "comment": "Malware payload (Mirai)", "value": "c048a27a3675460563b586e4d27a107e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776682356, "uuid": "2e49a9a3-76df-4103-a95e-a108839721a0", "comment": "Malware payload (Mirai)", "value": "0a548b4a395f7117b6dced93045b4f8474555db305afed283a88a71635af0471", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776682356, "uuid": "f99e8349-7c4f-4918-946a-dcabd87c8c9d", "value": "T17D145072D54CCAC7D426727D50A98F7B9D3E73EB2645CD017DE1203689E6B9B280BC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776682356, "uuid": "47b52478-e1ac-40b6-9809-0c95c529ad9d", "value": "1536:kLyg6D6dN44PtfjH7gEa0FpeT0SdbiQFzZp5JVXUtYxURy5KyDy2qhe2jeMKI9I3:LO/6gj9hpoPFoVd58syBeNT+Ix7DkB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776682356, "uuid": "2ee2884a-0c1a-4826-9e87-f080b0603669", "value": 205148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776682356, "uuid": "274ed6b0-6c58-494f-9403-b61cb549f4d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04899f04-3ca9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776683204, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776683204, "uuid": "c3d4892c-9ab6-441d-87e5-c623c38bb982", "comment": "Malware payload (Gafgyt)", "value": "6a538e6837d2a80048905f2c281d48e8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776683204, "uuid": "c8c403db-723e-4324-8635-f56497e1636b", "comment": "Malware payload (Gafgyt)", "value": "9a2c0baeb82b54c63c6959f1dc44b72151f6089185645fd7f4c606c27264550a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776683204, "uuid": "b764acb8-5643-4703-b7cf-dff5514d744d", "value": "T125246072985CC587C12262BDA0EEDF7ADD7E72CB2648CE017CD118395AD5FDB2A06D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776683204, "uuid": "b15a978d-b70d-4b10-b58b-f83591e7e11f", "value": "6144:dM9Ktu3XxBdFPRix6NF9L99ow8K4MHK0LIeChHfm3a6oHaV+KTZ732:dM9KA3Xl+22", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776683204, "uuid": "82b9dc49-257f-43ca-b962-3a92c799442d", "value": 215148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776683204, "uuid": "0e057f7b-c1f0-4187-89bf-bc5b6d994f80", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80aa5ba2-3cab-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776684272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776684272, "uuid": "6ac53b1f-874d-478a-b676-d2c31c69e456", "comment": "Malware payload (Mirai)", "value": "8f0123cb64f05698bc7cf5266394addd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776684272, "uuid": "c010faec-22de-4699-bd3e-aeda8da15f1c", "comment": "Malware payload (Mirai)", "value": "e9d7c87b89f29913acf802db4f01b3338b6613149091865470b110436811ca55", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776684272, "uuid": "9de9d506-5228-4271-935d-4d44125add3c", "value": "T1A3141E31984CCA87C526167D60E9DF7A8F7E72CA2746CD227CD450348AC7EAB7916F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776684272, "uuid": "c992f5e7-16b0-4572-b3a3-ddfba91c8d40", "value": "1536:xjLua+rE8x9W+K2eMZcnVfK35WuF8UNNSCtCz7ieTlK+pK7DKrtwp+Vp+wEiwBBp:RLua+rEy9DK8IY3kUNNSceTyr9f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776684272, "uuid": "31d961fc-eaff-42e0-a5f8-ec85b7a537d5", "value": 190560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776684272, "uuid": "41e516ec-9a31-4a61-a75a-64b1e14c19dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3b76ad8-3cab-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776684330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776684330, "uuid": "4541e8d4-0175-4d68-af8f-6398c62ca134", "comment": "Malware payload (Gafgyt)", "value": "87d444010db4961d2ec03d37511de3eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776684330, "uuid": "4d893f31-f9cb-417b-807f-5b35892af97d", "comment": "Malware payload (Gafgyt)", "value": "7c42da62b0e68e1e1193526392657b026a186fdafc6adca3859c875831aa3d52", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776684330, "uuid": "1b2330ff-fc1f-4234-b563-adb248f32a4f", "value": "T14DF30A72984CE5CBC53321BCA0E99FBA8E7E72DB2B59CD017CD151309AD5EAB3906C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776684330, "uuid": "0ca0b226-e6af-498f-b52e-d199ca5144c0", "value": "1536:wIkN84/e9FO4Wz2Kg0TdG5H2K+pK7DKrtwp+Vp+wEi/w1lJV:wIktzlJTdG5Hsw1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776684330, "uuid": "6448d672-5691-4cc7-8db4-888c649fb9b2", "value": 166040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776684330, "uuid": "67870095-9ce8-44d2-a1a1-edbd54188a08", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6b51df2-3cab-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776684470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776684470, "uuid": "c1025ef4-9921-448f-aede-d1f72e434b8e", "comment": "Malware payload (Gafgyt)", "value": "f113918a0ed6b50f735597f966eefac2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776684470, "uuid": "529c37ea-05c6-4be3-83d8-d29a1de18d99", "comment": "Malware payload (Gafgyt)", "value": "58eebc9b7f61c6ee91b3b621866a65c469d2a73db69dc2c7f0346ccaf5407b32", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776684470, "uuid": "71001091-14be-4d10-b92f-32a4415570bc", "value": "T1A143022A1F439455DAF084F4109E8B7011644727B1E6ED0F7D68F38B9E4A87F5C4BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776684470, "uuid": "82cbd393-287f-4daf-8446-3030b956d1fc", "value": "1536:YCHi9p+VgpKP3JCFX4fQFFwXNahJkb8NrnVrYr:hHi9sHCFX4fcwXwy0nVrYr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776684470, "uuid": "bf9d1996-440d-4dcb-bf10-8532fcff8d59", "value": 58664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776684470, "uuid": "fac1d0ef-35e1-4b70-b7aa-72c03badfff1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6e0eff8-3cac-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776684846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776684846, "uuid": "be720fa6-4d0d-4275-9c11-d867e5464ef5", "comment": "Malware payload", "value": "01a4ace052b1f5014fe94314a373ba8c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776684846, "uuid": "ca2c9144-f3d0-4233-ad90-6206d98b3f9b", "comment": "Malware payload", "value": "64727ec1e489b8eb641bd535c25b4e305a99b69110c81bb27d35a8779e68984d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776684846, "uuid": "bc1f2d1c-d8b7-436f-981e-bb9b864b7ce3", "value": "T10843029EAAB9374DC2ED5E3F3E5A2F664900B0C5D04D4B5F1388E825CE032DB2D8E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776684846, "uuid": "b5f50051-0709-4afd-bf72-f5a282df7684", "value": "768:/foOsRuTJnW5XaORBkNubAKFjoiHSfmKzL4oixQbFJfkvunMdql4Aa1SIvexKv50:bXlMa4RJ8iH/KzDZFRkeSSIWxwJCtTV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776684846, "uuid": "11e0b69a-7bee-4cee-bf04-2de148e882f0", "value": 59436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776684846, "uuid": "9279b6aa-80e2-47e4-91d0-6a18d7bb4bea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4514643-3cae-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776685700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776685700, "uuid": "70ceb0a6-49f5-4b9d-9a91-b57301f5885d", "comment": "Malware payload (Phorpiex)", "value": "defd3567d6e567f6d660103f5b2d3e4c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776685700, "uuid": "21b43393-a34a-424f-8e4f-6f74574c7e30", "comment": "Malware payload (Phorpiex)", "value": "a78e024e259431c239e1dcebbbb0ff53d93f61ab66f28b30b60438bec733a5e5", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776685700, "uuid": "33a151c1-aa78-4539-b0e6-6425a186a494", "value": "T13A824B0FB9424216D0D200B49676867BD97998B637C814EBF7D08AEE1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776685700, "uuid": "bb73aefc-36a4-4e0e-b99c-61d3315668d8", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776685700, "uuid": "9193dcaa-a196-47d1-aced-a3d1153a65c1", "value": "384:OI78VGQic1Kwzw077u9NHuagBhav8U9cK:zAo0769uha0UR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776685700, "uuid": "b654dc74-2d7f-478c-86cb-544bd9ce2e9c", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776685700, "uuid": "17125f1a-02ac-4ddd-8c63-b4cd7d9fce1c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f88fea5-3caf-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776685853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776685853, "uuid": "a2ea3a19-d47e-4ef5-9a45-c8933c2f8ad4", "comment": "Malware payload (Mirai)", "value": "df13ba1f90ac3e77e1890631bd2196b4", "object_relation": "md5", "Tag": [ { "name": "DemonBot", "colour": "#c476a9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776685853, "uuid": "e6235714-bfe7-472f-9c6b-bdf235f9fb9e", "comment": "Malware payload (Mirai)", "value": "8745bf04defd3055449c1f8ede1267a669b62aa814d5b0074ecf23f997cb88df", "object_relation": "sha256", "Tag": [ { "name": "DemonBot", "colour": "#c476a9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776685853, "uuid": "e926f9d3-e578-47d5-9f5c-4cec6875eeb1", "value": "T1E3430282A70D1566E6A028BCFE3B0C413F42D675CDDFB86057364F78D4868DB0DA09", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776685853, "uuid": "628cf5a6-ab53-4e17-899a-94d4fdff7354", "value": "1536:/er6i6if6GBwmC6iPK2t/qJ7ThRX8vc1C:/ejrv3aB/aHhl8vc0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776685853, "uuid": "d259ce8e-74a4-456b-a587-cace9e35c273", "value": 58596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776685853, "uuid": "4ccc9015-bbaa-4f16-81f2-43cc703747b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f9f4e4d-3caf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776685961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776685961, "uuid": "f62cf177-eb7b-4985-9eb0-d9c287db2998", "comment": "Malware payload", "value": "1f6eaab6d1482869c86bb485f66ae9ce", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776685961, "uuid": "7b7d9be1-4062-4ac2-bdeb-d66d70eb1e42", "comment": "Malware payload", "value": "2f4dca84f27e36c74fe7044f53808419793c7f151fa0edb17a17daae8ca21d13", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776685961, "uuid": "69d8d914-d194-4856-9ce8-ca326b67f3a0", "value": "T10A55C015B68380F3D651353014AB673AEA35AA469F26CFD39368EE3C6C33181DE371", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776685961, "uuid": "156d483c-d5c1-409d-b5e9-679cf838629d", "value": "4fc158e650a5d42016e827e6d3e2fe41", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776685961, "uuid": "5f05e274-4906-4b97-871a-2d0034c2fb2e", "value": "24576:3N7EwhhXNUdHJj/codlG4A0/4uAGkQwFn3nWBWic9uR0D1r:3NRt4JjjlG4x/4ufmtic9r1r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776685961, "uuid": "6578d9b2-cd0a-4b7d-b682-c73dd7719416", "value": 1331200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776685961, "uuid": "0ebdd9fa-102a-4dd2-bf52-e2388b4bd847", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55f3ef13-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776686777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686777, "uuid": "c230e9b3-3507-49b0-bb3e-bb2290ae839e", "comment": "Malware payload (Mirai)", "value": "8a1b09ab5cc0b1abe0b49b75a7d5c815", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686777, "uuid": "d6f6d1ed-d7ad-4660-9398-571dc9fedd38", "comment": "Malware payload (Mirai)", "value": "1b117bffef19e515c8fc9140e754dab732fd612894b5ceddc3035c1ddde58750", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686777, "uuid": "5666e64f-d76c-473f-a9ef-49b78a4f2430", "value": "T1698312B4E4A6BF61DF688F36CC5201813E0F5B60DAB93D2414B64D24EDF166E82F94", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686777, "uuid": "3506dc62-c2b0-4474-9a35-91159a6f3fdd", "value": "1536:4DjLGoq2aHf3f9Sq4BkzH9mbBxqIa2OGehl4AqANXhL7c77QwpZxlSb+qK/3q:4fLiuq4o9yxPOGedrL87xlt/a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776686777, "uuid": "aaff4144-337d-488c-ab10-f2c0a458ddb1", "value": 87012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686777, "uuid": "442030d9-98b0-4a61-b93e-78edfc7d8c12", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8390b528-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776686853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686853, "uuid": "70cab58e-4ed3-4ab3-a6ca-1f9b58f66b3e", "comment": "Malware payload", "value": "b002aee43d013bf8f00cbccbaed19a4f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686853, "uuid": "2cd99052-4d35-49fb-bdd9-a180c740e9ca", "comment": "Malware payload", "value": "9f12cb53e49ef086742ab34712149f3f2ab3fc2d7e09372b7d9caf1d703b6611", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686853, "uuid": "956de601-3dcc-4bc4-9788-72b35ce4d1a8", "value": "T15D22B09534653825CC409C5AE262C70A1235D87FCFB2F98B4ED319E26920C763E979", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686853, "uuid": "0369a52e-ddad-4c47-9d05-058fa61fb8de", "value": "192:ZgejJIfqE0gHILkxOlgpRRkeL1Z2/Z/1XGMm03o+K4Xc/nlukqCdA0wSAEOTN3cC:xjK3uEogpR1yx/wMN3o+PXoIJAA0wR3b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776686853, "uuid": "720c5ff2-3f4d-4c30-869e-195522cf32c3", "value": 10496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686853, "uuid": "6cbecf29-00f1-49f2-b751-c00adf6a0859", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cc6750a-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776686896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686896, "uuid": "ee4288b6-afad-42e4-b825-cd47db8bfd4d", "comment": "Malware payload", "value": "8c0e95a52a32d034276a7d9f45bb1c21", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686896, "uuid": "469f3f8d-78d3-468b-b5ce-a032bec33eca", "comment": "Malware payload", "value": "5cb39df2ae1dc1386c310492fa9bf54ee6b0228ec2cfe32b5f9eb49ad6f64165", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686896, "uuid": "78a9391f-67d8-45aa-b1dc-ea449b1a2b99", "value": "T17443F171C06B4A99F5EBBBF06D9C52B263FC5697A52F84A420676F07EC76E004410F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686896, "uuid": "9fdedb37-68a1-4dc1-ba76-d55c045b2f34", "value": "1536:sWXlonqzcM/WkfGrAphP0Z/jvwpqVpUKq9R4u+qgw06WXY:f1onqzlGUh8Z/j1VAL4u+qgwXWo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776686896, "uuid": "1b5ed052-9e89-4a1d-9fa9-a631bbae5059", "value": 56160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686896, "uuid": "6ff8c95c-00f9-49a0-9290-b2c3dfe01423", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c30fb8d7-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776686960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "b2dffbae-08d7-4810-b821-37ce1d934256", "comment": "Malware payload (Mirai)", "value": "cbc9ee2dde874ebc7cedfd3fb28c285a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "c9829854-a207-4c10-8c38-bec5baaadcc8", "comment": "Malware payload (Mirai)", "value": "7a8fd19503d8b85380c2d0a45b32de5f2d872c5dbe26a74ca3beeb68bbd1816d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "fee6bb08-cc2e-4273-b33b-132529ea473b", "value": "T16D233BD9B801AD7CF95FEABE8016490DF621335051930B2B63B7FD936C321A4AE63D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "0dd1705c-968c-4ddc-b9d0-55783380ac40", "value": "768:yLeD1MYbZs5paE+IXEM110+fmdbuzWenXpIWxJTBE2Lc850:GAaY+5peFu1hmdCzp5IWxJ1E2w8+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776686960, "uuid": "742c7eba-b5fc-4a71-a9df-8a8b099397f7", "value": 49804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "2ed85bc8-5116-47c5-8178-a757a67d2b16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c312eba8-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776686960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "4ae67dfd-22c4-40c6-b274-6b31709bf059", "comment": "Malware payload (Mirai)", "value": "9f61d2bfa3e837f49aa9422cd1e3e901", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "bc427c9e-fc07-4261-808d-d5677749e7a8", "comment": "Malware payload (Mirai)", "value": "34faac1fc6180ffbd8a2b71e15835ecfe0e6e3a842653e3d1496b112158a9907", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "9e404b7b-b2c0-4809-ae0d-a3ce326dc652", "value": "T186237CC0A543D9F8EC150AF43173EB329B7AF07A2129EED7D795A432D841702E5472", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "60379feb-91e5-493a-a826-602e4eaa7599", "value": "768:gjo8WnBsux3TUi32+4qbBYSWLxD9NnbZrYMbJoSlO+Meb4ah:gWBsux3TUiG9qbBYSWV9N1Y8JoSlO+1P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776686960, "uuid": "cb8b2f6b-0278-497c-9a43-a031e8e29899", "value": 45656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "e3ed299a-56c0-4294-bd82-4c0bcd12b84a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3170605-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776686960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "564e0005-11ef-4a4a-b17e-d65604968088", "comment": "Malware payload (Mirai)", "value": "6bf8cea2e5431b79f39e38f94e5c04f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "e68bde7e-ba23-45e3-93f6-d350837ae2a2", "comment": "Malware payload (Mirai)", "value": "8aec5e725f34b28955043d2f6a283da35cd712626588566904702aaa79270624", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "ab9c9244-97cf-4926-b3bc-9ea7e0f96ba8", "value": "T19313F796BC829A66C6E0637BFA5F418D3321A3E8D1DF3257CC112B057AC991F0DA7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "9805851d-749d-41cc-b96d-f2096a7995d9", "value": "768:XP7T28mUGj57T7lq1dZuhfHn41GC8saIDoCerCIcW138vYPDX/heg3OgGytZPNvI:XjHm55TZ0v8sUcWh8IDX50Py1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776686960, "uuid": "ccc348be-626c-4f93-a56c-078fa3ba889b", "value": 42880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "56c55cf7-f46b-47c5-96b3-604fb9822093", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c31774b7-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776686960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "bb9bdb48-d7f9-4b67-a273-c2125e8b33da", "comment": "Malware payload (Mirai)", "value": "60a42b59cb302901d4e8d7ba6028513b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "e148d039-66db-42dc-a6f4-53e37aca4d8a", "comment": "Malware payload (Mirai)", "value": "38dcf933f2c42327138226367ca334e098e0500ddae0319ead11b2a92cae4c00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "a91d166e-a633-427f-ad13-ce27add9c4e6", "value": "T1BA430852BC818A05C5D412BAFE2E11CE33136768E2DF72139D106F247BCA92F0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "a69ee304-8391-4ad0-b91c-e63edbc83a2d", "value": "1536:ZVnsP+SiPuXJEbiaNV82/rKGpoSEpLWIxibJgwKWFR:6kPcmi2V8M3pZJgwKWFR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776686960, "uuid": "d3944694-1397-4bd6-8677-ab5cd723f132", "value": 59680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "3f1f0600-1b10-4656-9a95-04a5f69db668", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c31aee03-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776686960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "8eb3a23f-80ac-4944-a832-b7e9ccc3adb7", "comment": "Malware payload (Mirai)", "value": "7ea74c7174e6547be59ec87a529c5537", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "dfec8615-e837-44f8-97f8-02d60cc4fda8", "comment": "Malware payload (Mirai)", "value": "425df731d811470c8cbb16dcc5593cc7fb27c1ae39a9d302839be848800c2fc0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "ac29f82b-cdb1-4825-b153-61043c23b0a2", "value": "T1EC639409BF654FB7EC6FCC3749A91746258C641A21A93B397E34D828F24B24F09E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "6d8ff985-e739-432f-93a5-60eecb153200", "value": "768:K+xGiJEEYlDIR99LYkLUAJtw6OC5f2eaeyWecfkoN3pkavdE5tXirnM+ufp:K+xGiJxYlkTpJJOCgvjWrfgrAu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776686960, "uuid": "4df4fc28-97d5-4fc3-8da9-21f574a7d9b9", "value": 67484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "980c23b8-b368-43cd-ada6-53aae2296d1d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c329268f-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776686960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "ccd5d803-46c8-4e34-8281-cd0f236897d0", "comment": "Malware payload (Mirai)", "value": "ab512d3f67f305bb3cbe424647f94405", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "ef6b1898-8932-439b-b891-d03918ca72f3", "comment": "Malware payload (Mirai)", "value": "0893f17f06348d32d64e599728b8f5ed40cf169e7afd6f71e1c6dd81593d83db", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "0a7fb6b4-0892-49e1-8811-abb4103c5a94", "value": "T188C32C56EA818F03C4D61776BAAF42493323E754D3DB730689186FB43F867AE0E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "79c55a81-7bf8-46ea-8cc6-d6ffab7ed68e", "value": "3072:lgU/44TM2nDQwI25oFxhYJn6ZGI+oV+M/900i/:eU/44TMKFx5oFxh0nlI+okM/9xi/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776686960, "uuid": "f4ec575f-f689-431e-9a9a-1604e373b9d8", "value": 121479, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "a7ece208-eb7e-43e2-b8ba-b56103fff711", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c354e729-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776686960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "d8615441-c46b-491e-bae1-d28d293d0e42", "comment": "Malware payload (Mirai)", "value": "a80753c3b43e28354d9d145c8b2cd7ef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "83dc4c1c-7b56-44b4-b598-fd10e64a6955", "comment": "Malware payload (Mirai)", "value": "506db753045581ec7bef8208da64e2bf0d78291ce98354c0c6e3939db93a9dc4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "5f1b13e6-a4ad-4585-a09f-124e907bb54e", "value": "T11053860A7E21CFBCFBAC863547B74E309658339626E1C584E15CEA015E7070E785FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "2504fe8f-f6c0-4a3b-8de8-f1d824fb3175", "value": "1536:uRRNZTbDuTm/O25BVZdLNCSZqBaCK9xIqgQpez:+RNZHDOyzFNCbjK9xIq3pg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776686960, "uuid": "245c596c-1144-4f0e-8cb8-efe0aa34b50b", "value": 64028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686960, "uuid": "4680e0b0-e733-4fa9-9bf8-fee8d0b4689b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c364fc39-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776686961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686961, "uuid": "ce43e703-9e5f-41a7-be75-0ae4ffc27f9e", "comment": "Malware payload (Mirai)", "value": "098fbab296567eb7e6e48c23ba45abb2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686961, "uuid": "85c3ea34-5d21-4851-b1f9-572534c9d46b", "comment": "Malware payload (Mirai)", "value": "f9fde9bd7b2e115900b34d15ed4f352c0ee62d5f5816079d0b86e939ea33d135", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686961, "uuid": "75b5880a-da74-4a57-ac5c-d89b04cf368a", "value": "T124336B31F93A2E17C0D4A47E12F74724B2F1675E25A8CA2E7D720E4EFF14A40A54B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686961, "uuid": "2a7046e0-4bd4-4eca-a028-8c942fb186a2", "value": "768:t2oVxxtq9KqLPbMl/ekt1DYZYl6yaf4TojaibO+ypGvzYi:t26xxtSFPbMl/lt9Yqlps/yKki", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776686961, "uuid": "42ea3e23-f0ac-4c59-9e6f-a01864075f53", "value": 52292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686961, "uuid": "1b613732-e24c-40b4-813b-b57f56b5fff9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c36df0be-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776686961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686961, "uuid": "580aacbf-20cb-45ad-b5ca-1aa170ef51c4", "comment": "Malware payload", "value": "22cf97016276a4d3bef7d8eaec142ac9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686961, "uuid": "cc1d2ee2-8c08-4294-9443-30b8884ea13a", "comment": "Malware payload", "value": "dd9e2da1bf7d1d90cfb825deb26fb3c1deeca5785278e782ab3d69717990213e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686961, "uuid": "586eaa13-20d2-46c8-aa4d-8107c94fb0f6", "value": "T17576D805ADC42BF6C82D8B3544FACE9552B05E140AF18A361668FAA9FC772747F478", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686961, "uuid": "2bcc7510-b1d9-43f4-9a3c-cf8d9ceef518", "value": "49152:hyLLYe0zLPXZLfsvB5Qikyo2Km+YU7pbyIpKtpC5Er:NxGMHItp4Er", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776686961, "uuid": "6b5962aa-ee42-4c34-89a5-0ea388b21615", "value": 7143617, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686961, "uuid": "9b28eae3-c966-4c13-9078-3e1ef300047c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c36f2677-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776686961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686961, "uuid": "7d0c8636-d2c8-4885-8e91-a352454645b2", "comment": "Malware payload", "value": "b5864ae9459fe262d7693dcfecd6bdf0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686961, "uuid": "04721b09-6cae-4e08-9630-894604fc22fe", "comment": "Malware payload", "value": "71df0a072a2cac8b6b68b8a15502b0e1f93d8c339dd50476b59a740407b1055a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686961, "uuid": "711cd1fd-cf02-42a0-8343-8a2ee8afbc00", "value": "T151564A03FC9955E9C0AE91318A629553BB71BC8D5B3123D32B60F6342F77BD0AAB97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686961, "uuid": "dd6510e8-61e6-43a5-adfa-1f02c0fa762b", "value": "49152:PNzmFlpZj11m7szER2p+P3aufH+5eDe+wUm4Q2Ha9Jl5RfUuvfjt+K3TWmhLKiKe:PNIpdkUk5B853dms7IEb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776686961, "uuid": "50c63830-a174-4cd4-a489-13bf36de26f8", "value": 6459554, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686961, "uuid": "35a91288-7271-4cb4-abff-18c3057ac2f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e441a4ed-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776687016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776687016, "uuid": "a48cb257-6c83-476c-b23a-ea33e1498613", "comment": "Malware payload (Mirai)", "value": "e4880d1ebe398f07da7b447b5d86de7c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776687016, "uuid": "0180a9c4-d2ba-4dc3-88b7-f1806e1da494", "comment": "Malware payload (Mirai)", "value": "048b874409e23bccbbd3a15dc22e7ed7b28611a2c3f16bccec764927de46e8a8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687016, "uuid": "c045ceb0-eec6-4523-8708-c80815fa7ddd", "value": "T104331A91B8829A12C5D4537BFA6E41CC331563E8D1EF32079D266F507BCA82F0EBB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687016, "uuid": "c767a57c-9501-4137-94b3-b592034bd7f9", "value": "768:w7Mc+v+wcWDEKmxmmEBa4OmdiC8saEbwzRgBCEVeHmYMvYPfjA/hcl3D8NRRZPNl:lcBnWDFx8sHeHbMIfU5tGlu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776687016, "uuid": "f509cf26-31d8-42fb-a18f-28d7431871ef", "value": 50316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687016, "uuid": "10b7aa07-ecb2-4b94-9123-7dcdc777a621", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e444c45d-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776687016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776687016, "uuid": "2adcbc51-86e7-49ee-86d8-44c427de6809", "comment": "Malware payload (Mirai)", "value": "cc7472331e4846537fb84ee306d7e8bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776687016, "uuid": "ab4fdc1b-7c11-471a-b578-241fb88c62d6", "comment": "Malware payload (Mirai)", "value": "e160606358362aeb58906e73e05efd6d1e8420263d2d8478b6875845266f06ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687016, "uuid": "95cdaed6-e03a-4971-8fa1-3eae20d7acd7", "value": "T1FA138EA2C06DAFD8C1488674B8284F781B53E445C7536FF99AE985A68047EECF60C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687016, "uuid": "9e2464a8-785d-44fd-b031-9782c98a78d1", "value": "768:NanapGwtbGbh/EEZYePDznRVrgrq7OhGdv/qzCvoBJbCb:Na4Gwtq6ECrq0Gp/qzLLbCb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776687016, "uuid": "f569c921-2b40-4132-8320-4e82b7d4bdb5", "value": 44348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687016, "uuid": "87fadc96-689b-4f2c-a6c5-96aeb5471edf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ae10020-3cb2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776687080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776687080, "uuid": "2330f0ef-52d4-4834-9133-4009c82e65bf", "comment": "Malware payload (Mirai)", "value": "b564173d6fae03b323d52d0632492032", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776687080, "uuid": "c7d5f972-f913-40e1-9a9d-d497aedc5d52", "comment": "Malware payload (Mirai)", "value": "b2d4efdcff14e0ca16b4b6629e745e8ccf7e027c30d5c7bd68b1b56011a8e930", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687080, "uuid": "a0fc68d7-e440-4d9c-b4be-15f87b43036e", "value": "T19B232B42722C0A47D5A25AB0393F0BE093FFE99120F4B6892A1FD7468635F771586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687080, "uuid": "980001b3-f9fa-4826-ac7f-30e523851175", "value": "768:fWLJhV3pc1tbRC+3u7RsGVBCnfd0aC3E+n8Vdk/fEXIZy3:fIRpc1tbR5kDPAMcXk6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776687080, "uuid": "3da46881-6ca3-4c56-8799-cf3ff5a9dc3b", "value": 47140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687080, "uuid": "603a108d-1623-4eaf-87a4-f36b5f1987c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e76c83c-3cb2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776687194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776687194, "uuid": "9307c03c-dfec-4da9-bf40-995c03a1ab99", "comment": "Malware payload (Mirai)", "value": "62560d111fc6c0916505f6a35065d560", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776687194, "uuid": "a07020b7-a6b8-4f31-bc04-6fbff3c17bb7", "comment": "Malware payload (Mirai)", "value": "73a3866f2d64205625e42d7771aa9ca58164571d1af8df59bd6302dd787f6071", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687194, "uuid": "8ccfc092-2ed7-4474-8642-6655ecaa908a", "value": "T164530260B9B9D568EA302E3ACB2B078299C841FE45ECB1D87F54E6C1EBD3101BFD91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687194, "uuid": "71c43ace-d3ba-4f3b-a21b-78a259022143", "value": "1536:iSG0bq3lr71rfXcEUEe23gpSp7vkVdQEJ8ijL/WEB/:A0bq1rJbXCEe23jd8VWEJ1L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776687194, "uuid": "f5fac54f-fd48-445a-96d4-2847efce711e", "value": 64440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687194, "uuid": "7b90453b-ae83-480f-b94a-67cfbcd5ecad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7305cbc-3cb2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776687450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776687450, "uuid": "24afd192-d7de-45cb-91e6-3e619bd8b84f", "comment": "Malware payload", "value": "372284cfde1d5fd4dcd5eb009d765c5d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776687450, "uuid": "c5808de1-88be-4922-b5c5-eb3e285c3476", "comment": "Malware payload", "value": "4b9cfce43b14fb13b130fb9d40ba5a7df4c9f03ad3004ec67f9b03a7ea1a6c57", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687450, "uuid": "e16566e0-92b2-4cb9-883e-8d42d1c495b7", "value": "T13993E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687450, "uuid": "91e921d3-366d-4664-8377-5563c6aebacb", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXKIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776687450, "uuid": "f6f8d7d7-9717-4a33-952b-0e1dc328da59", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687450, "uuid": "fcfbb301-154e-4da8-a2cf-b4099c0e36a6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fbd9ac7-3cb4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776688028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688028, "uuid": "3c571975-24e8-4835-9217-df2bd32865a1", "comment": "Malware payload", "value": "495c8504d9cf026769020f28bd9cb5d7", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688028, "uuid": "f64361ca-e6cf-4ee1-b2d4-fa48d01b2532", "comment": "Malware payload", "value": "86077153bdc4a9994b68bfcb8e967de2188ee6eba146d7825c1408fc99315b4b", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776688028, "uuid": "1d5ec40f-4bc5-4859-8c41-2599e306a6b5", "value": "T14994235C956C3ED4BC3412C75E00B2DAB6DAF061F1FBAA981B1A3F727CD615581E30", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776688028, "uuid": "19529493-769f-49fa-92e1-fcf4dd209244", "value": "6144:Vtzn7Nbx13OmdqZ4iTuQsAcyLkT90XMJ/fDbojbhTeyUi3J/vgGHEhshIA6Kzfbt:P7lNQbTUAcki0XMUVD5nXP6K3i5it", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776688028, "uuid": "c03116bf-9cc8-4878-ac7e-64da50d7568b", "value": 421440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776688028, "uuid": "7d1fc2cc-1104-4ba9-800d-bfc0b09b372e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6308c8f5-3cb4-11f1-bc00-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1776688087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688087, "uuid": "64d22b59-a823-4b15-b8a2-bc01d5602537", "comment": "Malware payload (RemcosRAT)", "value": "d0bd93e3abd74cf72a55ec19a3181d33", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688087, "uuid": "70e56ee0-2509-4500-adee-a9bd8219cb27", "comment": "Malware payload (RemcosRAT)", "value": "d2438362e92f1aff6d543707fef237b0dd4fe0afdd2ae5ee57650e5f0b12b571", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776688087, "uuid": "493ce55f-fd75-486a-b5a8-cb3d8ac1afe8", "value": "T1A374BF053806D6EFD82D1A1EB58C9908F58C084BD1DAAA7965C2F7AF32CDF075E722", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776688087, "uuid": "afc14311-5b26-4e7a-97ae-610a1d023751", "value": "96:OTp0+G1AxO7O+soEonuYRtAoGFfnU7EUhl8QVDy8HJHdFixyStcf0f0f0fSU3JpV:Cpm7XxXFXXFI03XXMXr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776688087, "uuid": "7f684061-4b64-4da9-9f0b-be9aa1127413", "value": 339469, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776688087, "uuid": "a56b853f-e53f-4870-aaec-326e911e935f", "value": "application/csv", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "870fae4a-3cb4-11f1-bc00-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1776688148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688148, "uuid": "a28aa6d1-ff37-4277-a046-0dc86afdc005", "comment": "Malware payload (RemcosRAT)", "value": "c0bbfa4ff828c0432850a8a050e1af36", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688148, "uuid": "8a08a755-d0b6-400a-b39c-b0a8815e285d", "comment": "Malware payload (RemcosRAT)", "value": "269ef9fd26667dfcae57ae29f559a327de0327e37c2dd5887ed7a453f7a04a07", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776688148, "uuid": "84749d1b-6b6c-439d-8471-497f1429ae1f", "value": "T141649F5EB69621DC8A38F9D267E8FCE73262034F0D37497F18915B04593023A1BFE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776688148, "uuid": "b861e942-27f5-4d00-a23e-36cd2ffd3408", "value": "192:9p20mG5OkGmMThBVXnqfV9sIWHmXIWHPEPCB83/az:9zV9sIWuIWvEOOaz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776688148, "uuid": "8c088e30-cab6-4b81-91bb-9d3f99a71f1c", "value": 309442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776688148, "uuid": "cc979c8b-d29b-4420-a6ed-086aae4d3776", "value": "application/csv", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65c4615b-3cb5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776688521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688521, "uuid": "12995b5e-afb3-4c5a-be28-db8260195d3e", "comment": "Malware payload (Gafgyt)", "value": "67900b5f2dc240264c2f9daa276695e8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688521, "uuid": "4867f0bd-94c8-44b3-995c-51ff0d3ca7dc", "comment": "Malware payload (Gafgyt)", "value": "3292e176098ebb83f6602382b36304ae41c4bfeba68cfab62a374d01ff7ef1fc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776688521, "uuid": "53a9a50e-d1c5-47bc-a7dc-c5a0480ffd2d", "value": "T10C43F1C026BE4AF9C4779A7035D32806FD395E5251864FDE14DBB1B6CE66B808E307", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776688521, "uuid": "81bdfaca-c179-4785-b957-14dd81ed315d", "value": "1536:QOS92Np00AdZhKVTL4ZPITRhpFVfVh4QJyZ8m4iOqRVFuuo:Qb92NphgILwYRh9fVqQJdsxuuo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776688521, "uuid": "db1ad01d-bc0b-4249-a715-fae0750970aa", "value": 57608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776688521, "uuid": "2d0d7bfe-9952-4ef1-97a9-67ad699190cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26673e23-3cc1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776693569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776693569, "uuid": "c4b41d9d-fe37-4faf-8694-86ec575f41da", "comment": "Malware payload", "value": "75633d553ea833f559880581462b232f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776693569, "uuid": "173d7ceb-be7d-4a72-b46e-39a562d2763c", "comment": "Malware payload", "value": "ba1b438607047321e4239ad4b5113c56208cead59c049a49b5bea7071d0cbebf", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776693569, "uuid": "2215b121-2730-487c-83d0-d0320bdc59c3", "value": "T11D931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776693569, "uuid": "e0a309dc-1607-425c-b9dd-9a3ea39307c3", "value": "1536:nByp1tF/uwMmAIa14oXoKIMepeV7tb73WdxCrCitkb5fv2v05xLkrJKs0sCxKyoh:n8iIL0GitkbFv2v05xLkrh0sCxdoIy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776693569, "uuid": "8ee1d8e7-45f4-4358-9a9f-f17edee6114d", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776693569, "uuid": "37ce61b9-49f0-4190-b445-fd30c43a3211", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c11c92e9-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776694688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694688, "uuid": "219e1b16-4943-4ccf-be44-e6d5b2af7758", "comment": "Malware payload", "value": "d581efcac81e1533ceae1f5eb0d2545b", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694688, "uuid": "060dca6a-40ae-4fff-bfb2-b734c65d5f45", "comment": "Malware payload", "value": "a5a41b054d1c4a6723657a7fb187d4cdad1daa08a8808ecd89609746daa70101", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694688, "uuid": "9208c9aa-8522-4ba4-8fdf-d3188cf79f8c", "value": "T19854D3FB329BB046C4830E93C065D1E0CE64C86A97499A98ADF4F1E3EDD15079887D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694688, "uuid": "7696e047-3c40-4621-9b42-dbe01a0c8f24", "value": "384:kEmWaCpixk3FAj/dYmuZkLxDmWaCpixk3aebgje6dowuiScnhHYmuZkLqmKwrfh5:k9nY6P8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776694688, "uuid": "b0b462a7-3d56-4cc5-b592-f2f66e84cc9c", "value": 290789, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694688, "uuid": "996dc1a4-87d1-4f7e-a2fa-9a6660a6d73d", "value": "application/csv", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1508dc3-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776694688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694688, "uuid": "043da833-8a08-4d4d-b7ab-406a73932640", "comment": "Malware payload", "value": "81f50ea87cede73e0fe2d60e19a9dc11", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694688, "uuid": "65291443-f7d9-4c40-b8e9-aa041d63790e", "comment": "Malware payload", "value": "f163992c30967ad15ae0eaadffa8260e9028ff31e4dffce08c51202943edc79d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694688, "uuid": "2e88c700-e47a-4fd2-a05a-58dab419f622", "value": "T1C0547CFDEA4D34183D2A9C6E9B5A0077248877E0272F5DBB21364A4613441D7BF9EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694688, "uuid": "d178cbad-4971-45ed-b190-8cd5426b61f4", "value": "768:9X+pcdJ9eWN4YWlKxgcXfsMm7BFD3ViDJNbb9gdiYqrlzzC20kB/chztBdLmIvjr:9Sf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776694688, "uuid": "bdda27cc-abcb-47c9-9b72-d7af77f00769", "value": 291612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694688, "uuid": "9e2ceeac-186d-40e5-9339-b7cee1193364", "value": "application/csv", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c18fb7f8-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776694688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694688, "uuid": "28f5a1e8-7618-4725-a206-282beaa98cba", "comment": "Malware payload", "value": "a1b686f2ac0b0f7065f84c3ef9e92cc8", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694688, "uuid": "2181aa1d-51cf-4abf-a729-3d4b5012ff0b", "comment": "Malware payload", "value": "7fff3a4131f50d193aedc07062e81a71b77c7b0ff5169288d1370ac3d5e690a0", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694688, "uuid": "b536fdf3-f24c-49bc-b23d-892d741a67fb", "value": "T1F6D57CDD094565A2D3FFB3A0C1B53E1E26B173235C17691AB3FDA1C9CA502AA6D83F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694688, "uuid": "b240a9b5-74c1-45cb-a750-07ef2fd4fe61", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGzPIUUutV6n/4d:8UixbItdTrJoFVPMvXGzwmVoKZ3p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776694688, "uuid": "3d75cefe-0e13-4737-a4fd-7faf6972edaa", "value": 2935633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694688, "uuid": "b68b0e2d-f5e5-48aa-a943-a59fd91a8bc4", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4c8d2a2-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1776694747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694747, "uuid": "1818d8d5-00af-4122-aa78-18937efec7e1", "comment": "Malware payload (AsyncRAT)", "value": "5bfc0f8b172c57bb87ec059a1d585a38", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694747, "uuid": "1ff8fd70-b50b-4761-96cc-a14f07059da9", "comment": "Malware payload (AsyncRAT)", "value": "a5f613f5f0f3cd8a5d88779067cb1d1e8f9fb28d7e3b2a78b44f2ad0f96f5e86", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694747, "uuid": "345f7088-0aba-4cc1-8184-27f4e32b3eb7", "value": "T170D4A24CA91E1A7C09FBAC7BDDB46C4B2682D0C789573079F5179ACB85299CDBDC23", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694747, "uuid": "69c4d1c1-87a1-4e3a-801b-a6a390dfd6cf", "value": "768:kPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPeS4sPPPPPPP8:F9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776694747, "uuid": "503f460f-3cda-4dd1-9e1e-25229373ecf6", "value": 622093, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694747, "uuid": "4a923bb6-a9cf-4c89-bc79-0c269b10e2ea", "value": "application/csv", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2523326b-3cc6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776695714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776695714, "uuid": "534e7d50-0e6c-430e-a738-2a1ff1ab60d9", "comment": "Malware payload", "value": "63b852908b4a5c66ca52a925e9a05d59", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776695714, "uuid": "ba702e2c-ce2a-4837-9337-5c652e36b6b0", "comment": "Malware payload", "value": "d2810f1a6a61109910a0d84f919952aaf50e967f4f4dcef9b4d71b69d2b88024", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776695714, "uuid": "2c38edee-5ede-4361-8b0b-b7ce5577766a", "value": "T1EED56BA688B1BF13B7AA8E4873341E5D101426370FDB110AB4FEE7C67683975346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776695714, "uuid": "2915b3bf-b67e-4988-b54f-e175869fba44", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTbvPaPX4JtA:m0eF4xaDjDONijDG8ZxFT+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776695714, "uuid": "096e5f4c-fbff-4c37-8fc7-0c267013c12d", "value": 2999168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776695714, "uuid": "3ecda267-6ec3-495d-85c0-de0b8e899ca7", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "459de859-3cc6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776695769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776695769, "uuid": "3cd9bb31-94b3-4174-af0a-3612f8a95cf0", "comment": "Malware payload", "value": "6823a14dc509052a71b3c7263b87da8e", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776695769, "uuid": "765b81f6-e45b-4f42-9503-ec9cafa9692e", "comment": "Malware payload", "value": "c8a8fae3307e362b1e2ab47d2ea5cd3f43dabc8fd4b7b3ecd84f5033f75395a0", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776695769, "uuid": "7ba024fa-6a81-4234-884b-11584b916cda", "value": "T111D56BA688B1FF13B7AA8E5873341E5D101426370FCB110AB4BEE7C67683975346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776695769, "uuid": "3675136a-8dce-49f0-86b4-82ef357f8b03", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTfH/Rn9vH4bn2N1:m0eF4xaDjDONijDG8ZxFTH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776695769, "uuid": "9c9f0f53-12d3-4345-832a-8799472a37b3", "value": 2966990, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776695769, "uuid": "6781141b-42c6-4ccf-a311-df0689125a7b", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cf62dff-3cc7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776696130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776696130, "uuid": "4ae09cfd-4348-47bf-b2ef-abad7b83c570", "comment": "Malware payload", "value": "707bfe3376e97333395057a68f6f431f", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776696130, "uuid": "590c1a4e-fb22-4c06-bb36-736cde6efa5f", "comment": "Malware payload", "value": "a493d9ee3a0d3cb970f32cd3f8c18d160c1eafd7be2142daceae2be39568d082", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776696130, "uuid": "33d507e9-221f-44fd-a5ba-f1dce5a91ad2", "value": "T1F194236E44F6FD15AF66204EC27CABC67337D80C3CD9A268A049CBC6F914D365152C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776696130, "uuid": "ffb03e96-54d9-459c-a854-1ffe5c4b5622", "value": "6144:9dDkBs0/nYrddDi3WtVy/PToJaz/Yl3+gSRCD01u6dATbvJwVRY1rhi6CnWeJZmN:9WnYpdJuPToJhOXCDbvLiDNm98mEwx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776696130, "uuid": "5cdca828-51c4-42bc-9e26-21f3f8a53344", "value": 423488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776696130, "uuid": "75291d3c-07ea-4a7f-ada9-4a6dfd921a89", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad9496f5-3cc9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776697232, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697232, "uuid": "856089f9-dc38-446e-8480-11116564d17f", "comment": "Malware payload", "value": "d911c99cb1f3e20c0a43dfa67dd6f37f", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697232, "uuid": "152d525c-1d82-4f7e-89e3-413508220773", "comment": "Malware payload", "value": "6b7d3e8fb5d674afd42a8532abe0ce99cc8d9e3010d972755754c5ef52e11c3d", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697232, "uuid": "85888de0-531b-4639-b177-88afa734fb39", "value": "T129533E63852A0F080AF6EF988F0FCDAF5AF5C515914CA2ACBAD98DDF95BC558306C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697232, "uuid": "5142d981-afc9-4343-9c22-2748f6fcd8a7", "value": "192:P001nwBvfCjDih7XAIKa/QURqT+vdEk/rgv7xZ0FsnosWFuGoA5r:MkKC/itXS2U+VEkD67xZClsW9r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776697232, "uuid": "55d154a9-0aa5-40ad-a09f-d023c8ba4c3b", "value": 65630, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697232, "uuid": "be69b7f1-a1a5-46de-8fd0-ff8306c447f9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e050fcef-3cca-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776697746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697746, "uuid": "2da5c4f6-ca50-4dc9-8080-8a190029cc6d", "comment": "Malware payload", "value": "467498931d0afcfe62b39507aa96d518", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697746, "uuid": "148a10e0-6dd3-490d-9675-88bb998417d6", "comment": "Malware payload", "value": "7da8aa5f6cae1519fb662049dbd72770ce092ed709c621f8bae63656b7a405ef", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697746, "uuid": "18605cd2-3528-49a0-a539-f1c90c3206f1", "value": "T1ACA527E288B0FF17B7661D1873745E691018153B0FDB0209B8BEDBC67683DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697746, "uuid": "d0c16adf-c5fe-468e-8407-9ce4b46b6888", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTQ:m0eF4xaDjDONijDG8ZxFTQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776697746, "uuid": "196885e4-0501-4eb1-aecf-1d3b57a6c9f4", "value": 2152250, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697746, "uuid": "b53f6d86-1f47-4ec3-a2fe-1be059c770e5", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3015388-3cca-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776697751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697751, "uuid": "1b88dc1d-f01b-40db-a368-aa98ee899cca", "comment": "Malware payload", "value": "1fb818df39c95e848f8ee0b59860018f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697751, "uuid": "ef86af99-1ebd-4573-99d2-913f7cbe3f63", "comment": "Malware payload", "value": "b98b38421db78fce2eccdf24d78ed258c0db7377911ec4c6b53d7ed940983350", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697751, "uuid": "7764820a-f13d-49c2-995b-e9f7cd350906", "value": "T1B2A537E288B0FF17B7661D1873745E691018153B0FDB0209B8BEDBC67683DAA346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697751, "uuid": "d64e4f5b-663a-45f4-9f6f-d474a95fd8db", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFT0:m0eF4xaDjDONijDG8ZxFT0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776697751, "uuid": "f2645b2f-9b1c-439e-ba3e-3fdbe63d9a7f", "value": 2151292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697751, "uuid": "b3e4330b-b969-4a5d-95b3-9e9c76945d07", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04ca02da-3ccb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1776697808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697808, "uuid": "117b2cb2-8cae-4917-bf49-57b388662b5f", "comment": "Malware payload (Formbook)", "value": "c67c00ec2571c34cfc388c2dce624b4c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697808, "uuid": "8f69d839-a5a8-422a-815f-c65d1d88cff5", "comment": "Malware payload (Formbook)", "value": "274137298b71f344350d914dd6034e3d3857be280ef929c7fe71f5bca813c5ec", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697808, "uuid": "4fdb3639-110d-4a8a-ad24-8dfa4473c941", "value": "T14235DF181E4A6F94E6FDCBB8C16218D4F7F8D6038392D61F7EEC00F806A3B95C5299", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697808, "uuid": "2d87e0e2-10b4-4a87-a950-fa7ced273e0b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697808, "uuid": "7c005d7f-8aa5-4365-8e70-e5f70bed3e69", "value": "24576:1ENtONBujN5eQYQO5xvOfuIFlpZn1StLjtZ:1EvqYDMQJf9Pn1Sd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776697808, "uuid": "da1cb521-b372-48e8-9442-d8688e97ffa9", "value": 1145344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697808, "uuid": "56499449-4396-42f9-9aaf-c8aaca5623a3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d2e3f82-3ccb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776697822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697822, "uuid": "e1b97ed6-d22d-4887-a2a7-69c7a4b9dd9c", "comment": "Malware payload", "value": "7452fbcdecb82295a0f71301cc2b3d74", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697822, "uuid": "1ad0e96b-67aa-49f5-8dfc-b197bab8e53b", "comment": "Malware payload", "value": "1d6b7846c9c572f494071febf89b581a492d430de3df87f39a60dde22186f63d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697822, "uuid": "b17484b5-e58f-49fd-b43a-42a8fe213be7", "value": "T12DE63322C32AE455DD7732783C9FC30AD66E86983B06E9CF2E712A5D6CA56D0431B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697822, "uuid": "4f3dc112-79c4-4dbb-be9d-ec5a7798ad2c", "value": "393216:5bDVHb2crwioecmL0tEHUx3Q8SDUr4E8z:JD9JYo0xVrc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776697822, "uuid": "f061ed2c-b632-4d8a-b6a8-f8d553e47c18", "value": 14593642, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697822, "uuid": "b37df0fc-2bc8-4391-a81a-0b8578bbe8ad", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47e17c04-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776698350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698350, "uuid": "95ffe396-074b-447b-8322-11d1b98d50fc", "comment": "Malware payload", "value": "531609a6a90ba372e04d0655c7691795", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698350, "uuid": "d9fcd0a6-4ead-44a7-a05d-8828f9410306", "comment": "Malware payload", "value": "0467aa68993de226374c81955ac599cab2ca8d4ae9d491b0970c4abd24a23715", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698350, "uuid": "177b888d-994a-4016-a1f9-3fd13c47c3bf", "value": "T1304412C790A875B745A40D4BD97A704F186BE922E7D254BED058831E0BB1FE2CEE87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698350, "uuid": "f3945a29-5d76-4266-9d5a-bac478321742", "value": "6144:+3cKZVkU0rrlDOfDAVGk2JhKFCU5xaselK0Uzk5ChnwnWWwikanoEMXvA:+3cKZIlOfDAVuKCU5xziUWVnNkanzMfA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776698350, "uuid": "cba6f2cf-2f0b-4d8a-8b76-5f3f55ba121b", "value": 278080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698350, "uuid": "8b67dbf2-98d1-437f-b423-f5d652a2561c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b483eb1e-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware payload (PhantomStealer)", "timestamp": 1776698532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698532, "uuid": "909df038-0963-4f7a-8c10-558d09ca94c5", "comment": "Malware payload (PhantomStealer)", "value": "2f98f84d2ced5098c5a4b5a17c9896f9", "object_relation": "md5", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698532, "uuid": "74b77c96-689f-436a-af12-016679ace67c", "comment": "Malware payload (PhantomStealer)", "value": "f8f6689786a1f7235aed602b9e9823cbb104a36eb0892ffde676bf46da6cd4a1", "object_relation": "sha256", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698532, "uuid": "6caaa435-2139-47fc-b531-b2b32f95b885", "value": "T1B9F4DF6873F85A00F1FF5BB294B59D51AB35B513A961E71E11C081C80E72B918F8AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698532, "uuid": "d2653130-f99a-4053-a837-2154041854b9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698532, "uuid": "43774e21-f14b-4011-8f91-5bc3468eac34", "value": "12288:H9KNWvkqjVnl36ud0zR/6CtQ9PUHIG8DXjAGq2amJYeQabm3NUW6:H9hkqjVnlqud+/2P+ATAS/JYec3NUn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776698532, "uuid": "d09daa65-4d68-4f4b-aa3a-44b49654f84c", "value": 750592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698532, "uuid": "9bf73819-1669-4965-9c4e-27b3fcdb2197", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb6d8def-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776698651, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698651, "uuid": "394d3b78-9a2d-4071-b1f2-14b3f47aee91", "comment": "Malware payload", "value": "5f80494f9a74bb02aa1d9d22bbba0bac", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698651, "uuid": "ec029f15-3578-4366-a344-9f2b257e0911", "comment": "Malware payload", "value": "3f7224bd19ec29586e007fb78362c3dd2318260d1e1bef2e56d6118d93227ae2", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698651, "uuid": "84ab9ac3-c5be-48fb-9904-1d8155a74325", "value": "T1CD4412AB7C26B9816DB1EDE10BFFDD85EB081257D2E4002F5A6A3220495F1A843D79", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698651, "uuid": "bbec4acd-9d83-4354-b8a0-b67945c02a9f", "value": "6144:7e0M4TT9X1YfKp4XViBNwfgRbxBgmCQ9XJI2dO:1hXbYfKp4liXwUbxBLD9Xo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776698651, "uuid": "212ed929-4d18-41f3-876f-a0b79cb2960b", "value": 278080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698651, "uuid": "02cfa23b-4b5f-40a6-ae8c-c0c4becc69be", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcda9c5e-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776698653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698653, "uuid": "57e30f18-1fe0-4cb4-9938-930d5ca43519", "comment": "Malware payload", "value": "2b0bf15a1d5335a20514475417728eec", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698653, "uuid": "690e4dd0-9c86-4e52-9b30-56a58067d164", "comment": "Malware payload", "value": "cddfec6344d45c365d29d11027da3d39a733ebec3c50e234579b5310ef3adf5d", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698653, "uuid": "d39f1d4b-a8c4-4fe3-b053-42449fe9ac2e", "value": "T1EC74477EF92BB0385208C165166F703A3D2A550B80CCE6949D9BB5DBF3D5A8F846DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698653, "uuid": "5e6a62d7-c12c-4339-a14e-85d120b80af6", "value": "6144:YnAhvO4bS2CdrkTogd366scTEZIyjaVOhsRzexajll7OyzhkyiPlWd:YnA1OUiwoC36oINja4yzNlFtHiPlK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776698653, "uuid": "791b4636-5a4a-43d8-badd-c29e67945432", "value": 353100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698653, "uuid": "0ffa6925-c1c8-4b73-8341-8699ef357b3e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cab13133-3cce-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776699428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776699428, "uuid": "a87acc4a-0e29-4596-9d0a-a28fe5a98264", "comment": "Malware payload", "value": "ddea218ec718e6fb07965c3bdfd1e84f", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776699428, "uuid": "b2f67653-4793-4a30-812f-6953e7ee2d9c", "comment": "Malware payload", "value": "9c0fc1b3ab8606234bc40b7409dcf1a51a1a3fd26343582d5eba0f05e546d38c", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776699428, "uuid": "07554675-feda-478b-9eff-641ef59c7414", "value": "T11764A92CD652BE31646E38A0D1DEB613286DFA8B4DA1DBF2D055CF56B4B462730F40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776699428, "uuid": "69cdeb2c-8474-4620-9c1a-724e2087a3d1", "value": "96:y555555555555555555555555555555555555555555555555555555555555558:5pybu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776699428, "uuid": "f5d2be31-5f1d-405d-a3ee-728225859a3d", "value": 317525, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776699428, "uuid": "d2516a57-cb0f-4d9e-86f1-1704ac5c3d4b", "value": "application/csv", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a024611-3cd5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776702246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776702246, "uuid": "7044740f-2d1e-46c8-95e1-658fea8345f9", "comment": "Malware payload (Mirai)", "value": "6429603850d048d83336e21c35953fef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776702246, "uuid": "41711476-248b-49cd-beb0-019cbbc3cde8", "comment": "Malware payload (Mirai)", "value": "de8a25c23e0f02b22b9441161c221773a47c634421bba4a1b82dcee20ba042cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776702246, "uuid": "c8eeac19-079a-47fd-95b2-7cf7d3488595", "value": "T1D65302614638B7C2EBBCE8B8AC8699964F6B4F3E25917993137088DDD197B13C6700", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776702246, "uuid": "483fb4d2-c0a6-4684-a2a9-2eb37fcd2805", "value": "1536:y9vZKLwqj37i8q3/lJy9TujRi0SPLFA2dnripWi:GvZK5jm8qvDlitPLFA29KN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776702246, "uuid": "d71d7ac4-113a-45b5-aa9b-831d7b4deff0", "value": 61980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776702246, "uuid": "edf1ba5b-3bc7-44cc-8916-c6c3b65fe788", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b7b6f22-3cd8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776703456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776703456, "uuid": "1c58f181-871a-4e17-b605-5150a6120677", "comment": "Malware payload", "value": "6b4bf3d1eae921a6cd221e6879c34cd4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776703456, "uuid": "1793ea63-cf43-4d63-8e40-c25ad3d1378a", "comment": "Malware payload", "value": "338b0fab109baaccf612e5a36faadcb27eade5836b964cec6104bb6b7c5d0137", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776703456, "uuid": "a249fe20-77c3-4632-86d3-58496285b12f", "value": "T144A5E10CE14B6C33C967F2FD9CE75246DF26E08221D85D92A8CA69381B4B6143F725", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776703456, "uuid": "c12052ed-35a8-4eb5-b744-df9e4101e227", "value": "49152:T25lVdNT42ONA3bNmq1QFLJ2CtYuhXfB9ufJbj:CVoOmqyD/hxGfJbj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776703456, "uuid": "d607b5ed-92af-4d4e-a8e9-046fb973bdae", "value": 2151138, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776703456, "uuid": "25599234-79cf-4e7c-b637-a5da0176d94e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd15d4fb-3cd9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776704183, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776704183, "uuid": "3ab9638e-fea8-4c84-9d8e-91ae712a67e2", "comment": "Malware payload (Mirai)", "value": "86f9de9aad81e9ee3e7ebac16f2c6c00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776704183, "uuid": "ffa75596-6b46-475d-9a43-16017b5eeba2", "comment": "Malware payload (Mirai)", "value": "cc67085207ae331c7cbb7738c7561e4abbeceb3ed3cc58c9c1b8d0288fc0893c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776704183, "uuid": "976524a5-8e00-4e48-b6a3-6d0c69f71e5f", "value": "T10E03F16CC6038D30DB111777E5F95513BA57FFB8C1B665B323A427B91DC698403246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776704183, "uuid": "2465fb0c-9a10-4c2e-908a-ef22fb3b5ff2", "value": "768:yZlN9dtEw5BkURToTlZgOoEOcQS4gBJjOTJHQaxkJ2CywCGOPHB9LHk9q3UELAw:yZXjtrPlRUlE7lkOTGaxkYCvCv3LHNLp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776704183, "uuid": "90d736c5-82c2-4979-821c-cf7fd7117234", "value": 40500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776704183, "uuid": "5b222930-d55e-4e21-a9b3-a1cee70ae2ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5dced17b-3cdc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776705258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776705258, "uuid": "9331e3af-a331-4541-901d-29401a80fd81", "comment": "Malware payload (Mirai)", "value": "5d964a7b59f1b48b97c9a721d01970b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776705258, "uuid": "335c06f6-c59a-40e3-9b31-b3883ad42ed7", "comment": "Malware payload (Mirai)", "value": "90a22604f8a7a4f427764e9da9bb8fa55d0dc6029d9a7d999f9266022e500795", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776705258, "uuid": "5548a890-083b-49a3-b320-c9cbdbe77d17", "value": "T179F2F13863560630C2F04C75D9DDCB0632144A7AE5BA28F2B54016AAC54FB797F72B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776705258, "uuid": "8d2c4982-bd14-4d0b-92c7-129aebb75765", "value": "768:ijVtoCoxpDX1wFn1lKCSjXPZRKXl/XQqkNSQFEs3UoziC:utoCcWF1lKCMRKFXQqkdhziC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776705258, "uuid": "fba2b74c-b8a4-4591-b902-f536d508c8e6", "value": 36948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776705258, "uuid": "1e4d1df8-4988-4338-933c-9076ca5a7bb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4497a6c3-3ce0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776706934, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776706934, "uuid": "3f9f576f-194b-45fa-87d4-d50261c02b70", "comment": "Malware payload", "value": "47150a9cd597f1dc12643892a3cee764", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776706934, "uuid": "e7774e42-7cec-4956-b2f0-caf6f9cbb1fc", "comment": "Malware payload", "value": "5a830b542a0a6c08a8bf41152fa9820a1ff240fd4ea1ac800ee28cd3164de8ab", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776706934, "uuid": "bfc78524-e52c-4abe-8ff9-371365327b84", "value": "T162522E7CC5E5BDC4876B71C078EEFBCA008E9B13BD6A1B1CF9D804604B50365ABB95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776706934, "uuid": "cf93022b-81b7-4d61-9191-1c73f73d496c", "value": "384:NuohDoCee/tg9JxbuFL2i1FcNGp6VIeFp91duaW7Sj363VcXr:xuhsBBcNy6VIeNEISWb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776706934, "uuid": "917278c4-e4e6-47eb-804e-0fb4c26e0dcf", "value": 13413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776706934, "uuid": "7414ba87-be59-4f0e-b632-4ce90f9bfbc2", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1500f282-3c24-11f1-bc00-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1776707442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776707442, "uuid": "4c988dbf-9080-43cd-ab9a-0a020de433ea", "comment": "Malware payload (ACRStealer)", "value": "53064d8242b201563c9f5b0f42b10232", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776707442, "uuid": "a70c03d9-0781-48e9-96b3-2ab6367d6f4a", "comment": "Malware payload (ACRStealer)", "value": "aa047a9a7f1d3161c6285d40634c5387fbaa990f9e5868f7a036c3d260fcd055", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776707442, "uuid": "fe2af9c7-3756-4d8a-bd24-4ee9a663e085", "value": "T152168D1BBCBA6859D099F2348473B605F569F8451B2317D716B0BB682F3A3F04AF9B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776707442, "uuid": "393c5960-a054-4eee-8bc5-3e32c08a649e", "value": "dcfc31003c379edf77782fe7ed76661b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776707442, "uuid": "f222732a-d3aa-4a4a-b846-1ce64ed2425b", "value": "49152:hMHek5pxoPAHVODOagqKF4Rny/mzoVtW0W7qjUZwQc6dwy:hMoAXyqopbPwy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776707442, "uuid": "24fb189f-8122-46c5-b844-2144229f27ee", "value": 4282408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776707442, "uuid": "1ff3dd04-484f-48f6-adcf-221081ef5752", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e972c884-3ce3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776708499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776708499, "uuid": "4d3a52f3-06bf-4c2c-bc1c-2af91138a982", "comment": "Malware payload", "value": "9a25ac4fe620a2d0dc54173471959856", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776708499, "uuid": "8bb66274-ef66-44cd-b268-ce818bb20429", "comment": "Malware payload", "value": "bcc0510d86f7bf85b2815cb03a0f9ad9b2ef23e0e0e95e277c605ec9d177aae4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776708499, "uuid": "3ef6a288-d53a-434e-b2c0-9e896f6d280d", "value": "T1358309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776708499, "uuid": "a7e8d33c-c63d-4b07-8f7d-8343848d2b7a", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnaWaVVN/:XEKltp9txAX/yr2pbaWMVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776708499, "uuid": "850214a7-92a6-4816-bf18-7e3d971aa819", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776708499, "uuid": "279acb46-8d70-4313-8701-8a48372c1bac", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7527b0a9-3ce4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776708734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776708734, "uuid": "c1d9a294-e441-4d5b-88e4-69b8b395d3c8", "comment": "Malware payload (Mirai)", "value": "9962570a8cafbe61713e291257ecb31b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776708734, "uuid": "4dfc0e3b-d36c-4bf1-a6c0-834013e6c6ed", "comment": "Malware payload (Mirai)", "value": "2e0f705a3ce36fc2faf33287957ce294ca9a2b5439094ebc0fc91c72c43a2358", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776708734, "uuid": "6ebfd508-f057-4977-8168-66db17b2b43f", "value": "T17543971E2E619FFCFBAD863587F39E219648339216E1C684E15CDA011E7034E745FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776708734, "uuid": "a32d802f-2c07-4b59-a374-c843d460112e", "value": "768:RaT+l5PNxAGJYmzrEIPfEIXwKE5jNxAjACOFym6OCLdc34pAOreBAWslnk/zw2:Rn5FxAGJtzh6H5jN2ZLdc3EzCw2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776708734, "uuid": "62c77836-721d-4be3-8860-84370793bb5a", "value": 57108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776708734, "uuid": "567c43d5-a412-4253-bf0d-ecf8892c3b21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02b3b96f-3ce5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776708971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776708971, "uuid": "ac256604-6b97-450b-9d78-f43f6883de3f", "comment": "Malware payload", "value": "684f3c47692f0e1b34ce5440455f2c91", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776708971, "uuid": "87d7e903-7aed-4a4f-b0fe-423e1a2d11a6", "comment": "Malware payload", "value": "a0ec322cde5d82a599fde36d58a288451a5f4d67ee34148c88857cc46fe2891f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776708971, "uuid": "913d0aad-a65a-45e7-a115-72f637b31784", "value": "T1B2C1C741798C42AF02D161EEA537B70CF49FF5324791D82AF0F421B72B60F498E6A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776708971, "uuid": "2dcb0762-a522-41bd-b6cb-da5b1fe37c91", "value": "96:mgTrR/wGMBUu3g5ZtAy65C5Rsq1SlTApNYGZWH78U+TEdPeSSeIMJjym:mgXRcBQ5YBuxSFAoGBJTmPnSYF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776708971, "uuid": "fe42da5d-8115-4a97-be72-af1c1e84084e", "value": 5736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776708971, "uuid": "94585c95-b1c7-4947-8c18-cf7edabf446a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00b7c22f-3cf7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776716699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776716699, "uuid": "31f0094f-3069-4d6e-abe6-ee04a39f451c", "comment": "Malware payload", "value": "e7836b8f8146b4e26b927eae89873c48", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776716699, "uuid": "a2f9de27-a346-4f93-926f-430f326ebfe9", "comment": "Malware payload", "value": "08a64523d7a05defb6cc5c87df340d76f9ef7ccc9623a0d338981be4cd9cd6c7", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776716699, "uuid": "36716824-0117-4576-b927-bb643ccd58ca", "value": "T1D06601237EDAC869DD6740B351D2D26B602A12DBE80BD02F87A00DC55E71DCA4396F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776716699, "uuid": "bac39874-5eb4-44df-8b07-a820afae4370", "value": "98304:nY/NlRQ5ipSPYiWm6CeKmcCueA7NNZ5Ixo07qUnbvgvMRwrdjoH3bHe5h35pKrVI:W2fYiWmrlm5BZj7qqo0GBY3rU32q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776716699, "uuid": "41cc7338-e685-470c-b26c-4612290d56e1", "value": 7064566, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776716699, "uuid": "f3886f93-6b24-4fc2-96e2-4f7bfa90758b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3d9a7b7-3cfc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776719227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776719227, "uuid": "6d59923b-6660-42f0-9ef2-6f6bc31de2f0", "comment": "Malware payload (Gafgyt)", "value": "9dd048f656f0350194b2334960b1238d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776719227, "uuid": "78065b57-0d7c-4966-9c11-d17091b21135", "comment": "Malware payload (Gafgyt)", "value": "daf726a0c68fc24afee3c80cd0ac68adcc9874b6b2315aa07692acb475fc4882", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776719227, "uuid": "28687cff-d5b5-4271-9fdf-eeb73498587d", "value": "T12A83B4197F310EF7D8BBCD3745A84702209C5B1622997BBABC74D518FB4A54F0AD38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776719227, "uuid": "aee01439-707a-4916-8afb-4785d38e6b1f", "value": "1536:/H2cHJONniygawR7DzlbpmFAkguRzxp2ZeWZ/1:/HtpO4JNpbpm5x4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776719227, "uuid": "d40f31b3-8227-4f03-bacc-a7c4225a47fa", "value": 84316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776719227, "uuid": "3bfc64c9-f72a-4c7c-8f8c-1a3cbe0222ef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776643333, "uuid": "2f24700d-3c4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-cake4.apoth-shopping.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776643342, "uuid": "34ee4db3-3c4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.227.163.32:42392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776643691, "uuid": "04b8abf8-3c4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-coffee5.apoth-shopping.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776643824, "uuid": "54463dae-3c4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.215:38707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644049, "uuid": "da0735e3-3c4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool-drink6.apoth-shopping.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644231, "uuid": "46a87240-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.73/00okppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "4d3c2d86-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.73/00okspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "4d3f91ea-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.73/ok", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "4d404b69-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.73/00okm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "4d416268-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.73/00okmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "4d435467-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.73/00okx64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644242, "uuid": "4d439e19-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.73/00okmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644295, "uuid": "6ca042ca-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.73/00oksh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644296, "uuid": "6d48707d-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.105.233:36256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644296, "uuid": "6d67c7bb-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.158.117:34879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644348, "uuid": "8c74863e-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sky-view1.white5lave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644361, "uuid": "941f78b0-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.73/00okarm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644361, "uuid": "941f7f3a-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.73/00okx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644361, "uuid": "9422ef66-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.73/00okarm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644361, "uuid": "9426076a-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.73/00okarm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644527, "uuid": "f6f5ae34-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.133.85:44081/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644769, "uuid": "87043097-3c4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sun-light2.white5lave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644828, "uuid": "aa35038f-3c4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.45.57:52525/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776644829, "uuid": "ab198427-3c4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://ts.bhaaratkeeshakti.vip/fwefwe324234234rgeffwehtrwyrhtrhtqwfqwd31443wefefwwfer3232fewwefwefwefqgrqwtherergqefwefqweqfwqf32fefwsda/uploads/EFewefwewFEW342234423234feWEEFWWefewefweffewwefEWF.php?file=333.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-empty", "colour": "#752700", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776645067, "uuid": "391818de-3c50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-cloud3.white5lave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776645128, "uuid": "5d6f19ba-3c50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.215:38707/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776645368, "uuid": "ec257638-3c50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://white-snow4.white5lave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776645667, "uuid": "9ebc4287-3c51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-wind5.white5lave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776645923, "uuid": "36d50e3e-3c52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.158.117:34879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776645980, "uuid": "58dcb150-3c52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.18.169:34786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776646032, "uuid": "78287815-3c52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-rain6.white5lave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776646219, "uuid": "e7568aa9-3c52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.197.199:36416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776646395, "uuid": "50733229-3c53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://book-read1.art-tonsillitis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776646446, "uuid": "6ed33799-3c53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.254.198:49077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776646626, "uuid": "da536803-3c53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.45.57:52525/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776646688, "uuid": "ff3ee669-3c53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://new-story2.art-tonsillitis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776646824, "uuid": "4ff743a1-3c54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.105.233:36256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776646878, "uuid": "708bd7a5-3c54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.181.242:33520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776647048, "uuid": "d5a410b4-3c54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://page-turn3.art-tonsillitis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776647353, "uuid": "8b657d22-3c55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/PremierFlare/CS2-Cheat-2026-External/releases/download/new/CS2CheatExternal-4.3.7.rar", "Tag": [ { "name": "pw-8871", "colour": "#1f365f", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776647410, "uuid": "ad463bc6-3c55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-word4.art-tonsillitis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776647709, "uuid": "5fb7765f-3c56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://old-tale5.art-tonsillitis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776647723, "uuid": "67e911f5-3c56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/spineround/hamfal/-/raw/main/L7XH7UR9695U.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776647830, "uuid": "a7cb28c3-3c56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.254.198:49077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776648068, "uuid": "35a00a29-3c57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-plot6.art-tonsillitis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776648075, "uuid": "39e6b2f8-3c57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.66.72.84:55895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776648131, "uuid": "5b0faabf-3c57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.66.72.84:55895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776648200, "uuid": "849cec7f-3c57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.9.3:49600/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776648427, "uuid": "0bd59c39-3c58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.2.132:46863/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776648433, "uuid": "0f564927-3c58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-system1.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776648625, "uuid": "81e09e9f-3c58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.207.241:58129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776648729, "uuid": "bfd58339-3c58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://power-unit2.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776648786, "uuid": "e1a16b0c-3c58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/govardhan908/DBFZ-cheat-engine-mod/refs/heads/main/Caprimulgidae/cheat-mod-engine-DBF-2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776648790, "uuid": "e40e9574-3c58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/govardhan908/DBFZ-cheat-engine-mod/raw/refs/heads/main/Caprimulgidae/cheat-mod-engine-DBF-2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649026, "uuid": "70c7e08b-3c59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Golane2/GasHero-Finance-Game-Bot-Auto-Farm-Clicker-Crypto-Blockchain-Hack-Cheat/raw/refs/heads/main/Portia/Cheat-Auto-Farm-Gas-Bot-Blockchain-Clicker-Finance-Hero-Game-Crypto-Hack-2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649027, "uuid": "70ffce7f-3c59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ulas6221/Axie-Infinity-Bot-Crypto-Cheat-Auto-Farm-Clicker-Game-Api-Hack-km/raw/refs/heads/main/unfragrantly/Crypto_Hack_km_Game_Axie_Clicker_Cheat_Api_Infinity_Bot_Auto_Farm_3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649027, "uuid": "71116e25-3c59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ulas6221/Axie-Infinity-Bot-Crypto-Cheat-Auto-Farm-Clicker-Game-Api-Hack-km/refs/heads/main/unfragrantly/Crypto_Hack_km_Game_Axie_Clicker_Cheat_Api_Infinity_Bot_Auto_Farm_3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649027, "uuid": "71155586-3c59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Golane2/-/refs/heads/main/intersexualism/Software-2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649027, "uuid": "712c6623-3c59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Golane2/1/refs/heads/main/mattery/Software_1.8-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649028, "uuid": "71dacf34-3c59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.163.68.69:40970/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649028, "uuid": "720799f9-3c59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Golane2/1/raw/refs/heads/main/mattery/Software_1.8-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649031, "uuid": "73dd3557-3c59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Golane2/-/raw/refs/heads/main/intersexualism/Software-2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649090, "uuid": "96e2c859-3c59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-sensor3.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649390, "uuid": "49a73ba5-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-input4.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649569, "uuid": "b443c312-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/habibhassansehani/openai-sdk-knowledge-org/refs/heads/main/public/images/knowledge_sdk_org_openai_v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "b4e0f644-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Shaki774/AI-Tools-List/raw/refs/heads/main/transillumination/Tools-List-A-v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "b4eeb62a-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Oskar2133123/cursor-ide-setup/refs/heads/main/docs/setup_ide_cursor_v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "b4eec1c3-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Shaki774/AI-Tools-List/refs/heads/main/transillumination/Tools-List-A-v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "b4eecffa-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/DeepuNikki/hestiacp/refs/heads/main/web/locale/sv/Software_v1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "b4eee57a-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Shahzaib14458/Wall-World-hacks-strike-kill-instant/refs/heads/main/somnambulary/instant-hacks-kill-World-Wall-strike-1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "b4eef5d5-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/DeepuNikki/Souls-Rebirth-hacks-gauge-no-awakening/refs/heads/main/farasula/gauge_Souls_awakening_Rebirth_hacks_no_v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "b4ef0441-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/camilo-vs/patching-hacked-world/refs/heads/Principal/Landrick_v3.2/__MACOSX/Landrick_v3.2/HTML/php/patching_world_hacked_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "b4fa650f-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Shahzaib14458/Wall-World-hacks-strike-kill-instant/raw/refs/heads/main/somnambulary/instant-hacks-kill-World-Wall-strike-1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "b509086f-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DeepuNikki/hestiacp/raw/refs/heads/main/web/locale/sv/Software_v1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "b50a97c5-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DeepuNikki/Souls-Rebirth-hacks-gauge-no-awakening/raw/refs/heads/main/farasula/gauge_Souls_awakening_Rebirth_hacks_no_v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "b50ea29f-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kelvinlugohe/Hack-Baldurs-Gate-3-Minimum-Roll/refs/heads/main/photoactivity/Baldurs_Hack_Gate_Minimum_Roll_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "b51265b8-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kelvinlugohe/LGTV-Firmware-Downgrade/raw/refs/heads/main/wakingly/LGT-Firmware-Downgrade-v3.8-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "b5126a01-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kelvinlugohe/Hack-Baldurs-Gate-3-Minimum-Roll/raw/refs/heads/main/photoactivity/Baldurs_Hack_Gate_Minimum_Roll_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649570, "uuid": "b52b2234-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kelvinlugohe/LGTV-Firmware-Downgrade/refs/heads/main/wakingly/LGT-Firmware-Downgrade-v3.8-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649571, "uuid": "b54b5e0f-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/habibhassansehani/Arduino-Projects/raw/refs/heads/main/stevel/Projects_Arduino_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649571, "uuid": "b54dcbc1-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/habibhassansehani/Arduino-Projects/refs/heads/main/stevel/Projects_Arduino_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649571, "uuid": "b58cae48-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/habibhassansehani/openai-sdk-knowledge-org/raw/refs/heads/main/public/images/knowledge_sdk_org_openai_v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776649572, "uuid": "b61867ae-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Oskar2133123/cursor-ide-setup/raw/refs/heads/main/docs/setup_ide_cursor_v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650470, "uuid": "cd471e7f-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.188:56974/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650471, "uuid": "cde7f013-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Betawi10/todoList/refs/heads/master/src/components/todo_List_v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650471, "uuid": "cdee3a54-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/camilo-vs/patching-hacked-world/raw/refs/heads/Principal/Landrick_v3.2/__MACOSX/Landrick_v3.2/HTML/php/patching_world_hacked_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650471, "uuid": "cdeec598-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/beolog404/zkm-flow/refs/heads/main/sources/zkm-flow-2.6-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650472, "uuid": "ce4aa267-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.124.106:49343/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650472, "uuid": "ce5af200-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/beolog404/VenusBloodHollow-FreeReleaseHub/refs/heads/main/featherweight/Free_Venus_Hub_Blood_Hollow_Release_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650472, "uuid": "ce6950c2-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Betawi10/todoList/raw/refs/heads/master/src/components/todo_List_v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650472, "uuid": "ce69db95-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Betawi10/Nyc311-Infrastructure-Hotspots-Google-Cloud-BigQuery-Hackathon-PoC/refs/heads/master/.vs/todolistApi/v16/Nyc_Google_Query_Hackathon_Hotspots_C_Infrastructure_Po_Big_Cloud_3.1-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650473, "uuid": "cef10044-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-leaf1.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650473, "uuid": "cf41a0aa-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Emacute/Coder-Kit/raw/refs/heads/main/kindlesome/Kit-Coder-1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650473, "uuid": "cf46c1ce-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Emacute/Coder-Kit/refs/heads/main/kindlesome/Kit-Coder-1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650473, "uuid": "cf46ea87-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Emacute/maize_disease_detection_system/refs/heads/main/syllabicness/system_disease_detection_maize_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650474, "uuid": "cfa9448d-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/beolog404/VenusBloodHollow-FreeReleaseHub/raw/refs/heads/main/featherweight/Free_Venus_Hub_Blood_Hollow_Release_2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650474, "uuid": "cfe7a71b-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Betawi10/Nyc311-Infrastructure-Hotspots-Google-Cloud-BigQuery-Hackathon-PoC/raw/refs/heads/master/.vs/todolistApi/v16/Nyc_Google_Query_Hackathon_Hotspots_C_Infrastructure_Po_Big_Cloud_3.1-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650474, "uuid": "cffffa9a-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DeveloShaan/OpenAd-Specification_AdEngine_Text/raw/refs/heads/main/institutor/OpenAd-Specification_AdEngine_Text.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650475, "uuid": "d01c2c8c-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Emacute/maize_disease_detection_system/raw/refs/heads/main/syllabicness/system_disease_detection_maize_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650475, "uuid": "d0201064-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow-control6.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650475, "uuid": "d023c223-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/gaja25/Demo-OS/raw/refs/heads/main/modules/Demo-OS-sparking.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650475, "uuid": "d023c61b-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/daffaekaptra/BatchAdministrator/refs/heads/main/Windows%2010%20%26%2011%20Scripts/Windows%20Privacy/Batch-Administrator-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650475, "uuid": "d0254405-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Sebs69/Asus-ROG-Aml-Deep-Dive/raw/refs/heads/main/besmother/Deep-Aml-Asus-Dive-RO-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650475, "uuid": "d035d678-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/gaja25/Demo-OS/refs/heads/main/modules/Demo-OS-sparking.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650475, "uuid": "d03bf951-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Sebs69/Asus-ROG-Aml-Deep-Dive/refs/heads/main/besmother/Deep-Aml-Asus-Dive-RO-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650475, "uuid": "d0681dd7-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/daffaekaptra/BatchAdministrator/raw/refs/heads/main/Windows%2010%20&%2011%20Scripts/Windows%20Privacy/Batch-Administrator-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650475, "uuid": "d06883da-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/beolog404/zkm-flow/raw/refs/heads/main/sources/zkm-flow-2.6-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650475, "uuid": "d078e65e-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/62DOC/laravel-docker-pgsql-tailwind-boilerplate/refs/heads/main/src/app/View/tailwind_laravel_boilerplate_pgsql_docker_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650476, "uuid": "d0b4b921-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/62DOC/laravel-docker-pgsql-tailwind-boilerplate/raw/refs/heads/main/src/app/View/tailwind_laravel_boilerplate_pgsql_docker_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650476, "uuid": "d121d98c-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://signal-box5.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650480, "uuid": "d3509a01-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.151.196:59139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650480, "uuid": "d355f8e1-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.9.3:49600/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650481, "uuid": "d3d01bb6-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.187.40.82:53685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650481, "uuid": "d3e0e6d7-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.223.83:51019/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650484, "uuid": "d5e46d54-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.80.133.55:60262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776650494, "uuid": "db9fe9b9-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.42.207:49109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776651428, "uuid": "087ccbb9-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.124.106:49343/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776651428, "uuid": "08a762c0-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/DeveloShaan/OpenAd-Specification_AdEngine_Text/refs/heads/main/institutor/OpenAd-Specification_AdEngine_Text.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776651429, "uuid": "08fdab3e-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.28.176.153:39675/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776651429, "uuid": "0913c4b5-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.163.68.69:40970/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776651429, "uuid": "091bed3d-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-soil3.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776651430, "uuid": "09d687d1-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://high-stem4.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776651431, "uuid": "0a02866a-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wild-root2.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776651440, "uuid": "0fbc442d-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.33.74:33261/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776651501, "uuid": "33f69203-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.80.133.55:60262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776651621, "uuid": "7b46538a-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.126.55:35736/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776651730, "uuid": "bca547c8-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pure-seed5.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776651921, "uuid": "2e609dc6-3c60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.210.175:51379/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776651981, "uuid": "51eb6864-3c60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.42.207:49109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776652092, "uuid": "945fb44c-3c60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-bloom6.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776652159, "uuid": "bc01db95-3c60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.14.246:49547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776652212, "uuid": "dbf322d8-3c60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.14.246:49547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776652213, "uuid": "dc40afaa-3c60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.241.73:58685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776652448, "uuid": "681c1a02-3c61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-shade1.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776652627, "uuid": "d321b3bd-3c61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.28.176.153:39675/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776652628, "uuid": "d377de81-3c61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.17.43:37422/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776652628, "uuid": "d3c34f00-3c61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.81.139.157:56663/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776652747, "uuid": "1ab8e903-3c62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-grey2.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776652755, "uuid": "1f7d67f7-3c62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.33.74:33261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653050, "uuid": "cf2854de-3c62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.240.219.191:54418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653167, "uuid": "1527dc08-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pale-blue3.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653181, "uuid": "1cfaeda5-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.240.219.191:54418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653288, "uuid": "5d45cd75-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/zhaixing238/zhaixing238.github.io/refs/heads/main/mica/github_io_zhaixing_2.8-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653289, "uuid": "5d4dcaaf-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/OFenomenal/git-wt/refs/heads/main/e2e/git-wt-ulexite.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653289, "uuid": "5d51570c-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/PioneerPine/IdentityRegimes/refs/heads/main/docs/Regimes-Identity-v2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653289, "uuid": "5d515a09-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/PioneerPine/IdentityRegimes/raw/refs/heads/main/docs/Regimes-Identity-v2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653289, "uuid": "5d59988a-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/dilancito2107/dilancito2107.github.io/raw/refs/heads/main/Codiaceae/dilancito-github-io-2.8-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653289, "uuid": "5d80e07a-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/aniff23/flashesp/raw/refs/heads/master/uloncus/Software_v3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653289, "uuid": "5da64e82-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/RaiyanRamin1/ipsw-skill/raw/refs/heads/main/extension/references/ipsw_skill_3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653293, "uuid": "5feb307e-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/aniff23/flashesp/refs/heads/master/uloncus/Software_v3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653294, "uuid": "608cc6d7-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Samsan2003/samsan2003.github.io/refs/heads/main/goodish/github-io-samsan-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653294, "uuid": "608d8024-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/RaiyanRamin1/ipsw-skill/refs/heads/main/extension/references/ipsw_skill_3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653294, "uuid": "6090aeec-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Darsq/QILING-Disk-Master-Repack/refs/heads/main/confelicity/Disk_QILIN_Master_Repack_v3.1-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653294, "uuid": "60921829-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jay97637/LLM-Observability-FOSS/refs/heads/main/docs/LL_Observability_FOSS_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653294, "uuid": "60a17612-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/OFenomenal/git-wt/raw/refs/heads/main/e2e/git-wt-ulexite.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653294, "uuid": "60c3ab78-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Darsq/QILING-Disk-Master-Repack/raw/refs/heads/main/confelicity/Disk_QILIN_Master_Repack_v3.1-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "60f3dbce-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/aniff23/aniff23.github.io/refs/heads/main/Hokan/aniff-io-github-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "60f508cf-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/zhaixing238/gitplay/refs/heads/main/src-tauri/src/Software_2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "60f666f3-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/OFenomenal/ofenomenal.github.io/refs/heads/main/yokefellow/io_github_ofenomenal_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "60f8c1fd-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Samsan2003/cg/raw/refs/heads/main/closed/Software_v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "60fda397-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/dilancito2107/dilancito2107.github.io/refs/heads/main/Codiaceae/dilancito-github-io-2.8-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "610299b7-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Samsan2003/samsan2003.github.io/raw/refs/heads/main/goodish/github-io-samsan-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "6102e245-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jay97637/jay97637.github.io/raw/refs/heads/main/tectospondylic/io-github-jay-v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "610cd51e-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/PioneerPine/pioneerpine.github.io/refs/heads/main/Galbulae/github-pioneerpine-io-1.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "610d4510-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/dilancito2107/Uninstall-Tool-Repack/raw/refs/heads/main/unsurplice/Uninstall_Tool_Repack_3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "6112a902-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jay97637/jay97637.github.io/refs/heads/main/tectospondylic/io-github-jay-v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "611dae0c-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/RaiyanRamin1/raiyanramin1.github.io/raw/refs/heads/main/hurtable/github_raiyanramin_io_3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "6129a714-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/PioneerPine/pioneerpine.github.io/raw/refs/heads/main/Galbulae/github-pioneerpine-io-1.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "612dbcfa-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/RaiyanRamin1/raiyanramin1.github.io/refs/heads/main/hurtable/github_raiyanramin_io_3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "61366c8b-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Samsan2003/cg/refs/heads/main/closed/Software_v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "6139e988-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/aniff23/aniff23.github.io/raw/refs/heads/main/Hokan/aniff-io-github-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653295, "uuid": "6139ed1c-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/OFenomenal/ofenomenal.github.io/raw/refs/heads/main/yokefellow/io_github_ofenomenal_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653296, "uuid": "618f9ef7-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/dilancito2107/Uninstall-Tool-Repack/refs/heads/main/unsurplice/Uninstall_Tool_Repack_3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653296, "uuid": "61bf905a-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/zhaixing238/zhaixing238.github.io/raw/refs/heads/main/mica/github_io_zhaixing_2.8-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776653296, "uuid": "61c9c43c-3c63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jay97637/LLM-Observability-FOSS/raw/refs/heads/main/docs/LL_Observability_FOSS_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776654189, "uuid": "763e2d4e-3c65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/zhaixing238/gitplay/raw/refs/heads/main/src-tauri/src/Software_2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776654190, "uuid": "76784e65-3c65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.217.73:44314/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776654190, "uuid": "767ecba9-3c65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.81.139.157:56663/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776654190, "uuid": "768da37b-3c65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-tint6.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776654190, "uuid": "76b301f6-3c65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-red4.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776654191, "uuid": "76fd78c8-3c65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bright-glow5.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776654198, "uuid": "7b640498-3c65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.186.233:51331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776654198, "uuid": "7b6f8a5b-3c65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.42.49:50982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776654198, "uuid": "7b80cf2c-3c65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.186.233:51331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776654198, "uuid": "7b876498-3c65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.223.83:51019/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776654198, "uuid": "7b8a7e62-3c65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.209.65.74:50347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776654377, "uuid": "e6134338-3c65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.6.91.43:57730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776654489, "uuid": "28f38f08-3c66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quick-scan1.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776654788, "uuid": "db1c9b06-3c66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://full-report2.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776655044, "uuid": "73f4e058-3c67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.12.200:60226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776655098, "uuid": "93ef2ee2-3c67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.42.49:50982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776655149, "uuid": "b22097c3-3c67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-point3.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776655160, "uuid": "b90811ee-3c67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.196.111:42546/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776655509, "uuid": "889946e6-3c68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://error-log4.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776655699, "uuid": "f9eba241-3c68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.88.183:36698/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776655809, "uuid": "3bba8c43-3c69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://user-test5.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776655869, "uuid": "5f2693c2-3c69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.202.14.89:33403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776656170, "uuid": "12a1cff8-3c6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://final-step6.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776656184, "uuid": "1af808eb-3c6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.74.216:37394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776656227, "uuid": "34f83678-3c6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.65.234.57:55607/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776656360, "uuid": "83f92e8e-3c6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.74.216:37394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776656469, "uuid": "c524b689-3c6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://child-care1.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776656722, "uuid": "5bd5ae33-3c6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.11.193:43192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776656767, "uuid": "76de1f9e-3c6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://happy-play2.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776657080, "uuid": "316a682c-3c6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.226.115:38418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776657128, "uuid": "4dc8bd35-3c6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://toy-box3.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776657324, "uuid": "c275657d-3c6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.52.62:36211/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776657438, "uuid": "067d2326-3c6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.202.14.89:33403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776657489, "uuid": "251d1f0a-3c6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-step4.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776657848, "uuid": "fb0550f7-3c6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://good-day5.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776658148, "uuid": "adc42e8d-3c6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-life6.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776658507, "uuid": "837eeab7-3c6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://space-travel1.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776658872, "uuid": "5d5f9562-3c70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://star-field2.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776659167, "uuid": "0d6f2455-3c71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.196.111:42546/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776659175, "uuid": "11d7f009-3c71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://moon-orbit3.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776659470, "uuid": "c19c0eac-3c71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://high-speed4.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776659834, "uuid": "9aa42f19-3c72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-rocket5.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776659965, "uuid": "e91881ed-3c72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.43.146:56925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776660194, "uuid": "71155641-3c73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-void6.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776660553, "uuid": "4754cec6-3c74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-coat1.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776660853, "uuid": "f9ea9e27-3c74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-wool2.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776661041, "uuid": "6a5803ef-3c75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.243.168:48355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776661152, "uuid": "ac7f7f6e-3c75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-silk3.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776661513, "uuid": "833d9ecc-3c76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://red-fabric4.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776661867, "uuid": "56a49159-3c77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thin-layer5.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776661938, "uuid": "80f52c2b-3c77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.43.146:56925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776661988, "uuid": "9ea78339-3c77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.90.172:48823/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776662173, "uuid": "0cd7e801-3c78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-style6.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776662589, "uuid": "04bd8ad8-3c79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://prime-task1.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776662671, "uuid": "35804af8-3c79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.231:51409/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776662828, "uuid": "931b5561-3c79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.90.172:48823/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776662834, "uuid": "969cf5e3-3c79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-work2.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776662962, "uuid": "e33eb5b1-3c79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.19.69:35673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776663016, "uuid": "031b200f-3c7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.225.163:52907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776663189, "uuid": "6a9fcce0-3c7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-goal3.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776663790, "uuid": "d0c63ed1-3c7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://top-result4.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776663984, "uuid": "445094ab-3c7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.175.122:45571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664035, "uuid": "62b6c0c3-3c7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-check5.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664100, "uuid": "89ace3b7-3c7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.175.122:45571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664159, "uuid": "aca96a16-3c7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.30.142.2:38272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664214, "uuid": "cdabd145-3c7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://good-end6.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664223, "uuid": "d298ff5f-3c7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.118.179.93:41773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664231, "uuid": "d79d3e04-3c7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.193.144.153:50873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664407, "uuid": "4054b037-3c7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.53.58.200:40555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664525, "uuid": "86a40948-3c7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.193.144.153:50873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664569, "uuid": "a0ffde12-3c7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://white-wall1.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664627, "uuid": "c3a0d335-3c7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.76.24:60144/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664778, "uuid": "1d84bb1b-3c7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.12.59:58200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776664874, "uuid": "56b2d885-3c7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clean-room2.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665235, "uuid": "2e06b8cf-3c7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.117.234:42069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665295, "uuid": "51b880ea-3c7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bright-hall3.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665304, "uuid": "5709d349-3c7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.243.65.33:38843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665527, "uuid": "dbf891d1-3c7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.17.43:37422/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665527, "uuid": "dc04de2c-3c7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.178:46833/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665590, "uuid": "01af49c5-3c80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-door4.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665602, "uuid": "08875155-3c80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.91.0:46595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665665, "uuid": "2e4b8b7d-3c80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.127.117:40518/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665732, "uuid": "5664eb21-3c80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.91.0:46595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776665954, "uuid": "dab134eb-3c80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://high-roof5.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666128, "uuid": "4289f278-3c81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.76.24:60144/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666136, "uuid": "46b75cfc-3c81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.7.241:36398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666145, "uuid": "4c653060-3c81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.117.234:42069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666193, "uuid": "6948347e-3c81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solid-base64.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666549, "uuid": "3d3fc3ce-3c82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://color-set1.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666811, "uuid": "d910bde9-3c82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.225.165:39470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666848, "uuid": "ef4d401e-3c82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/bins.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666848, "uuid": "ef93ee28-3c82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/krane_armv7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666851, "uuid": "f14e2c07-3c82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/krane_mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666851, "uuid": "f15c0153-3c82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/krane_armv5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666851, "uuid": "f15efcf1-3c82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/krane_armv6", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776666970, "uuid": "37e428d3-3c83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://new-mix2.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776667044, "uuid": "647d122a-3c83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.195:56653/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776667271, "uuid": "eba6a83e-3c83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-view3.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776667583, "uuid": "a5a8694b-3c84-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.111.153:57891/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776667630, "uuid": "c1960357-3c84-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool-tone4.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776667868, "uuid": "4f52a3cc-3c85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-touch5.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776667875, "uuid": "53bda89e-3c85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.46:35804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776668292, "uuid": "4c0716de-3c86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pure-color6.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776668527, "uuid": "d845f7b0-3c86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.178:46833/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776668542, "uuid": "e115fc38-3c86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.201.35:59591/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776668592, "uuid": "fed5c8b8-3c86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-table1.corex4varm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776668656, "uuid": "2521d4f9-3c87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.195:56653/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776668845, "uuid": "95a1963e-3c87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.12.59:58200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776668953, "uuid": "d5e351a2-3c87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-lamp2.corex4varm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776669017, "uuid": "fc59df1c-3c87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.68.43.217:34887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776669253, "uuid": "88f671f8-3c88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-cup3.corex4varm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776669612, "uuid": "5ec7fe22-3c89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://white-wall4.corex4varm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776669747, "uuid": "af2dbc78-3c89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.96.30:43574/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776669974, "uuid": "36596446-3c8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-wind5.corex4varm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776670162, "uuid": "a693ea6c-3c8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:45879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776670225, "uuid": "cc862bed-3c8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.75.245:54175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776670273, "uuid": "e8ebe8b0-3c8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://high-step6.corex4varm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776670629, "uuid": "bcc5b3ad-3c8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.217.114:41284/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776670629, "uuid": "bd2683ce-3c8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-run1.kymlo7zore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776670810, "uuid": "28d7ce26-3c8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.214.239:33998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776670933, "uuid": "7276efcb-3c8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://slow-walk2.kymlo7zore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776671110, "uuid": "db923404-3c8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.147.201:50227/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776671182, "uuid": "06ed7b80-3c8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.227:43875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776671233, "uuid": "25234de4-3c8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://big-jump3.kymlo7zore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776671649, "uuid": "1cc4c43f-3c8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://long-road4.kymlo7zore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776671827, "uuid": "874790e0-3c8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.217.114:41284/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776671832, "uuid": "8a15126b-3c8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.214.239:33998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776672011, "uuid": "f4d403c0-3c8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://new-trip5.kymlo7zore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776672309, "uuid": "a678965b-3c8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://old-town6.kymlo7zore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776672732, "uuid": "a26d5bd8-3c90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.222.186:41123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776672798, "uuid": "c9df07ec-3c90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.147.201:50227/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776672848, "uuid": "e7a803af-3c90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.210.81:52053/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776672912, "uuid": "0e021756-3c91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-book1.ra2telsylo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776672974, "uuid": "32d0d7ef-3c91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.227:43875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776673029, "uuid": "53b14e2c-3c91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://last-page2.ra2telsylo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776673148, "uuid": "9a4728e1-3c91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.193.170:38506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776673213, "uuid": "c16f62f0-3c91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.56.232.109:46503/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776673326, "uuid": "04d061ad-3c92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.52.190.75:37850/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776673331, "uuid": "07c8a1b1-3c92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thin-pen3.ra2telsylo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776673629, "uuid": "b970c6c2-3c92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://red-mark4.ra2telsylo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776673826, "uuid": "2e90383c-3c93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.225.163:52907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776673879, "uuid": "4df81436-3c93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.149.107.50:51796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776674231, "uuid": "204c2fe3-3c94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hard-box5.ra2telsylo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776674473, "uuid": "b042b090-3c94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-bag6.ra2telsylo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776674525, "uuid": "cf444cfa-3c94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.52.190.75:37850/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776674587, "uuid": "f40a6a5b-3c94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-sea1.wi5sarpo1v.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776674711, "uuid": "3e065f9d-3c95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.188:56974/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776674897, "uuid": "acfbe120-3c95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.56.232.109:46503/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776675012, "uuid": "f1b4d096-3c95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-sky2.wi5sarpo1v.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776675139, "uuid": "3d2d1267-3c96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.149.107.50:51796/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776675309, "uuid": "a29ff21f-3c96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://high-hill3.wi5sarpo1v.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776675668, "uuid": "7850a616-3c97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-wood4.wi5sarpo1v.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676000, "uuid": "3e9193d8-3c98-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.36.203.34:59572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676031, "uuid": "51061705-3c98-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-sun5.wi5sarpo1v.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676328, "uuid": "021d38cf-3c99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-fish6.wi5sarpo1v.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676451, "uuid": "4aff5712-3c99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.31.244:36903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676520, "uuid": "748c9d1b-3c99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:38944/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676578, "uuid": "96e950d8-3c99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.13.110:56976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676747, "uuid": "fbab9d71-3c99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.74.19:40194/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1eaa417a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://garden-view4.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1eb23c9e-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://order-status1.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1eb66066-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://densefro.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1ebc621a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velline0os.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1ebe253c-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://norlithix3.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1ecf8ac1-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bm1rtmr.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1ed81d87-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fabricpayload.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1ed9a6e0-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jhknytxr.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1ede4824-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://casualquant.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1ee5ad9b-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vvood-forge.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1ee67108-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://iijbe.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1eeca699-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sketc-gate.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1eef2102-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-link.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1ef28d20-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://fsefumza.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1ef319ca-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://11q31v.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1ef6215f-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kel-venor.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1ef6c5eb-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://sketc-gate.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1ef87b89-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://s0ck-spool.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1efd91a1-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://home-service1.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1efd9bec-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://columnapi.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1f060e5f-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://tshev.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1f0d6d05-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://encodersensor.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1f0dcb89-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://393llqb.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1f118097-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://39rd.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676806, "uuid": "1f19fe40-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://du5t3-forge.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f261a44-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hibcn.factpre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f34f14a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gate6-link.clear-stream-web.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f3c6069-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://streambreeze.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f3f1665-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://9waxfs6b.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f42f1de-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87phs.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f51c5d1-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gutyx.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f58eb7b-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://home-section6.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f6678ce-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://massivespectra.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f688d9e-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://urban-vision1.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f68abdc-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://snow-ass.vyr2dalen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f68bb10-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-tok3.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f6c484c-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://sharpsummit.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f73d9d9-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://scalesign.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f74529d-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mervaleon1.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f7740d1-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lnrjp.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f7b57b3-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://1ndex2-gate.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f7e6ca3-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://28mp.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f88ffcd-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://t1de-vault.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f8c2d35-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shiftcascade.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f8c3c37-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solcorear.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f931e03-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://fundoasis.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f96373a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://clean-house2.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1f9dd968-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://rtrr.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676807, "uuid": "1fb1eec6-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-choice1.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "1fbd2859-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vaq4sdju.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "1fcd87fa-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://black-marker3.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "1fced31f-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://labeltheory.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "1fdd6d38-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brand-mark6.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "1fdf7cc6-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fi3rce7-watch.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "1fe0e198-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://media3.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "1fe5e69f-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://9adl.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "1fff539c-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sercore2or.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "2008fefd-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://picture-book3.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "201f7263-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://zen-nexos.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "202045dc-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fr0st-branch.dru6moxin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "20263978-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arrayshore.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "202ae7f5-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://desk-folder6.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "202e915a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-r0ut.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "203024a3-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://prime-list3.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "2031beab-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://pencil-case2.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "2033ca15-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lps08.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "20365506-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xxvxsk4x.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "20427d35-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vvood-forge.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "204433f4-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://par5e-array.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676808, "uuid": "204e9b6c-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://povv3r3-sheet.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676809, "uuid": "2059baae-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://local-office3.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676809, "uuid": "205af2a6-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solnex0ex.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676809, "uuid": "20653433-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ychgg.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676809, "uuid": "20656481-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://solcorear.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676809, "uuid": "2065f760-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://auth7-core.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676809, "uuid": "206bad5a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://scalesign.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676809, "uuid": "206fc12f-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://large-parcel2.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676809, "uuid": "20b9488e-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://unitecres.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676809, "uuid": "20c10e01-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://velvenor9.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676809, "uuid": "20c7c3c4-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://box2.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676809, "uuid": "20cec461-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://order1.fast-delivery.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676809, "uuid": "20e0f6f9-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://491ptjh.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676809, "uuid": "20e1e292-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sketchneuron.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676810, "uuid": "2144731d-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://plasm-spool.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676810, "uuid": "2148dc33-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://m0ti9-route.parchm-susyuka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676810, "uuid": "2158e2bc-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://echoblend.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676810, "uuid": "215bbd58-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ae5z56.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676810, "uuid": "216bd48f-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://item-details4.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676811, "uuid": "21b45474-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://public-lesson1.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676811, "uuid": "21b87c19-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynflux6al.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676811, "uuid": "21b9d388-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://b1rd-panel.lix7morav.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676811, "uuid": "21bae871-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://listeshap.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676811, "uuid": "21ef1cdd-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://alt-nirnbl.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676811, "uuid": "21ff93a3-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vscoj.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676811, "uuid": "22019650-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-source6.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676811, "uuid": "220b57c5-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://4cti-pulse.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676812, "uuid": "22213b6a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-team1.dax6porel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676812, "uuid": "223a8f2d-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://media3.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676812, "uuid": "223e2737-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://star-ring.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676812, "uuid": "2244a7cc-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://queryguard.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676812, "uuid": "2247f80c-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-map4.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676812, "uuid": "228b014b-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://solcore0ix.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676812, "uuid": "229436a8-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://torr3nt-layer.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676812, "uuid": "22956c4a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://specapi.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676812, "uuid": "22adaf8d-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://video-clip4.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676813, "uuid": "22b7cf60-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://final-grade6.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676813, "uuid": "22ba6c08-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-point2.tix7marel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676813, "uuid": "22e0c50b-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://pa5tu-drive.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676813, "uuid": "23022169-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://water-pipe5.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676813, "uuid": "2305aadb-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://car-rental1.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676813, "uuid": "230ab42b-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://byteash.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676813, "uuid": "23144762-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://trip-advisor5.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676813, "uuid": "231883af-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://dynamicsoun.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676813, "uuid": "231e8ad5-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://white-board4.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676813, "uuid": "232269ef-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jhknytxr.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676813, "uuid": "2326b1ff-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://9waxfs6b.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676813, "uuid": "2328c10d-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://smart-door6.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676813, "uuid": "2335704d-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://fast-drive2.pov4daren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676813, "uuid": "23410ce7-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://latest-news3.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676814, "uuid": "2360fef4-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://hfjivor0.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676814, "uuid": "2362068f-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://hpryikjw.dru9vexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676814, "uuid": "2362349f-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://m0ss5-watch.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676814, "uuid": "23672363-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://online-course3.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676814, "uuid": "236c8285-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://h4rve5-loop.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676814, "uuid": "23821a79-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spedus.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676814, "uuid": "238cac42-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://op3n-cast.go0duntenable.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676814, "uuid": "23a39134-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://guest2.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676814, "uuid": "23a74b9a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://listeshap.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676814, "uuid": "23e27038-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://spedus.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676815, "uuid": "23efecc9-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://opt1-phase.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676815, "uuid": "23f156ab-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qpp9.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676815, "uuid": "24004f07-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://registryfaithful.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676815, "uuid": "240061bc-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://valleydispatcher.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676815, "uuid": "24097981-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://dyndraex.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676815, "uuid": "2410b35a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://abzxcp.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676815, "uuid": "2415a5b9-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://motmolecu.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676815, "uuid": "2416ae79-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://sport-match3.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676815, "uuid": "2424496c-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://geo-dec0d.expect-runes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676815, "uuid": "244b1bc0-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://media-gallery3.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676816, "uuid": "247e8660-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velvenor9.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676816, "uuid": "24f4553d-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://travel-guide1.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676816, "uuid": "24fb6793-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://sound-track5.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676816, "uuid": "24fe7408-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://inn35-dock.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676816, "uuid": "250d1339-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://castexport.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676817, "uuid": "251eec6c-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-nirnbl.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676817, "uuid": "25812bcf-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-4uth.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676817, "uuid": "2599ddb0-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vera.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676817, "uuid": "259da447-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scenic-spot2.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676817, "uuid": "259de9b0-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mruyas.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676818, "uuid": "25c79e5f-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://t1de-vault.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676818, "uuid": "25c7a17b-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5and-stack.marinmort8ager.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676818, "uuid": "25e0e2c9-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://total-summary4.rol1erspeeding.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676818, "uuid": "25e70c73-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xoqairj.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676818, "uuid": "25e7147c-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://zzx2x3.quant-splashes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676818, "uuid": "25e744c9-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://ae5z56.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676818, "uuid": "25f96468-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://norlithix3.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676818, "uuid": "25fdb3e5-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://queu-crest.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676818, "uuid": "26280b79-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://star-ring.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676818, "uuid": "2641a54d-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vaq4sdju.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676818, "uuid": "264584c7-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://breezscrip.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676818, "uuid": "2646c50a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pwmyu.zor4melax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676819, "uuid": "2648788a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://image-zoom2.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676819, "uuid": "264b831c-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ync-lab.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676819, "uuid": "265f49e8-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://freshstorage.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676819, "uuid": "26680856-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vel-spireex.bri4talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676819, "uuid": "26a4d69d-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://d43mon-field.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676819, "uuid": "26a53941-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://student-form2.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676820, "uuid": "26e1a0b2-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kel-venor.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676820, "uuid": "26e59d54-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shop1.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676820, "uuid": "26e8f8c5-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://d43mon-field.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676820, "uuid": "26f63a4c-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://tourist-map3.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676820, "uuid": "272e01e6-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wilpol.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676820, "uuid": "276af50e-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nnid.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676820, "uuid": "276dbfeb-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://echo-span.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676821, "uuid": "27a56852-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://fernretai.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676821, "uuid": "27ef2041-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://soft-cov.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "281f4217-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://media-player6.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "2823323e-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://castexport.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "28299cc5-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://393llqb.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "283a6028-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mernexen6.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "28548475-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://glue-stick5.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "28584503-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://authsnapshot.invert-manner.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "28596963-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main6.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "285b8ab6-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zen-nexos.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "286fa23b-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ind3-spool.xel7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "28806ed6-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://167lo.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "2885e758-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sharpsummit.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "288b174e-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vor-coreum.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "288b233a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://fbhi02d.photot-sudok.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "288cae2c-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lummesh8or.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "288fc30e-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vtdlwy.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676822, "uuid": "28926058-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://velspire3on.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676823, "uuid": "28af9ec8-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://talfluxen3.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676823, "uuid": "28b04db6-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://area1.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676823, "uuid": "28f476ef-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://il2l4822.vex8talin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676823, "uuid": "28f5dcb1-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mnwgjp.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676823, "uuid": "28fc09ff-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-cov.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676823, "uuid": "28fdf224-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://167lo.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676823, "uuid": "291b613b-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://auth7-core.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676823, "uuid": "29214c84-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://qpp9.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676823, "uuid": "2928a4ae-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://daily-news1.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676824, "uuid": "29629d12-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.230.148.181:58009/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676824, "uuid": "296ea06e-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://zme1roui.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676824, "uuid": "297ad55b-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vtdlwy.kry6navex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676824, "uuid": "297d434e-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://va11-route.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676824, "uuid": "29b35955-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://491ptjh.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676824, "uuid": "29b8fbcd-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solmeshos.qen8lorix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676824, "uuid": "29d551ce-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://good-luck5.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676824, "uuid": "29d705db-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://weather-post4.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676825, "uuid": "2a06725b-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://m0ss5-watch.nor3liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676825, "uuid": "2a0883dc-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://travel-blog5.vyr3solen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676825, "uuid": "2a0c7714-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fernretai.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676825, "uuid": "2a0cfd6b-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quick-cash5.pyn9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676825, "uuid": "2a0e8ed5-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rtrr.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676825, "uuid": "2a0efa75-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zdjine7o.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676825, "uuid": "2a0f9d5c-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://syxnh65t.nor8tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676825, "uuid": "2a120796-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://p14sm-grid.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676825, "uuid": "2a16da0b-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://zenmark1a.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676825, "uuid": "2a2e5799-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://mnwgjp.bo2rdreluct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676825, "uuid": "2a312977-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gathe-tri.tix9sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676825, "uuid": "2a355d76-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://street-view6.kro2vilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676826, "uuid": "2a791ac2-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://help5.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676826, "uuid": "2a8d5855-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://item4.puremarket.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676826, "uuid": "2ab3ac18-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jdqn.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676826, "uuid": "2ab9ba99-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://beach-resort4.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676826, "uuid": "2ac4fdb7-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://bay-banne.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676826, "uuid": "2ac7ad91-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spli1-watch.zex3piral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676826, "uuid": "2ac82e4e-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ice-mark.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676826, "uuid": "2adba1e8-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://valu-span.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676826, "uuid": "2ae445f1-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zme1roui.expans-homeland.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676826, "uuid": "2ae4ddb5-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://njf8.wex1miran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676826, "uuid": "2aeb4d74-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://ar2ymo.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676827, "uuid": "2b3fd990-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scalesign.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676827, "uuid": "2b4f2c5a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://flovv-chain.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676827, "uuid": "2b582500-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flovv-chain.vex1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676827, "uuid": "2b58e9f0-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://livel-sou.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676827, "uuid": "2b598b22-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://arraynotifier.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676827, "uuid": "2b6a67ef-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://birdout.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676827, "uuid": "2b844a2a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://study-material4.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676827, "uuid": "2b84aa17-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://t0mbk.xel5navin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676827, "uuid": "2b87be1a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://ovumpg.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676827, "uuid": "2b89d543-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://b1oo9-hold.racersta7ving.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676827, "uuid": "2b8d310d-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://central-market1.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676827, "uuid": "2b9d460f-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tlnsb.zor2laven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676828, "uuid": "2bb10dcb-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://driv3-array.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676828, "uuid": "2bb486d3-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://torr3nt-layer.fortene7vous.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676828, "uuid": "2be7257e-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://local-event6.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676828, "uuid": "2befe68a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://hotel-booking2.rav8doxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676828, "uuid": "2c2813b9-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://guest-portal2.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676828, "uuid": "2c39e665-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://world-press2.dex6laper.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676828, "uuid": "2c39e91b-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vialstr.prax9vitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676829, "uuid": "2c7b780f-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-dynam1.kry3qelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676830, "uuid": "2cfae6d7-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://echoblend.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676830, "uuid": "2d1139d7-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://global-site6.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676830, "uuid": "2d124c7b-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://civillabel.qyx7darem.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676830, "uuid": "2d1268bf-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://class-report5.mox3terin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676830, "uuid": "2d1a9759-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://qu4nt-panel.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676830, "uuid": "2d2793e6-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sxbrp.bri1laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676830, "uuid": "2d2fbb30-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://zsj7xqo.qen7tavil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676830, "uuid": "2d39ac94-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://routerwago.tul2qorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676830, "uuid": "2d3cd9e7-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bay-banne.tul7morax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676830, "uuid": "2d400851-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://public-help5.domna-replenish.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676830, "uuid": "2d421567-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://office-paper1.syl5peran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676830, "uuid": "2d45c44f-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pa5tu-drive.multi5ardina.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676830, "uuid": "2d45d68d-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynamicsoun.red-sticker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676830, "uuid": "2d619fdd-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-street5.lax8dorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676831, "uuid": "2d739b28-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://densefro.chain-sinusit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676831, "uuid": "2da65e86-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tal-forgeal.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676831, "uuid": "2dc010a5-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://geo-4uth.savor-woman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676831, "uuid": "2dc04dd2-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://photo-frame1.kym7sarel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676831, "uuid": "2de4ddc5-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://repair-work3.tov2liren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676831, "uuid": "2de5c450-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://roughengine.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676831, "uuid": "2df307ff-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://peakree.dredg8asman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676832, "uuid": "2e451794-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c3dar-sync.dax8sovel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676832, "uuid": "2e465926-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spot2.urbanview.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676835, "uuid": "301c1e4a-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-5har.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676835, "uuid": "30237678-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://good1.smartchoice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776676835, "uuid": "302376d4-3c9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tridraix5.gypsyw0od.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776677769, "uuid": "5c98427a-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://next-door3.de8trevarm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776677771, "uuid": "5e1a6f30-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://city-life2.de8trevarm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776677774, "uuid": "5fac1660-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub0-hinge.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776677774, "uuid": "6007d7f7-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://30urtlmu.nelma-report.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google/", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776677775, "uuid": "602d3eae-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://home-base1.de8trevarm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776677775, "uuid": "602ea8e8-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://full-room4.de8trevarm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776677783, "uuid": "64f98117-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.250.158.32:34175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776677783, "uuid": "657129b8-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.253.100:42997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776677899, "uuid": "aa2f95b1-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.253.100:42997/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776678015, "uuid": "ef86a522-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://back-yard5.de8trevarm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776678021, "uuid": "f307dce9-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.250.158.32:34175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776678079, "uuid": "15dd0804-3c9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.8.152:39937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776678140, "uuid": "39a82404-3c9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.93.191:35855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776678257, "uuid": "7f7d1bd3-3c9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.230.148.181:58009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776678376, "uuid": "c6746628-3c9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://side-view6.de8trevarm.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776678432, "uuid": "e82cdfff-3c9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.108:33408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776678612, "uuid": "53498a46-3c9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://good-news1.po3vaxkyml.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776678859, "uuid": "e6c32f22-3c9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.243.174:43883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776679028, "uuid": "4b0a0cd9-3c9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-time2.po3vaxkyml.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776679331, "uuid": "ffef0de0-3c9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://real-fact3.po3vaxkyml.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776679690, "uuid": "d5981046-3ca0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nice-shot4.po3vaxkyml.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776679814, "uuid": "1fc6ffc0-3ca1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.108:33408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776679992, "uuid": "89b2328b-3ca1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://just-talk5.po3vaxkyml.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776680060, "uuid": "b244f9ea-3ca1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.93.191:35855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776680347, "uuid": "5d5dff10-3ca2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://easy-task6.po3vaxkyml.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776680599, "uuid": "f3bf14c0-3ca2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.114.100:34916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776680715, "uuid": "38e4d2c6-3ca3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tasty-pie1.zore9varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776681071, "uuid": "0d1fd99d-3ca4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-bun2.zore9varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776681390, "uuid": "cb3e936e-3ca4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.224.13:50060/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776681433, "uuid": "e481b2de-3ca4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.161.100.126:53906/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776681434, "uuid": "e51e6e2a-3ca4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-soup3.zore9varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776681732, "uuid": "97279d22-3ca5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-tea4.zore9varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776681852, "uuid": "de659cbd-3ca5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.248.135:49918/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776681922, "uuid": "0850a044-3ca6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.114.100:34916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776682035, "uuid": "4baf8033-3ca6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool-milk5.zore9varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776682100, "uuid": "720ee646-3ca6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.224.13:50060/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776682928, "uuid": "5fd2a640-3ca8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.94.201:60470/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776683229, "uuid": "133a062e-3ca9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.161.100.126:53906/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776683304, "uuid": "3ff8c005-3ca9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.248.135:49918/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776683487, "uuid": "acfb8405-3ca9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.206.56:43941/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776683541, "uuid": "cd20a3c5-3ca9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.220.138:56751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776684674, "uuid": "705f2a02-3cac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.131.92.150:55542/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776684800, "uuid": "bbab8a30-3cac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.131.92.150:55542/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776684910, "uuid": "fd1e802d-3cac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.23.23:59988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776685029, "uuid": "440bff91-3cad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.218.43.94:57244/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776685159, "uuid": "919dde95-3cad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.25.133:59989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776685462, "uuid": "46625b2d-3cae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.44.149:55821/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686116, "uuid": "cc39f2bd-3caf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.235.31:39010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686420, "uuid": "8180954f-3cb0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.220.138:56751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "c328c690-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/bins/hoho.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "c328d4aa-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/bins/hoho.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "c328fb79-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/bins/hoho.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "c32930cb-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/bins/hoho.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "c333a1e5-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/bins/hoho.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686960, "uuid": "c344ec1b-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/bins/hoho.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686961, "uuid": "c365c055-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/bins/hoho.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686961, "uuid": "c36de174-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/bins/hoho.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686961, "uuid": "c37c19ec-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/krane_linux_x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776686961, "uuid": "c37c1c29-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/krane_mipsle", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776687016, "uuid": "e44a5ef7-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/bins/hoho.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776687016, "uuid": "e44a8222-3cb1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/bins/hoho.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776687081, "uuid": "0ae8673d-3cb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.19/bins/hoho.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776687205, "uuid": "54d3d806-3cb2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.117.77:36319/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776687566, "uuid": "2c897b31-3cb3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.139.62.179:47439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688027, "uuid": "3ed9855c-3cb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.225.135.61/OPndZua3.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688027, "uuid": "3ee453e5-3cb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.225.135.61/XunbTlnVKDYLMr54.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688027, "uuid": "3eea4ccd-3cb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.225.135.61/YHdTW67.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688027, "uuid": "3ef0f900-3cb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.225.135.61/CUQAOWNQ46.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688028, "uuid": "3ff2adbf-3cb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.225.135.61/fhKfephsUsIUnOnQCUkuUU63.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688029, "uuid": "40268db0-3cb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.90.89:51491/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688087, "uuid": "63100880-3cb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.122.144/25/goodnewsformegood.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688093, "uuid": "662da352-3cb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rizvedevelop.com/%D0%92%D0%BE%D0%BEtstappe%D0%B3Ulx64.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "password:ryos", "colour": "#a52090", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688148, "uuid": "8734d662-3cb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.186.197/20/verycleaneffectivethingscoming.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688287, "uuid": "d9dda5df-3cb4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.23.57:33821/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688521, "uuid": "65c6fc1c-3cb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.141/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688521, "uuid": "65c9248d-3cb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.141/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688521, "uuid": "65c932e5-3cb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.141/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688522, "uuid": "65d0c352-3cb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.141/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688522, "uuid": "65d0c42f-3cb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.141/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688522, "uuid": "65d1bbbd-3cb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.134.30/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688522, "uuid": "65d238cd-3cb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.141/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688522, "uuid": "65d7e5de-3cb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.141/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688522, "uuid": "65eb94bf-3cb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.141/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688522, "uuid": "65ef9b52-3cb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.141/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688579, "uuid": "87ec1c3c-3cb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.141/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688628, "uuid": "a5582ed3-3cb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.141/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688629, "uuid": "a5df644c-3cb5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.141/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776688927, "uuid": "57792c5d-3cb6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.206.118:33124/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776689120, "uuid": "ca8150f6-3cb6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.255.163:59864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776689182, "uuid": "ef8ca18d-3cb6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.247.198:33605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776689240, "uuid": "11cf8b35-3cb7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.179.230.86:40046/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776689240, "uuid": "11da52a6-3cb7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.39.112:37431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776689296, "uuid": "339ac1fb-3cb7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.171.177.193:36529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776689354, "uuid": "56460be6-3cb7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.174.89:56081/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776689659, "uuid": "0be3a1ff-3cb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.94.107:33769/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776689836, "uuid": "756f6a0e-3cb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.23.57:33821/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776689903, "uuid": "9d5ca076-3cb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.177.67.63:49879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776690013, "uuid": "def939ee-3cb8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.166.51:36860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776690127, "uuid": "230272de-3cb9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.90.89:51491/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776690140, "uuid": "2a6d2377-3cb9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.200.87:51513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776691153, "uuid": "8685e5bd-3cbb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.171.177.193:36529/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776691520, "uuid": "6101a7a5-3cbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.255.163:59864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776691583, "uuid": "86778912-3cbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.98.231.183:60816/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776691583, "uuid": "86b5e4ba-3cbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.26.178:38224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776691751, "uuid": "eac0616f-3cbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.246.132:35002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776692080, "uuid": "aed83528-3cbd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.229.195.37:40838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776692233, "uuid": "09ce1518-3cbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.12.247:60768/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776692482, "uuid": "9e4a4e7b-3cbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.174.89:56081/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776693426, "uuid": "d15f309f-3cc0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.251.124:37154/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776693617, "uuid": "43295de5-3cc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.229.195.37:40838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776693728, "uuid": "84f43212-3cc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.187.40.82:53685/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776693908, "uuid": "f0a655ed-3cc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dlvryintl.com/szjBfLuyTWpr252.bin", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776693912, "uuid": "f2cc03aa-3cc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dlvryintl.com/Resubjecti.csv", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776693924, "uuid": "f9a8dbb4-3cc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://draalineverzignassi.com.br/wp-content/upgrade/plugin/Resubjecti.csv", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694272, "uuid": "c9134da7-3cc2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.157.47.152:56511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694391, "uuid": "10473d2c-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://west-layer.4zoralin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694629, "uuid": "9e34841d-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3ik31.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694688, "uuid": "c149127d-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.136.226/30/seemybestfeeelingformebest.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694688, "uuid": "c185d224-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.46.173.32/36/goodthingswithbestpfer.hta", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694689, "uuid": "c1c64e48-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.179.248.120/img/optimized_MSI.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694748, "uuid": "e500bd8e-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.135.36/25/wegivenbestthinkgsformebest.hta", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694809, "uuid": "09bc34bc-3cc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tbgqldre.artichf1atly.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776694987, "uuid": "7343fc91-3cc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kronos.bot.nu/ms64gw.vsix", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776695001, "uuid": "7be9588e-3cc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.128.208:35229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776695002, "uuid": "7c822d4f-3cc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.26.203:47869/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776695050, "uuid": "994e6b2e-3cc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://slowcivi.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776695411, "uuid": "706dff7f-3cc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ya72oy.firs-tachycardia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776695419, "uuid": "7551c329-3cc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.211.76:34670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776695531, "uuid": "b8003d84-3cc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.25.68:45537/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776695709, "uuid": "21f1d7a5-3cc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fieldsun.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776695715, "uuid": "254b033f-3cc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.75/40/img_180818.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776695769, "uuid": "45a71718-3cc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.186.197/20/img_213647.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776696009, "uuid": "d4e3eef3-3cc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://0liwtqxp.deser8othic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776696127, "uuid": "1ad2a84f-3cc7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.200.227.78:47297/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776696130, "uuid": "1d044c15-3cc7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1-bn5msPZ_jeieZ9CiwxuqGVC6HgqJFvH", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureRAT", "colour": "#cc0ccc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776696309, "uuid": "87a9f168-3cc7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deco-spe.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776696381, "uuid": "b231b680-3cc7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.128.208:35229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776696429, "uuid": "ced68cd3-3cc7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://draalineverzignassi.com.br/wp-content/upgrade/plugin/szjBfLuyTWpr252.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776696551, "uuid": "177ebd41-3cc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.26.203:47869/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776696672, "uuid": "5fd8c439-3cc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://52rgfkcr.sizar-sniffy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776696727, "uuid": "80d1796d-3cc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.228.232:59733/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697032, "uuid": "368284e0-3cc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://roya-node.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697156, "uuid": "807ca40f-3cc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.211.76:34670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697389, "uuid": "0afca455-3cca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rebatesouth.big2mychild.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697456, "uuid": "33751658-3cca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.28.250:54663/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697566, "uuid": "74e0ce15-3cca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.vame.be/wffd/update.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697626, "uuid": "986de987-3cca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.200.227.78:47297/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697691, "uuid": "befca880-3cca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://0tter7-gate.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697747, "uuid": "e05aaff1-3cca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://valfanto.com/obo20th.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697751, "uuid": "e2e57f99-3cca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://valfanto.com/rumpaid.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697751, "uuid": "e316f1c6-3cca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://valfanto.com/yupaidnew.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697808, "uuid": "04dc9f0b-3ccb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://getamarin.ro/new-geta-marin-site/20426.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697815, "uuid": "08f9b969-3ccb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-ec5d868d10f548e792c0fd1c080190aa.r2.dev/SyncroInstaller.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SyncroRMM", "colour": "#f60cfb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697822, "uuid": "0d652687-3ccb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.maxpower01.com/upload/src/file3025.mp3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776697991, "uuid": "71fe655c-3ccb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qfw0.blasph-nimalo.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698349, "uuid": "4790ae0f-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ktfxyu6.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698350, "uuid": "47ef0e00-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1ptFvlTlvgTX_0QTC2DHpi-ATjnHuByyO", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698351, "uuid": "488c111e-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1gXsJc-nWKjTQPbfR2eC4vxPMNAlB3d5E", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698351, "uuid": "48a92525-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wisdomheart.org/wp-admin/vv/update.ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698408, "uuid": "6ae91ab4-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://andrefelipedonascime1775471117328.2082219.meusitehostgator.com.br/FVTwhWzaQj_06_04_Meus_ArquivosDeTexto/02.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698409, "uuid": "6b0bd538-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://md.ccsuquk.com/lw.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698409, "uuid": "6b5cb7d8-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://andrefelipedonascime1775471117328.2082219.meusitehostgator.com.br/FVTwhWzaQj_06_04_Meus_ArquivosDeTexto/03.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698410, "uuid": "6bf33723-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://andrefelipedonascime1775471117328.2082219.meusitehostgator.com.br/FVTwhWzaQj_06_04_Meus_ArquivosDeTexto/01.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698469, "uuid": "8ebf643d-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://md.ccsuquk.com/b.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698533, "uuid": "b4e76f3a-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ensions.xyz/woow.dat", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698593, "uuid": "d8b26c7b-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastee.dev/r/WHoTYJBS", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CrysomeRAT", "colour": "#e0d9a3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698649, "uuid": "fa0b348d-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yaso.su/raw/pMstaA4S", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698651, "uuid": "fb7ba0ec-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1-WXstiaW3yx5IiVzT5aV5h7ADiUmofLy", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698653, "uuid": "fce03b23-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crypto-corexchange.com/wp-includes/theme-compat/higzbol/nstyjrw/rszqlut/mFSrkdn.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698653, "uuid": "fce966ee-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1uIl2NsnX9vagASSxj2zoFkjUv1rdRBwd", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698716, "uuid": "220740ac-3ccd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://covstri.rus5icabreast.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698722, "uuid": "25ac4a9e-3ccd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.204.53:56863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776698832, "uuid": "67921a82-3ccd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.204.53:56863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776699023, "uuid": "d9555dc4-3ccd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c0nv-panel.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776699074, "uuid": "f7b3c4cc-3ccd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hasteb.in/h3Y7Duh1Nift0yD", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776699130, "uuid": "18c081e3-3cce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crypto-corexchange.com/wp-includes/theme-compat/higzbol/nstyjrw/rszqlut/fgeekpk.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776699373, "uuid": "a9d0bdc4-3cce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorlith3is.resolut-revening.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776699429, "uuid": "caf12e4d-3cce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.63.170.27/45/goodpeoplesneedformebest.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776699487, "uuid": "ede1aec3-3cce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://homecaremovers.com/WWWW.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776699608, "uuid": "3628d091-3ccf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://apparelgate.co.uk/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776699731, "uuid": "7eecf47c-3ccf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lum-spireos.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776699967, "uuid": "0bda7c2e-3cd0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gene-mod.hai1owhiten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776700329, "uuid": "e3c2a31b-3cd0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qeeebs40.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776700687, "uuid": "b8feb8eb-3cd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sc9t.pulp-turquoise.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776701227, "uuid": "fb231c20-3cd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.25.51.90:55440/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776701774, "uuid": "40ea521f-3cd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bluebox1.ra9ximer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776702071, "uuid": "f1b620cd-3cd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://greenleaf2.ra9ximer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776702262, "uuid": "637e1d1a-3cd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.26.114:51449/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776702427, "uuid": "c64448a5-3cd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fastrun3.ra9ximer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776702727, "uuid": "78b2b17e-3cd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.25.51.90:55440/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776702728, "uuid": "799bdf9a-3cd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smalllamp4.ra9ximer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776703033, "uuid": "2f2176b6-3cd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clearview5.ra9ximer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776703393, "uuid": "06255df3-3cd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hightree6.ra9ximer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776703461, "uuid": "2ea822dd-3cd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.75.227:54476/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776703628, "uuid": "91b8401e-3cd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.246.60:33143/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776703748, "uuid": "d988ff5b-3cd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://openbook1.to7ramil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776704054, "uuid": "8fc40591-3cd9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://softwind2.to7ramil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776704126, "uuid": "baef46d4-3cd9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.26.114:51449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776704362, "uuid": "47873d5b-3cda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.121.43:38203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776704424, "uuid": "6c955367-3cda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.142.253:56292/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776704603, "uuid": "d6d5e512-3cda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.28.250:54663/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776704655, "uuid": "f5e6ea20-3cda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://redmark3.to7ramil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776704730, "uuid": "22d308fd-3cdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.165.69.90:43048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776704783, "uuid": "4245d4e8-3cdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.121.43:38203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776704827, "uuid": "5c8c143b-3cdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.109.141:51859/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776704828, "uuid": "5d3c6579-3cdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.125.50:43336/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776704829, "uuid": "5d9ad66c-3cdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coldwater4.to7ramil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776705019, "uuid": "cf18b0da-3cdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.75.227:54476/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776705073, "uuid": "ef20ca89-3cdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bigwall5.to7ramil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776705083, "uuid": "f53c8291-3cdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.148.88:44792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776705126, "uuid": "0eee4d83-3cdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.208.242.90:34479/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776705268, "uuid": "636331f5-3cdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.199.138:36640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776705317, "uuid": "80bb0eed-3cdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.199.138:36640/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776705324, "uuid": "84c2339b-3cdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.37:35521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776705373, "uuid": "a25e9d90-3cdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://newpage6.to7ramil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776705504, "uuid": "f012e0e9-3cdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.37:35521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776705682, "uuid": "5a8e4759-3cdd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.111.227:47547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776705732, "uuid": "784fda41-3cdd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tastyapple1.kymle5rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776705863, "uuid": "c6678f89-3cdd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.249.174:41341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776706046, "uuid": "331caf2f-3cde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweetpear2.kymle5rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776706157, "uuid": "75a2afd0-3cde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.161.142.236:35419/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776706285, "uuid": "c16f5665-3cde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.148.88:44792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776706327, "uuid": "dadad3bb-3cde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.109.141:51859/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776706328, "uuid": "db32ea20-3cde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.200.88:53735/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776706393, "uuid": "023f6257-3cdf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://freshmilk3.kymle5rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776706628, "uuid": "8e426c31-3cdf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.88.183:36698/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776706754, "uuid": "d92b3147-3cdf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hottea4.kymle5rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776706877, "uuid": "2252e4a1-3ce0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.18.30:45057/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776707114, "uuid": "af849ac0-3ce0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmbread5.kymle5rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776707299, "uuid": "1dff1c81-3ce1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.200.222:35702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776707299, "uuid": "1e53cc9c-3ce1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.111.227:47547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776707352, "uuid": "3dd15d7a-3ce1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coolstone6.kymle5rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776707359, "uuid": "41983a08-3ce1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.204.105:60149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776707716, "uuid": "16ba44e3-3ce2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brightsky1.po3vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776708028, "uuid": "d08ac4f9-3ce2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.247.100:38494/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776708071, "uuid": "ea3c8f06-3ce2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://darknight2.po3vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776708265, "uuid": "5dad00a7-3ce3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.108.38.224:34211/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776708321, "uuid": "7f030d80-3ce3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.247.100:38494/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776708371, "uuid": "9d3ad0f4-3ce3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deepocean3.po3vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776708790, "uuid": "9680e2d3-3ce4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://goldfish4.po3vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776709027, "uuid": "240e94ff-3ce5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://whitecloud5.po3vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776709031, "uuid": "265af55c-3ce5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.140.86:38710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776709031, "uuid": "266493af-3ce5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.200.222:35702/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776709090, "uuid": "49d6a3ab-3ce5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.126.37:58755/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776709217, "uuid": "950a76f4-3ce5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.73.140.83:35437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776709329, "uuid": "d7db3893-3ce5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://silverrain6.po3vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776709518, "uuid": "486a3604-3ce6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.33.41:54008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776709692, "uuid": "b08c2775-3ce6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mainroad1.wi8sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776709697, "uuid": "b337ab86-3ce6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.108.38.224:34211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776709820, "uuid": "fcf4767f-3ce6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.126.37:58755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776709997, "uuid": "65fc973b-3ce7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.93.194:58018/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776710046, "uuid": "834326b1-3ce7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shortway2.wi8sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776710233, "uuid": "f2b264a3-3ce7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.93.194:58018/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776710233, "uuid": "f2beb08a-3ce7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.33.41:54008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776710299, "uuid": "1a214402-3ce8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.87.198:47137/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776710349, "uuid": "37d4dbb5-3ce8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://oldmap3.wi8sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776710359, "uuid": "3e2e332f-3ce8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.18.30:45057/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776710769, "uuid": "3253078b-3ce9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nextstep4.wi8sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776710830, "uuid": "57011d95-3ce9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.29.39.213:60409/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776710950, "uuid": "9e3cfc1e-3ce9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.149.146:46154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776711009, "uuid": "c187cd7d-3ce9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.73.140.83:35437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776711067, "uuid": "e42036fa-3ce9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://besttrip5.wi8sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776711371, "uuid": "990a5d52-3cea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.253.124:40247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776711612, "uuid": "289f006a-3ceb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fasttime6.wi8sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776711791, "uuid": "93a22327-3ceb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://homeshop1.qi5maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776711801, "uuid": "999de9ff-3ceb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.208.112.41:60362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776712027, "uuid": "206a832f-3cec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gooditem2.qi5maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776712326, "uuid": "d2a7b3fa-3cec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://reallife3.qi5maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776712337, "uuid": "d9050ddb-3cec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.200.87:51513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776712400, "uuid": "fe7ebe93-3cec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.29.39.213:60409/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776712634, "uuid": "89e1e13c-3ced-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.149.146:46154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776712678, "uuid": "a3e9f252-3ced-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.150.167:50121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776712692, "uuid": "acd47060-3ced-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smartchoice4.qi5maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776712931, "uuid": "3aea2f54-3cee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.251.21.68:59779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776713049, "uuid": "8142ba35-3cee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://justplay5.qi5maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776713352, "uuid": "35e3d308-3cef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://easydone6.qi5maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776713715, "uuid": "0e4a49c2-3cf0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-lamp1.6zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776713949, "uuid": "99894d2c-3cf0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gre-enleaf2.6zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776714370, "uuid": "949f7e06-3cf1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fastrun3.6zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776714613, "uuid": "256d24ea-3cf2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.94.119:42424/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776714623, "uuid": "2b64bbd4-3cf2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.150.167:50121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776714668, "uuid": "461cd06c-3cf2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-cup4.6zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776715268, "uuid": "ac21a30d-3cf3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cle-arview5.6zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776715277, "uuid": "b17c5a7d-3cf3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.205.195.146:33352/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776715510, "uuid": "3c08fcd9-3cf4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://highstep6.6zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776715522, "uuid": "43a3ed28-3cf4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.132.150:58460/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776715571, "uuid": "605d56e6-3cf4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.251.21.68:59779/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776715692, "uuid": "a88e1dc9-3cf4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-book1.to1varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776715927, "uuid": "34b53b32-3cf5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:44932/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776715987, "uuid": "589a2420-3cf5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://softwind2.to1varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776716000, "uuid": "605bf39c-3cf5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.88.7.48:44788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776716234, "uuid": "ebb50dde-3cf5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.94.119:42424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776716349, "uuid": "30534b24-3cf6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://red-mark3.to1varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776716359, "uuid": "364a61ae-3cf6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.62.233:53522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776716423, "uuid": "5c55d242-3cf6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.229.201:55697/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776716648, "uuid": "e24a05f4-3cf6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coldw-ater4.to1varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776716953, "uuid": "98080d2d-3cf7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bigwall5.to1varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776717020, "uuid": "c0598072-3cf7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.218.43.94:57244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776717313, "uuid": "6f02dfe5-3cf8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://new-page6.to1varin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776717610, "uuid": "202714fb-3cf9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.132.150:58460/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776717669, "uuid": "431127b6-3cf9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tasty-apple1.wi2sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776717727, "uuid": "658fda79-3cf9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.234.138:34116/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776717727, "uuid": "65971c82-3cf9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.226.115:38418/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776717857, "uuid": "b2fe1fd7-3cf9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.229.201:55697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776717970, "uuid": "f6aa6fc1-3cf9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.255.63:53703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776718032, "uuid": "1b872394-3cfa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-pear2.wi2sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776718332, "uuid": "ce33d963-3cfa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://freshmilk3.wi2sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776718634, "uuid": "82003a28-3cfb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-tea4.wi2sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776719048, "uuid": "78de5255-3cfc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmbr-ead5.wi2sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776719228, "uuid": "e407f0fb-3cfc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.134/rhombus", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776719286, "uuid": "0716799b-3cfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coolstone6.wi2sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776719538, "uuid": "9d3eca7c-3cfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.255.63:53703/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776719647, "uuid": "de3cb14c-3cfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bright-sky1.de7xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776719741, "uuid": "162a392c-3cfe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.199.15:55359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776719961, "uuid": "98f07eb7-3cfe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.247.249:49641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776720012, "uuid": "b7e19562-3cfe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://darkn-ight2.de7xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776720261, "uuid": "4c117149-3cff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.211.95:41662/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776720367, "uuid": "8b6f576d-3cff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deepocean3.de7xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776720443, "uuid": "b8c2b396-3cff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.62.200.34:60851/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776720667, "uuid": "3e36bc48-3d00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-fish4.de7xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776720676, "uuid": "432ed750-3d00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.76.74:46743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776720907, "uuid": "cd4ba946-3d00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://whitecloud5.de7xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776721268, "uuid": "a43c7356-3d01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://silver-rain6.de7xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776721630, "uuid": "7bfee1fe-3d02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.59.184:59049/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776721702, "uuid": "a703c73e-3d02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.211.95:41662/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776721870, "uuid": "0b463608-3d03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://home-base1.bovla4ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776722047, "uuid": "748e0867-3d03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cityli-fe2.bovla4ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776722072, "uuid": "836ff604-3d03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.199.15:55359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776722228, "uuid": "e0595f57-3d03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:44932/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776722352, "uuid": "2a2985da-3d04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nextdoor3.bovla4ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776722477, "uuid": "74e66451-3d04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.76.74:46743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776722589, "uuid": "b765fe5a-3d04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://full-room4.bovla4ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776722828, "uuid": "46126c85-3d05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.59.132:53220/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776722828, "uuid": "46212101-3d05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.16.97:52865/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776723009, "uuid": "b1d92fdd-3d05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://backy-ard5.bovla4ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776723247, "uuid": "3fd3eebf-3d06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sideview6.bovla4ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776723318, "uuid": "6a546ae7-3d06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.59.184:59049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776723320, "uuid": "6b4bb2c0-3d06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.99.161:41027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776723498, "uuid": "d54a663c-3d06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.228.232:59733/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776723552, "uuid": "f5abedfb-3d06-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.146.71:54496/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776723613, "uuid": "19fd78ee-3d07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://goodn-ews1.qi8maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776723968, "uuid": "eda450f4-3d07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://besttime2.qi8maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776724098, "uuid": "3b2ccd38-3d08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.251.124:37154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776724578, "uuid": "590c81a1-3d09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://real-fact3.qi8maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776724627, "uuid": "76a91058-3d09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.78.121:58404/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776724689, "uuid": "9b6e4d13-3d09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nice-shot4.qi8maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776724996, "uuid": "523cc884-3d0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://justtalk5.qi8maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776725234, "uuid": "e06b47dc-3d0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://easy-task6.qi8maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776725425, "uuid": "521caa90-3d0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.227.138:34372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776725652, "uuid": "d97e2894-3d0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tasty-pie1.7zorimel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776725663, "uuid": "dfd41eca-3d0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.85.51:34580/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776725893, "uuid": "68caec75-3d0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-bun2.7zorimel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726084, "uuid": "da8d109d-3d0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.180.17.140:59391/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726254, "uuid": "4044fb99-3d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-soup3.7zorimel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726317, "uuid": "65f81d89-3d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726318, "uuid": "665a8b2c-3d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726318, "uuid": "665aef0f-3d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726318, "uuid": "66614ff3-3d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726318, "uuid": "66682d4d-3d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726321, "uuid": "67dd4aab-3d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726321, "uuid": "67dd4e7f-3d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726321, "uuid": "67ddde48-3d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726321, "uuid": "67f482c1-3d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726321, "uuid": "67fdf6d9-3d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726321, "uuid": "68403453-3d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726326, "uuid": "6b33045e-3d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726427, "uuid": "a748de55-3d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.197.199:36416/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726612, "uuid": "1598bdf7-3d0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresht-ea4.7zorimel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726976, "uuid": "ee51a53a-3d0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coolmilk5.7zorimel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776726981, "uuid": "f1b96933-3d0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.52.62:36211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776727026, "uuid": "0c615b6e-3d0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.92.204:58013/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776727163, "uuid": "5ddccb84-3d0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.85.51:34580/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776727225, "uuid": "83282768-3d0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.104.106:59148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776727268, "uuid": "9c59b592-3d0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pure-water6.7zorimel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776727573, "uuid": "5273760e-3d10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blackhat1.ra4xovin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776727761, "uuid": "c2417f90-3d10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.180.17.140:59391/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776727882, "uuid": "0a37c9cb-3d11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.84.177:55540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776727928, "uuid": "25edf30b-3d11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.2.132:46863/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776727929, "uuid": "2671998d-3d11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://whites-hirt2.ra4xovin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776728287, "uuid": "fbdefd42-3d11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://long-belt3.ra4xovin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776728477, "uuid": "6d455aea-3d12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.179.230.86:40046/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776728592, "uuid": "b1c7ff1d-3d12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmcoat4.ra4xovin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776728602, "uuid": "b75f92e4-3d12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.84.177:55540/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776728844, "uuid": "47ce4eb8-3d13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.44.208:50175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776728954, "uuid": "892e3f67-3d13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.104.106:59148/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776728954, "uuid": "893873a2-3d13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://newst-yle5.ra4xovin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776729139, "uuid": "f7f5c845-3d13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.127.174:48581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776729255, "uuid": "3c94c0e8-3d14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-look6.ra4xovin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776696006, "uuid": "d31e5e5c-3cc6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "0liwtqxp.deser8othic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697686, "uuid": "bc3831da-3cca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "0tter7-gate.blasph-nimalo.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776720424, "uuid": "ad68dd13-3cff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.62.200.34", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650465, "uuid": "ca820664-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.223.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650465, "uuid": "ca82110f-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.187.40.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694986, "uuid": "72e2b90f-3cc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.26.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694745, "uuid": "e310b64b-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.172.135.36", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776676445, "uuid": "47765ba2-3c99-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.31.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776670208, "uuid": "c1dfe9b1-3c8a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.75.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644825, "uuid": "a8971117-3c4f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.45.57", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776692045, "uuid": "99e011d1-3cbd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.229.195.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776652625, "uuid": "d1c1c359-3c61-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.81.139.157", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776691566, "uuid": "7c70509c-3cbc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.26.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776656165, "uuid": "0fc02c07-3c6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.74.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653044, "uuid": "cbc665a3-3c62-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.240.219.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776695525, "uuid": "b43d661b-3cc5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.25.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776654186, "uuid": "7439154c-3c65-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.42.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776705065, "uuid": "ea938b42-3cdb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.148.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776708007, "uuid": "c42fe1ba-3ce2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.247.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776690126, "uuid": "2219eb33-3cb9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.200.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776719945, "uuid": "8f7bd7eb-3cfe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.247.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776677766, "uuid": "5b23ce44-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.253.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776721625, "uuid": "78bf47e2-3d02-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.59.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776692225, "uuid": "053bd5e7-3cbe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.12.247", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776690008, "uuid": "dbe45a35-3cb8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.166.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776723305, "uuid": "628f5ea9-3d06-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.99.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776663966, "uuid": "395f11d0-3c7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.175.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776709985, "uuid": "5edcc7bc-3ce7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.93.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776728825, "uuid": "3cb63cfe-3d13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.44.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776691566, "uuid": "7c704c04-3cbc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.98.231.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664386, "uuid": "33de151a-3c7d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.53.58.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776719707, "uuid": "01da5269-3cfe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.199.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776712925, "uuid": "37369cb5-3cee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.251.21.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776689885, "uuid": "9264a484-3cb8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.177.67.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664206, "uuid": "c8879b97-3c7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.193.144.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776715505, "uuid": "3985a4a8-3cf4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.132.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776678846, "uuid": "dec780a9-3c9e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.243.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776657065, "uuid": "288729cc-3c6c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.226.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776689225, "uuid": "094c10f1-3cb7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.179.230.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776710944, "uuid": "9a7a96cf-3ce9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.149.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776680585, "uuid": "eb248fcf-3ca2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.114.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776706864, "uuid": "1afdce09-3ce0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.18.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776655685, "uuid": "f189f48b-3c68-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.88.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776648065, "uuid": "3424ffb9-3c57-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.66.72.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776706145, "uuid": "6e2fd989-3cde-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.161.142.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776701225, "uuid": "f975675b-3cd2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.25.51.90", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776704407, "uuid": "621e16f1-3cda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.142.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776670807, "uuid": "26f607ab-3c8c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.214.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776656706, "uuid": "527645bb-3c6b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.11.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776678125, "uuid": "30f9d625-3c9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.93.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776714607, "uuid": "21cd3b97-3cf2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.94.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776682925, "uuid": "5e23e5da-3ca8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.94.201", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776657306, "uuid": "b7c802c2-3c6c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.52.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776688506, "uuid": "5cd58f0b-3cb5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.148.141", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665286, "uuid": "4c83c38d-3c7f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.243.65.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776709505, "uuid": "4122aae9-3ce6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.33.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776717964, "uuid": "f30bd753-3cf9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.255.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776655025, "uuid": "680d6d51-3c67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.12.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776725644, "uuid": "d4d5c284-3d0b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.85.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694986, "uuid": "72e288d0-3cc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.128.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776711364, "uuid": "94eca901-3cea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.253.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776696725, "uuid": "7f4a1507-3cc8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.228.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776691745, "uuid": "e6e5415e-3cbc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.246.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776720248, "uuid": "440e214c-3cff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.211.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644285, "uuid": "670d4097-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.105.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776667565, "uuid": "9a9cc7a0-3c84-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.111.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665645, "uuid": "221010aa-3c80-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.127.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776702246, "uuid": "5a3c1239-3cd5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.26.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776727865, "uuid": "0031b43e-3d11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.84.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776655865, "uuid": "5d27ba60-3c69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.202.14.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776688145, "uuid": "856017ef-3cb4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.210.186.197", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694685, "uuid": "bf6e19ac-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.3.136.226", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694685, "uuid": "bf6e36ec-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "198.46.173.32", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687545, "uuid": "1f88b850-3cb3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.139.62.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776651426, "uuid": "070953b0-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.33.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776706325, "uuid": "d94aac26-3cde-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.200.88", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776683525, "uuid": "c39cb627-3ca9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.220.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697446, "uuid": "2d42cf1e-3cca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.28.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681426, "uuid": "e06c79ff-3ca4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.161.100.126", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776704707, "uuid": "154613ec-3cdb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.165.69.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776655085, "uuid": "8c4f30ac-3c67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.196.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776652205, "uuid": "d7c2bd24-3c60-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.241.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776723544, "uuid": "f0f1c405-3d06-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.146.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776704824, "uuid": "5b16d815-3cdb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.109.141", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776716406, "uuid": "5263120f-3cf6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.229.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776703443, "uuid": "23fa0938-3cd8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.75.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776724625, "uuid": "7558e93d-3d09-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.78.121", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776695407, "uuid": "6e266b9e-3cc5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.211.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776689107, "uuid": "c2809b80-3cb6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.255.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776711784, "uuid": "8f317ad5-3ceb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.208.112.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776715265, "uuid": "aa058bae-3cf3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.205.195.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650465, "uuid": "ca7a7713-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.124.106", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776672846, "uuid": "e637585e-3c90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.210.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776685446, "uuid": "3c764a77-3cae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.219.44.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776727024, "uuid": "0b242476-3d0f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.220.92.204", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776704824, "uuid": "5b16b600-3cdb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.125.50", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681367, "uuid": "bd246fce-3ca4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.224.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650465, "uuid": "ca697012-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.80.133.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776709205, "uuid": "8e2d1d31-3ce5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.73.140.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776646444, "uuid": "6d7715f5-3c53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.254.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694625, "uuid": "9bf2faa8-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3ik31.artichf1atly.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776654186, "uuid": "743e28fb-3c65-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.186.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776684907, "uuid": "fb761187-3cac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.23.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776687185, "uuid": "4933249d-3cb2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.117.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776671105, "uuid": "d88b475d-3c8c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.147.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776669725, "uuid": "a23351be-3c89-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.96.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776710284, "uuid": "114dc400-3ce8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.87.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776651906, "uuid": "2588504b-3c60-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.210.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776709084, "uuid": "4630d5fe-3ce5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.126.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776670626, "uuid": "bb35e2ac-3c8b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.217.114", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776652625, "uuid": "d1c1ee12-3c61-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.17.43", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776683465, "uuid": "9fea50e6-3ca9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.206.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681845, "uuid": "da5b2327-3ca5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.248.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776686107, "uuid": "c6dcff7b-3caf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.235.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650465, "uuid": "ca6ed6f3-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.242.42.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776648185, "uuid": "7ba7a79a-3c57-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.9.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776705246, "uuid": "5642cfda-3cdc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.199.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649024, "uuid": "6f88f6b2-3c59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.163.68.69", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776696664, "uuid": "5b24678a-3cc8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "52rgfkcr.sizar-sniffy.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776712625, "uuid": "846d24fd-3ced-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.150.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666127, "uuid": "4179685d-3c81-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.7.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776689166, "uuid": "e62c3c0c-3cb6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.247.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776695408, "uuid": "6e465763-3cc5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ya72oy.firs-tachycardia.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644285, "uuid": "670d5e8e-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.158.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776689225, "uuid": "094c2ee0-3cb7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.39.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698711, "uuid": "1f1cad98-3ccd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.204.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694685, "uuid": "bf6dfb85-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.179.248.120", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776699425, "uuid": "c8efc256-3cce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.63.170.27", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776695706, "uuid": "20270b9a-3cc6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.63.170.75", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664206, "uuid": "c8888dac-3c7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "75.118.179.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644225, "uuid": "42e87ea5-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.121.79.73", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666846, "uuid": "ee1ab891-3c82-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.190.156.19", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776719224, "uuid": "e22f02b9-3cfc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.26.106.134", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776656225, "uuid": "336cbbfb-3c6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.65.234.57", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776699608, "uuid": "35b5ec2c-3ccf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "apparelgate.co.uk" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776678013, "uuid": "edf70a02-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "back-yard5.de8trevarm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776723005, "uuid": "afb4f029-3d05-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "backy-ard5.bovla4ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776658145, "uuid": "ac3e49ba-3c6e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-life6.big2mychild.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776729252, "uuid": "3b10a889-3d14-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-look6.ra4xovin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776662166, "uuid": "08a444a4-3c78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-style6.rus5icabreast.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776679025, "uuid": "4972a840-3c9f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-time2.po3vaxkyml.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776667269, "uuid": "ea0dd4a6-3c83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-view3.pulp-turquoise.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776647407, "uuid": "ab7a1ad2-3c55-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-word4.art-tonsillitis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776723907, "uuid": "c96fa393-3d07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "besttime2.qi8maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776711065, "uuid": "e2874033-3ce9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "besttrip5.wi8sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776671231, "uuid": "239ee45e-3c8d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "big-jump3.kymlo7zore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776716945, "uuid": "937d0609-3cf7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bigwall5.to1varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776705071, "uuid": "edd66316-3cdb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bigwall5.to7ramil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776727570, "uuid": "507e98a7-3d10-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blackhat1.ra4xovin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776645065, "uuid": "37cd9107-3c50-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-cloud3.white5lave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776713708, "uuid": "0a2e64eb-3cf0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-lamp1.6zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776661147, "uuid": "a960fa81-3c75-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-silk3.rus5icabreast.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776675007, "uuid": "ee43aa2e-3c95-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-sky2.wi5sarpo1v.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776668589, "uuid": "fd2d3f83-3c86-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-table1.corex4varm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776701767, "uuid": "3c903c93-3cd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bluebox1.ra9ximer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776646391, "uuid": "4dd0252e-3c53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "book-read1.art-tonsillitis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776654186, "uuid": "744efb59-3c65-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bright-glow5.deser8othic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665289, "uuid": "4de5b9c6-3c7f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bright-hall3.hai1owhiten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776719645, "uuid": "dca51390-3cfd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bright-sky1.de7xapil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776707708, "uuid": "11a7de61-3ce2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brightsky1.po3vaten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776699018, "uuid": "d633f1c0-3ccd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c0nv-panel.resolut-revening.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776656466, "uuid": "c322dfde-3c6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "child-care1.big2mychild.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776677766, "uuid": "5b359189-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "city-life2.de8trevarm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776722044, "uuid": "72f88f04-3d03-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cityli-fe2.bovla4ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776715265, "uuid": "aa111b6c-3cf3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cle-arview5.6zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664869, "uuid": "53a5d397-3c7e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clean-room2.hai1owhiten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776654186, "uuid": "744f7b36-3c65-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-tint6.deser8othic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776662831, "uuid": "9535c7e8-3c79-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-work2.resolut-revening.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776703030, "uuid": "2d4d8f84-3cd7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clearview5.ra9ximer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776669966, "uuid": "31d6f10e-3c8a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-wind5.corex4varm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776716645, "uuid": "e0862d2e-3cf6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coldw-ater4.to1varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776704824, "uuid": "5b1fbaf0-3cdb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coldwater4.to7ramil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666545, "uuid": "3abd515a-3c82-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "color-set1.pulp-turquoise.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644044, "uuid": "d76dc2b6-3c4d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool-drink6.apoth-shopping.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776682032, "uuid": "49e9334b-3ca6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool-milk5.zore9varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776667625, "uuid": "be9b36b9-3c84-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool-tone4.pulp-turquoise.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776726971, "uuid": "eb8a8e16-3d0e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coolmilk5.7zorimel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776707350, "uuid": "3cac063d-3ce1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coolstone6.kymle5rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776719284, "uuid": "05772768-3cfd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coolstone6.wi2sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698711, "uuid": "1f230a65-3ccd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "covstri.rus5icabreast.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698648, "uuid": "f999a780-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "crypto-corexchange.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776652445, "uuid": "667e3ef1-3c61-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-shade1.deser8othic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776675665, "uuid": "76716d7d-3c97-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-wood4.wi5sarpo1v.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776720006, "uuid": "b3e86ade-3cfe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "darkn-ight2.de7xapil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776708069, "uuid": "e8c80706-3ce2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "darknight2.po3vaten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649385, "uuid": "46b4c13e-3c5a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-input4.artichf1atly.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776655146, "uuid": "b067a2a6-3c67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-point3.sizar-sniffy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776696306, "uuid": "85e88d16-3cc7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deco-spe.sizar-sniffy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776648066, "uuid": "3444a8fd-3c57-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-plot6.art-tonsillitis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776654186, "uuid": "744fae3b-3c65-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-red4.deser8othic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776674584, "uuid": "f28e5b80-3c94-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-sea1.wi5sarpo1v.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776651426, "uuid": "07184357-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-soil3.firs-tachycardia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776660191, "uuid": "6f5c2f88-3c73-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-void6.blasph-nimalo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776720365, "uuid": "8a169387-3cff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deepocean3.de7xapil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776708369, "uuid": "9bf9c528-3ce3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deepocean3.po3vaten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776693906, "uuid": "ef632b8a-3cc1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dlvryintl.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776693907, "uuid": "efc4fb60-3cc1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "draalineverzignassi.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776680345, "uuid": "5c2d103f-3ca2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "easy-task6.po3vaxkyml.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776725231, "uuid": "de3a006f-3d0a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "easy-task6.qi8maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776713347, "uuid": "32e53985-3cef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "easydone6.qi5maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698529, "uuid": "b295b2c4-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ensions.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776655506, "uuid": "86fbec50-3c68-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "error-log4.sizar-sniffy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664032, "uuid": "6109a5de-3c7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-check5.resolut-revening.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776659830, "uuid": "98778483-3c72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-rocket5.blasph-nimalo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776670626, "uuid": "bb5dfc4a-3c8b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-run1.kymlo7zore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776714365, "uuid": "919572bb-3cf1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fastrun3.6zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776702425, "uuid": "c4eeb766-3cd5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fastrun3.ra9ximer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776711606, "uuid": "2549f0ca-3ceb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fasttime6.wi8sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776695706, "uuid": "20465d6f-3cc6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fieldsun.deser8othic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776656165, "uuid": "0fe30fbd-3c6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "final-step6.sizar-sniffy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650465, "uuid": "ca8820a2-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flow-control6.artichf1atly.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776652085, "uuid": "9023612b-3c60-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-bloom6.firs-tachycardia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681730, "uuid": "95e1d110-3ca5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-tea4.zore9varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776706390, "uuid": "00100758-3cdf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "freshmilk3.kymle5rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776718329, "uuid": "cc88094d-3cfa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "freshmilk3.wi2sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776726608, "uuid": "134a368d-3d0e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresht-ea4.7zorimel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776654785, "uuid": "d91a3b1e-3c66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "full-report2.sizar-sniffy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776722585, "uuid": "b52b2c73-3d04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "full-room4.bovla4ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776677766, "uuid": "5b332f3a-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "full-room4.de8trevarm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776699965, "uuid": "0aa91c5a-3cd0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gene-mod.hai1owhiten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697806, "uuid": "039e8523-3ccb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "getamarin.ro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776720664, "uuid": "3c62a932-3d00-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-fish4.de7xapil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776676265, "uuid": "dc58d692-3c98-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-fish6.wi5sarpo1v.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776708788, "uuid": "9561dd25-3ce4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "goldfish4.po3vaten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776657788, "uuid": "d71527d6-3c6d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "good-day5.big2mychild.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664206, "uuid": "c8b41ca2-3c7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "good-end6.resolut-revening.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776678609, "uuid": "516da405-3c9e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "good-news1.po3vaxkyml.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776712024, "uuid": "1ea7015a-3cec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gooditem2.qi5maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776723605, "uuid": "15414dbb-3d07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "goodn-ews1.qi8maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776713947, "uuid": "985d8c8c-3cf0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gre-enleaf2.6zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776668948, "uuid": "d2d1f2c2-3c87-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-lamp2.corex4varm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650466, "uuid": "caac4615-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-leaf1.firs-tachycardia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776702067, "uuid": "ef922c42-3cd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "greenleaf2.ra9ximer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776656765, "uuid": "754e8b0a-3c6b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "happy-play2.big2mychild.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776674225, "uuid": "1c974c7f-3c94-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hard-box5.ra2telsylo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776675306, "uuid": "a0cb9273-3c96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "high-hill3.wi5sarpo1v.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665952, "uuid": "d98b4a64-3c80-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "high-roof5.hai1owhiten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776659467, "uuid": "bfdfcae9-3c71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "high-speed4.blasph-nimalo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776651426, "uuid": "07319d48-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "high-stem4.firs-tachycardia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776670271, "uuid": "e77b1c66-3c8a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "high-step6.corex4varm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776715506, "uuid": "398dcb07-3cf4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "highstep6.6zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776703391, "uuid": "04cf0ff3-3cd8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hightree6.ra9ximer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776721867, "uuid": "093aedf0-3d03-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-base1.bovla4ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776677766, "uuid": "5b38d551-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-base1.de8trevarm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776711784, "uuid": "8f725fcf-3ceb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "homeshop1.qi5maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776643687, "uuid": "027bc934-3c4d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-coffee5.apoth-shopping.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776726249, "uuid": "3d36f57f-3d0d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-soup3.7zorimel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681431, "uuid": "e3af9657-3ca4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-soup3.zore9varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776718624, "uuid": "7c86c856-3cfb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-tea4.wi2sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776706751, "uuid": "d798dcb9-3cdf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hottea4.kymle5rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776679990, "uuid": "887ffb02-3ca1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "just-talk5.po3vaxkyml.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776713046, "uuid": "7fb7c90c-3cee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "justplay5.qi5maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776724991, "uuid": "4f159699-3d0a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "justtalk5.qi8maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694986, "uuid": "72f5b9f3-3cc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kronos.bot.nu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698347, "uuid": "4625263c-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ktfxyu6.rus5icabreast.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776673026, "uuid": "518cc236-3c91-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "last-page2.ra2telsylo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776728285, "uuid": "fab607ab-3d11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "long-belt3.ra4xovin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776671646, "uuid": "1b03cc15-3c8e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "long-road4.kymlo7zore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776699726, "uuid": "7bf7a448-3ccf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lum-spireos.hai1owhiten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776663187, "uuid": "69511af3-3c7a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-goal3.resolut-revening.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776649087, "uuid": "94d30aaa-3c59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-sensor3.artichf1atly.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776709686, "uuid": "acd4bf1b-3ce6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mainroad1.wi8sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698408, "uuid": "6a71b475-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "md.ccsuquk.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776659165, "uuid": "0c254710-3c71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "moon-orbit3.blasph-nimalo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666967, "uuid": "36308699-3c83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "new-mix2.pulp-turquoise.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776717309, "uuid": "6c56e3b7-3cf8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "new-page6.to1varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776646685, "uuid": "fd106c58-3c53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "new-story2.art-tonsillitis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776672008, "uuid": "f34a2927-3c8e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "new-trip5.kymlo7zore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776705368, "uuid": "9eeca69a-3cdc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "newpage6.to7ramil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776728951, "uuid": "87acb217-3d13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "newst-yle5.ra4xovin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776677766, "uuid": "5b3b97c2-3c9c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "next-door3.de8trevarm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776722347, "uuid": "27234253-3d04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nextdoor3.bovla4ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776710764, "uuid": "2fa140b4-3ce9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nextstep4.wi8sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776679687, "uuid": "d43b77d0-3ca0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nice-shot4.po3vaxkyml.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776724687, "uuid": "9a2e717a-3d09-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nice-shot4.qi8maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776647707, "uuid": "5e3003c2-3c56-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "old-tale5.art-tonsillitis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776672306, "uuid": "a4d61b60-3c8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "old-town6.kymlo7zore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776710344, "uuid": "35516e90-3ce8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "oldmap3.wi8sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776672907, "uuid": "0abcc303-3c91-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-book1.ra2telsylo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776715689, "uuid": "a6fd2ead-3cf4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-book1.to1varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776665530, "uuid": "dd8f39ab-3c7f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-door4.hai1owhiten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776703746, "uuid": "d81fbe69-3cd8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "openbook1.to7ramil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776647045, "uuid": "d3fc469b-3c54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "page-turn3.art-tonsillitis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776653165, "uuid": "13cf4e01-3c63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pale-blue3.deser8othic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776648727, "uuid": "bea7aef3-3c58-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "power-unit2.artichf1atly.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776662585, "uuid": "0280f0c8-3c79-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "prime-task1.resolut-revening.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697810, "uuid": "05fb32b8-3ccb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-ec5d868d10f548e792c0fd1c080190aa.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776668288, "uuid": "49dc9e96-3c86-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pure-color6.pulp-turquoise.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776651725, "uuid": "b95deff5-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pure-seed5.firs-tachycardia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776727265, "uuid": "9b00ae35-3d0f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pure-water6.7zorimel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776700325, "uuid": "e12876bb-3cd0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qeeebs40.pulp-turquoise.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697987, "uuid": "6ff90dd2-3ccb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qfw0.blasph-nimalo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776654484, "uuid": "25ed2478-3c66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quick-scan1.sizar-sniffy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776699371, "uuid": "a877bc0c-3cce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorlith3is.resolut-revening.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776679327, "uuid": "fd84d67b-3c9f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "real-fact3.po3vaxkyml.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776724575, "uuid": "572ae1f2-3d09-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "real-fact3.qi8maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776712324, "uuid": "d146d653-3cec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "reallife3.qi5maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697386, "uuid": "096b77dd-3cca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rebatesouth.big2mychild.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776661508, "uuid": "8083bd92-3c76-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "red-fabric4.rus5icabreast.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776716344, "uuid": "2d8a75d4-3cf6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "red-mark3.to1varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776673627, "uuid": "b824ae4e-3c92-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "red-mark4.ra2telsylo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776704651, "uuid": "f3931488-3cda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "redmark3.to7ramil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776688088, "uuid": "636831d8-3cb4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rizvedevelop.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697029, "uuid": "34690f88-3cc9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "roya-node.big2mychild.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776700685, "uuid": "b79e167a-3cd1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sc9t.pulp-turquoise.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776710043, "uuid": "819116e8-3ce7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shortway2.wi8sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776678366, "uuid": "c094ef09-3c9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "side-view6.de8trevarm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776723245, "uuid": "3e759180-3d06-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sideview6.bovla4ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776650468, "uuid": "cc03a9fd-3c5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "signal-box5.artichf1atly.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776721265, "uuid": "a2442f3b-3d01-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "silver-rain6.de7xapil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776709326, "uuid": "d668c84b-3ce5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "silverrain6.po3vaten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644346, "uuid": "8af96eb1-3c4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sky-view1.white5lave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776670930, "uuid": "70782384-3c8c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "slow-walk2.kymlo7zore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776695047, "uuid": "9714f323-3cc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "slowcivi.firs-tachycardia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776669244, "uuid": "83cd1bc6-3c88-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-cup3.corex4varm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776714664, "uuid": "443ace96-3cf2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-cup4.6zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776657485, "uuid": "22571e6c-3c6d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-step4.big2mychild.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776702725, "uuid": "77afeca3-3cd6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smalllamp4.ra9ximer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776648425, "uuid": "0ab19293-3c58-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-system1.artichf1atly.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776712686, "uuid": "a8d53d77-3ced-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smartchoice4.qi5maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776674467, "uuid": "acaa313a-3c94-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-bag6.ra2telsylo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776652745, "uuid": "191e59f0-3c62-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-grey2.deser8othic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776646025, "uuid": "73fbfd9a-3c52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-rain6.white5lave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776667865, "uuid": "4db05466-3c85-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-touch5.pulp-turquoise.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776660851, "uuid": "f8a8e631-3c74-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-wool2.rus5icabreast.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776715985, "uuid": "574b1cd1-3cf5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "softwind2.to1varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776704051, "uuid": "8e40382d-3cd9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "softwind2.to7ramil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776666191, "uuid": "679e00ed-3c81-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solid-base64.hai1owhiten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776658504, "uuid": "8219789a-3c6f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "space-travel1.blasph-nimalo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776658865, "uuid": "5910d6ce-3c70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "star-field2.blasph-nimalo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644765, "uuid": "84c44405-3c4f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sun-light2.white5lave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776725890, "uuid": "670aef1c-3d0c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-bun2.7zorimel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776681066, "uuid": "0a29c589-3ca4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-bun2.zore9varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776643331, "uuid": "2de799a5-3c4c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-cake4.apoth-shopping.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776718025, "uuid": "1720bcca-3cfa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-pear2.wi2sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776706041, "uuid": "302c34da-3cde-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweetpear2.kymle5rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776717610, "uuid": "20045251-3cf9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tasty-apple1.wi2sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776725650, "uuid": "d81626f1-3d0b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tasty-pie1.7zorimel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776680711, "uuid": "365336dd-3ca3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tasty-pie1.zore9varin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776705725, "uuid": "74206319-3cdd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tastyapple1.kymle5rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694806, "uuid": "07a5c8b2-3cc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tbgqldre.artichf1atly.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776661865, "uuid": "552042ae-3c77-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thin-layer5.rus5icabreast.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776673325, "uuid": "041be1e4-3c92-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thin-pen3.ra2telsylo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776663787, "uuid": "cedbe71c-3c7b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "top-result4.resolut-revening.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776657126, "uuid": "4c6e01ce-3c6c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "toy-box3.big2mychild.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776644829, "uuid": "aac9ecd1-3c4f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ts.bhaaratkeeshakti.vip" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776655807, "uuid": "3a66e785-3c69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "user-test5.sizar-sniffy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776660550, "uuid": "45a88842-3c74-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-coat1.rus5icabreast.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776676025, "uuid": "4d5488dd-3c98-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-sun5.wi5sarpo1v.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776645665, "uuid": "9d6f3d37-3c51-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-wind5.white5lave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776719045, "uuid": "76f3aad3-3cfc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmbr-ead5.wi2sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776707108, "uuid": "ac5d3c5c-3ce0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmbread5.kymle5rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776728590, "uuid": "b0c61c5c-3d12-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmcoat4.ra4xovin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776694386, "uuid": "0d4f712c-3cc3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "west-layer.4zoralin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776645366, "uuid": "eaefb764-3c50-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "white-snow4.white5lave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776664566, "uuid": "9f5d37e0-3c7d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "white-wall1.hai1owhiten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776669609, "uuid": "5ce0deda-3c89-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "white-wall4.corex4varm.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776720906, "uuid": "cc2e6eaa-3d00-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "whitecloud5.de7xapil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776709025, "uuid": "22f0624f-3ce5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "whitecloud5.po3vaten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776727925, "uuid": "24527d83-3d11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "whites-hirt2.ra4xovin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776651426, "uuid": "07224ac2-3c5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wild-root2.firs-tachycardia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776698349, "uuid": "4751d1b6-3ccc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wisdomheart.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776697811, "uuid": "070488c4-3ccb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.maxpower01.com" } ] } }