{ "Event": { "published": true, "date": "2026-01-23", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-01-23", "timestamp": 1769213721, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "db511c29-a13a-4257-8c57-2781d297d696", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1769127433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769127433, "uuid": "f5137ca8-3f63-4788-84f3-4a5a9157ec98", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769127433, "uuid": "640f0abd-23d7-40b4-8998-2b86e38dd2bb", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769127433, "uuid": "4a1009c3-ab9d-4dbb-959c-79afcc398948", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769127433, "uuid": "1f13790a-662c-4cc2-83b2-d4e6e5fcb12b", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769127433, "uuid": "c80ed2ef-6842-40c2-bb39-894b8bdfe464", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21be8899-f7f3-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769128406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769128406, "uuid": "819eb555-2805-46f4-b67c-6fbdd7e9f955", "comment": "Malware payload", "value": "93935934f40c2beb9fa2335e8bb55047", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769128406, "uuid": "db22d41d-d49b-42a0-87c7-85a08a57bc96", "comment": "Malware payload", "value": "d86e5e500f326cc90692d58e1b97cdb174675693fb07a923e6b416b3a465fc5a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769128406, "uuid": "9e4f37df-788c-4bbf-8626-c639e72ebc5b", "value": "T1C8E08655EFB513A4FD41954E5EE021D22489E44968306DCCFD348E619414B00D315A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769128406, "uuid": "20fbc24a-18a8-497f-9944-902d4b6ef4eb", "value": "6:hx60uW913nENFXuXL8EArVyiuuXaMI9QKKi+RbV/W9b:nDVuFXub8LZ6YaMEQRiudW5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769128406, "uuid": "70f8d567-e4da-4bb5-8a3c-e56b2815b781", "value": 309, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769128406, "uuid": "1d3de932-e2e1-43ee-9e9e-878a12d8e705", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769128996, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769128996, "uuid": "1b433615-3c51-4510-b985-6e87e4e329ce", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769128996, "uuid": "7f253f07-a91c-4e4f-8f91-057c76d7aa79", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769128996, "uuid": "fd463f75-f8e1-404b-a843-2a79992811fd", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769128996, "uuid": "886c5eeb-4489-40fa-83d6-cd86125552a3", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769128996, "uuid": "d9d8139b-7cd5-422e-9225-f8780444738c", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d997f975-f7fa-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769131721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769131721, "uuid": "b60fa7fa-3016-432c-a458-8edd1d45daf7", "comment": "Malware payload (Mirai)", "value": "615930b13a0ba8fed23097cc89eaefad", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769131721, "uuid": "d751b123-50f0-48bf-9180-0d7a18278540", "comment": "Malware payload (Mirai)", "value": "7a6ee78590313d7bb4d4a874cf76c71634e49939abfacbd34faba205b74e4063", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769131721, "uuid": "d4a59695-1d84-415c-a58e-e5a3d6ce0c3e", "value": "T1E1434C137881C0FDC589C234577FA61EDA23B07E1236B26A37A07E2B7D4AE311F1A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769131721, "uuid": "f3a12241-4625-4c8f-aa12-57520475e0fd", "value": "1536:PqNVEOcdTRu+Dj1vuAeHx/7/DVuZX/lBavtus:PsVEH1GAeH5RYPlBuu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769131721, "uuid": "b13ba7d2-7347-4a37-92af-71f2c35bfff1", "value": 59184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769131721, "uuid": "2a4a2073-e6c3-4fca-97d7-7b9817d6b78b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "695071d6-f7d3-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769131794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769131794, "uuid": "e2e97f85-db33-4347-8b62-1a27bade05fc", "comment": "Malware payload", "value": "4d656a4d1cd572cb9b5c213c195cef0a", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769131794, "uuid": "f9cf2f94-c9dd-4028-be55-8c9a4ed7d845", "comment": "Malware payload", "value": "bb14fbfa765a4ac894a74aef2084628219f9bec172ccde8f6c13b6db933a3154", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769131794, "uuid": "2908832f-a45e-4835-86c5-287bea1f7048", "value": "T155A62323832E9E0DD85202B4945D00329630FAA99F5777437F947E2FAC93F229B653", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769131794, "uuid": "415f0f83-efe0-42a6-bef9-8379a0298c11", "value": "196608:AVeXPNOvFYJoyma5tpZnG2RS7u4slgpEexWmCHyO2b+Fn6BdK:AVu0vFYq651dOubgpEejCHvC4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769131794, "uuid": "c2cc0bed-3f14-4eb8-a852-474e83ff8c23", "value": 9678285, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769131794, "uuid": "f7008525-398f-42c0-97d4-dab21a6b3431", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "290128df-f7fb-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769131854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769131854, "uuid": "34a86ec3-d30a-4f79-b218-87e28e464a53", "comment": "Malware payload", "value": "b9d1d582d20e24a6a22a3367cc973d1e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769131854, "uuid": "93708c26-33ee-44a6-84e4-efc1bc699eca", "comment": "Malware payload", "value": "40ae09bbf4eb4a89836a4f4ca0d39d34a91f9357ca61e3bc964edf70a74b9fab", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769131854, "uuid": "40c154e5-5b10-4120-ab5a-0259377cd9f5", "value": "T1D151442E2C04C2186A1A9B491AD8771C4328FD3B5918CCDC33EB5629C742FE8572B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769131854, "uuid": "a8b6c809-8a06-4f1a-9e07-bae4f8872f57", "value": "48:0rfTXEoP+oOb7o+osdDMLxGge0KlfdJKVsATrCbsKtmsKt/GJWDZETbe:Erpab5kGdlfqsHWjZETbe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769131854, "uuid": "afd6f45e-3af8-4540-8e32-bb555a51f92d", "value": 2710, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769131854, "uuid": "8a9437fa-201b-4a49-a29b-5796a845ce3d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec2e69b4-f7fb-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769132181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769132181, "uuid": "aa9cf0a4-db93-46ef-a64f-c5b1f7be3c8f", "comment": "Malware payload (Mirai)", "value": "15dc9655c73c0dc67ce4b1f03e88932e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769132181, "uuid": "5f8e595f-7f59-4b11-bd30-c6adfd44729f", "comment": "Malware payload (Mirai)", "value": "bda8da9591a4cddac8c94a60a84c012f7686855b8444465ec9b43a1b5b17eac1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769132181, "uuid": "2aca7da5-9a47-4e22-92e9-753a0c5bf98c", "value": "T10F531985BD82DA13CAC4537BFA5E42CD3726279CE2EE3213DE155F6032CA82B0D7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769132181, "uuid": "e39e54fb-457c-4735-8f9b-8f5635752368", "value": "1536:PXU9w5YknCF8CLCLWXS1n9f/JPz/rQsBF:MOnCjU93VPQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769132181, "uuid": "4c09551a-9d48-4f73-a40f-2703505b8b79", "value": 64296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769132181, "uuid": "904a76ce-d5f2-492c-a064-172d598e4101", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bd970c4-0ef2-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1769132553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769132553, "uuid": "986bf409-14ef-4041-86d8-7916153bf79c", "comment": "Malware payload (CoinMiner)", "value": "8caa858a427dda38bced89183ad90530", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769132553, "uuid": "180d94f6-31a4-4528-8c52-715c9ad79ed0", "comment": "Malware payload (CoinMiner)", "value": "717fac4c5f7f77428de80b2da5edf4af459f6076ecffb288bcbdcede21f81961", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769132553, "uuid": "7dc48735-2f1a-4b1b-bbac-c238eff8623a", "value": "T1E0563355F0405822F039107A34F988A2B07DFC724B7559CBB3A83E761E353E8267DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769132553, "uuid": "8bf42e65-3aa6-4b6a-8083-13166dad7886", "value": "98304:EUJC6pOfTFU00bm8FmH/tFErRoSncMEOJaTMOKXX+Li3jxqQjz4F4VRc:JWfTFU3muRH6OJAMp+e3jYqW4VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769132553, "uuid": "d4c47d6d-6d5c-4b54-9f1c-719637fec525", "value": 6271188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769132553, "uuid": "b14770b1-ea6e-4541-9d95-feccbb184c57", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa227c95-f7fd-11f0-9446-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1769132930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769132930, "uuid": "6cd566f0-8ff5-4bbc-8445-888c05dc2c84", "comment": "Malware payload (ConnectWise)", "value": "7ee8f60d705967984bfa7be129f38003", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769132930, "uuid": "0077e0f4-c99d-4c3f-aada-fb214c2b79c5", "comment": "Malware payload (ConnectWise)", "value": "ea0abb5e3a7d6a3223dc8ddace4f15b7c6e5aa267a6f3bc113bc9d1dec9e5109", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769132930, "uuid": "e77378cf-1e68-422e-ba62-f02aaf0c85cc", "value": "T1A8E6236027FCA66CF1B31A39E93980F5683A7C65DD51C22E2390796E1E72DA0C9717", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769132930, "uuid": "c25b4015-f0e2-4c34-a193-7f0e12853153", "value": "393216:ahdiEnhdiEnhdiE1hdiEOhdiELhdiEVhdiE:OJvJvJpJCJjJJJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769132930, "uuid": "bdd9694e-fbb2-4695-9345-2e28c6b05d4f", "value": 15228928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769132930, "uuid": "fc47a51e-bd97-4e17-9d56-b4799a9215ec", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58914814-f7fe-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769133222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769133222, "uuid": "5b5b4b79-5177-4144-91ba-fa691bcfc27e", "comment": "Malware payload (Mirai)", "value": "ef8e3e18aa6bdaa675b443dde6437f75", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769133222, "uuid": "c036b512-4d76-4788-b378-21357c585e6a", "comment": "Malware payload (Mirai)", "value": "974dfaab25bc4d94c689627e71183c128e6480f7cf1de13da329d4286a459dd9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769133222, "uuid": "4865c7b0-9569-4f58-b517-3266515393b6", "value": "T1D1531985BD82DA13CAC4537BFA5E42CD3726279CE2EE3213DE155F6032CA82B0D7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769133222, "uuid": "facf3819-6dcd-4bfc-b4ab-fd5e3796067b", "value": "1536:tXU9w5YknCF8CLCLWXS1n9f/JPz/rQsBF:mOnCjU93VPQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769133222, "uuid": "ef9785ce-e854-433a-8bdd-0a76dbac8145", "value": 64296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769133222, "uuid": "5917cdd9-1fcc-4333-8178-3b0e031e071a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4ade076-f7fe-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769133404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769133404, "uuid": "e08cdb0b-7df3-4a1d-a74b-9b068ad223c0", "comment": "Malware payload", "value": "d4731cccebf170736d0c3e8e6f47e802", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769133404, "uuid": "8336cfa2-ac65-4fd3-a553-472c0ff81058", "comment": "Malware payload", "value": "b4ae793b5a845c0783dcdfeec81c5e7110fed68d24ce9f8d4977777e30d461d2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769133404, "uuid": "237e58ee-a6d1-431a-8dde-c96a84a7996b", "value": "T1F693E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769133404, "uuid": "7088afa0-856a-49d9-b9b4-cfc6cf40b3c3", "value": "1536:pap92uEEwH8Qw0DMqpYJKNoE+pTYeGf8BqLv3TliCoRGpNuqYPPX/IH8LutVWw:I6uEEwH8h0v+pHBqv3TliCoRGpNuqYP+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769133404, "uuid": "7548d10f-7bd8-4ef7-a052-b91d9b12ed66", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769133404, "uuid": "506891b3-026e-4b1d-8fcc-fd053fded1ff", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "020590ba-f7ff-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769133507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769133507, "uuid": "df74a8f2-5087-41b7-abbe-84a0486d2685", "comment": "Malware payload", "value": "fbcbb9d1a2d4d2b75c2be4e9494c89d8", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769133507, "uuid": "45114cd2-c617-489c-bd43-b688baedb573", "comment": "Malware payload", "value": "ae3eb62d557e1c6cfb1ac804b3254fbd82de874ed99901e0ef9c2e09ab80775f", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769133507, "uuid": "b4ce95c1-f232-4b35-bfc7-8d0d787e8321", "value": "T16EA63316C26EAD0DDC620275744800378230D9558B9AB787BF987E3FBC83F9687993", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769133507, "uuid": "976c637f-9376-438e-b109-f51503640070", "value": "196608:Am32EAIBv6Y/ixVQKqOBTCfl/CqkPko1KfIkBAK6rMY4EC0OjtPqNDG4ul:n32cBCEiHQ7O1IlNn+KfII6P4EC/je/4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769133507, "uuid": "3911ee60-4d8e-49d8-98d8-54a98c0bfbf3", "value": 9678285, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769133507, "uuid": "fea8812b-8d93-4108-bd8c-b1e221715f77", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "123c2609-f7ff-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769133534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769133534, "uuid": "8092043a-5a85-465e-bca6-fac40b20b18c", "comment": "Malware payload (Mirai)", "value": "efbd83e75b53dfa24fbf0700dbe9ad4e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769133534, "uuid": "2c11e53c-545c-42e1-80e3-d250104fbd15", "comment": "Malware payload (Mirai)", "value": "6d4331007553a1ecf7b544702a411af38355ee36d119f5715d799d4eb9e19d01", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769133534, "uuid": "87ad0e7d-a736-4f1f-b9e2-fd355c7f01c4", "value": "T1A093B54E7E218F7DF76D873547B78E21979823D627D0C245E15CEA101E6038EA81FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769133534, "uuid": "33d7e027-f9b7-48ec-99e3-de08996d4466", "value": "1536:7KKapgvxRtfmXw037Kh9+Iz3H7xlK82h+LdOsDgzpoqoBxWO/oZqOy:7KKa6ZRBmrK/3zXdf2h+LdhgzhoCOSxy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769133534, "uuid": "9f9c83ba-ccab-40b9-80a3-e47aaa172cbc", "value": 92672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769133534, "uuid": "0f03aa44-9d8a-432b-835e-4a7fa5e1c405", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a2ae169-f800-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769134084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769134084, "uuid": "e946bf83-0153-44ca-9cdf-0fe9aa50e99e", "comment": "Malware payload (Mirai)", "value": "38a8581aac65ea1311f04fb3cc1dc2ee", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769134084, "uuid": "ecec685a-b9b1-4d7f-ae06-f5eefc903279", "comment": "Malware payload (Mirai)", "value": "6e6a2aa1f7858271d1926469a933bee846f5abf1da1661fc86d6954e885020a5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769134084, "uuid": "3405d1d9-6046-4360-a453-d11a6e1dffad", "value": "T1B383194AFD829B15D5D922BEFE5E118A33136B6CE3EE7112DE105F2427CA51F0E7A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769134084, "uuid": "5ca48f62-a766-4f49-9c7c-7dcc0bfe5b22", "value": "1536:l+nE/rKyGYV/9pFiX+vvpUTBPyLTVfR5SuScUNMKp78YOle3ihyaDxu:dRGlDT9y/FRIuScUNMKptTad", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769134084, "uuid": "e7ac6410-1ba4-4382-bab0-57dce0306efa", "value": 88420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769134084, "uuid": "ff0ae2ef-425e-465d-924c-0b3d95fd2046", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2db214c5-f801-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769134439, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769134439, "uuid": "ceaacfd9-fef9-4ba0-ada4-f9ef825bda9e", "comment": "Malware payload", "value": "52bbf62e09449633d0a6e7d48ddf1c5c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769134439, "uuid": "7f6cc287-fa35-4ac6-a9de-a8091bb0fc06", "comment": "Malware payload", "value": "0a0b9dc3860d121b3b5d30aa03242dd0e5dc36eca1baad12c5e56706a8575523", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769134439, "uuid": "ab7065da-2391-4b78-b99b-315b302b879b", "value": "T1B88309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769134439, "uuid": "380b4689-e79b-4fcc-a986-c09f6e45e441", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn1WaqVN/:XEKltp9txAX/yr2pb1WHVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769134439, "uuid": "31c62c9c-9838-4925-b6d8-0f78df4e1869", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769134439, "uuid": "e2c8b8b2-c74b-483c-b61d-aa87c8218a96", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76f182e2-f801-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769134562, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769134562, "uuid": "35bd2af6-ce24-4d76-ba4c-d0d56d454cff", "comment": "Malware payload (Mirai)", "value": "41a4ad97fffb5573667d41b0011f1576", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769134562, "uuid": "7e4c60fc-c604-4ee0-845e-67810e0e0881", "comment": "Malware payload (Mirai)", "value": "15da48c82e7b95da9e8c23c1ff0c90e70578da4a521a768dec60528d29235b37", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769134562, "uuid": "5e524c07-1750-4c38-90cc-8122a4877f07", "value": "T19193E80ABF600FB7EC2FDD3715A91A49258C651712E97F3A7A34C818FA4A50F49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769134562, "uuid": "f6c354e5-8cd6-48dd-b3c4-a6c2d56100e3", "value": "1536:932fCidnnJARyxmU0ZMZziQk9BBWaRakzZyFUyIYoB7eY0yWC1bZ/3Ia:x2fCikU0ZIziQk9B4aHxyXotWGb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769134562, "uuid": "c1f5c4f3-2442-40ce-933b-5ea835945b90", "value": 96768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769134562, "uuid": "ab87cb8b-e866-48ab-a1d0-60a3ce54339e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8839bb39-f802-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769135020, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769135020, "uuid": "1a3c41a2-267b-490c-b0a4-0ce5f7e38c52", "comment": "Malware payload", "value": "8fb260addbf29efca64eaa3dfa820a39", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769135020, "uuid": "d0c957ba-2cbd-4179-a51b-a2f867935fb2", "comment": "Malware payload", "value": "ab91708e91c1af327cd46dcc82fbb6a052d691fc341de74415152a4442e22181", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769135020, "uuid": "0152a931-6db6-4a19-8fd2-013de0bc81ab", "value": "T1AFF31A72A7B4197A23BB43BCE455F78879689523D74D62E1F8FEC19C42C1BD220627", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769135020, "uuid": "d950388e-1aca-49b5-ae32-c514e1bc5bba", "value": "3072:EdrK2iu5mGuE/kDkank74vQ+/s4oxY+b3wyAtA+3cpPCWTn5bXZEtUioCkdGas06:aru8GPd6pLas07H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769135020, "uuid": "a335ef68-5360-436f-b1da-666b858a4411", "value": 158473, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769135020, "uuid": "73951d93-9735-46dd-a402-4c4e706ef9b3", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "899f6be4-f803-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769135452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769135452, "uuid": "1fa29e0d-3b65-45ca-a7aa-353382c895b2", "comment": "Malware payload", "value": "0977250e9480b76a1b175d79a4800961", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769135452, "uuid": "8c4cb6ec-5007-4177-83ab-0ae6a2395970", "comment": "Malware payload", "value": "b3fa2e6dfee9d9ab9ddd0f5ee6f177f25d38ef63740d024506dc68c28413be2d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769135452, "uuid": "e1d1a17e-338b-41a3-93e3-21010be64d6b", "value": "T17683965E6E21DFADF7A882354BB74E31979833D623D1C685E26CD5002F6034E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769135452, "uuid": "e8d24c83-10d4-42e9-9917-7584d9e5e3e1", "value": "1536:usDu+f6u6vMJmAHsb36Qkh1Mhe+BEmbF5ruK:1y3db3I1M9bFBuK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769135452, "uuid": "4695d41f-b37d-46c5-9366-cc8335937de6", "value": 86232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769135452, "uuid": "f8df6890-2e59-40cc-864c-1d687479d63a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b19a0f4-f805-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769136206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769136206, "uuid": "6b81e76d-6703-4108-a89c-93785083b89b", "comment": "Malware payload", "value": "c80c643ed22fd848fa667fd42dc5796d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769136206, "uuid": "f2176089-5951-471b-8f77-1eedc9fc21db", "comment": "Malware payload", "value": "f628b3248792b61cd8d6747283a27172b7375392ab314ce699c8bb6b931f1fab", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136206, "uuid": "be76482d-2f31-475f-9f93-ec436c747469", "value": "T17F81D2489AE182B749D1156BE105BD8AC7F398F883B245207C0FBDCBEBC85BC92061", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136206, "uuid": "deb6ca81-b3eb-46aa-8fba-bd777406eaa5", "value": "48:L+gmeWQolGmseyDmfq8mLzEBmO2yDm9n78XKNLsEBmALF7meHfnxLREBmwmAwmV7:LuI6hJIn5h6jzGrn5LykktRHUg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769136206, "uuid": "25703804-66db-4489-9646-587d8159ff23", "value": 3876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136206, "uuid": "fc093522-0a68-423e-9b1f-5ab34e9665f6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fca93a26-f805-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769136504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769136504, "uuid": "401fc3b7-9f73-4b3f-afc3-e9b2608b0380", "comment": "Malware payload (Mirai)", "value": "df2dcaf70e8d15f03053d5185f740f3e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769136504, "uuid": "d8cd06bb-7a63-45a1-88fe-9ae406a650d8", "comment": "Malware payload (Mirai)", "value": "13fab1a575330eac6bcbb329a5bc1b0fbaa6639c0d3ab56f34c63fcecdf37913", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136504, "uuid": "c3516e3b-a8ce-4081-a877-1491d1425826", "value": "T150534D01730C0A43D1A76EB43A3F57D1D3FEA9D022E4E985291EAA8992F5D3251C6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136504, "uuid": "b96f6230-f5d2-436c-9799-591634014428", "value": "1536:BNU13CqU8ax0n3JewHQW51ugjUqaZ+8vSYQI9O8ArP:SSpW3JtlTOnvSYTOHT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769136504, "uuid": "2f498037-03e2-40ba-b6e9-c7260b75e09c", "value": 65656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136504, "uuid": "fe60c60f-d8e2-4784-8ed9-b4b3fec3cf28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "489c4de3-f806-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769136632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769136632, "uuid": "03f6b4f0-cdc0-499a-b141-34030d6243c6", "comment": "Malware payload (Mirai)", "value": "1d83b3d592ac45db69b7e2ec9d6bf01f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769136632, "uuid": "be1adb8d-7d70-442a-8cc7-43869672d5cd", "comment": "Malware payload (Mirai)", "value": "d7b47e5af2494044202f87f02040bd06364679dd2f70bab53292c44c91eb397d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136632, "uuid": "31eb9cbb-fbe9-42b1-bdc8-e9e6f54763f6", "value": "T1A0534B03A8C180FDC48BD2B8579FA63AED73B8A9112D756D27D4FA236D8ED205F4D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136632, "uuid": "a55c41ea-dc6c-4f69-abb4-941aab562246", "value": "1536:Eg/bRiQ4uM+aEuvjTH0xUDc12INX/3ot9dDWwU:EgVipuMLbvvH0xP12INfo7dhU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769136632, "uuid": "5ff2e16c-b9bd-4f11-bd63-b0e59142b5ad", "value": 63808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136632, "uuid": "16110ee7-c728-45f7-9e7e-a1cba679ddd6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7407b2a4-f806-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769136704, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769136704, "uuid": "5fbd51fb-fa45-4055-b4ca-b0c701064830", "comment": "Malware payload", "value": "20e2fdc8bbea4431f9dd2f200abbea4a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769136704, "uuid": "5e60bfe4-2a12-4b3b-8032-66f8a4546754", "comment": "Malware payload", "value": "c399bb8579aad3fa89026bdd233a01872ef3363d7b09be346ad37a5e3c1d0415", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136704, "uuid": "d87b753d-900c-42b2-80e7-8caf6c9bb4b6", "value": "T16CE30A6F83F7313572138359F5A66738966DC133EB410EE2F9B2969C8FC11A201762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136704, "uuid": "954e773e-0158-4ea2-aad6-04e300739e39", "value": "768:tZdapEbrcXlGRNjcXscJGcz74k/tHcTwAvIdmppTsfifRf+VIrePfHKI0oFSnUhy:lapArIl4k2wMIdmpRUIrdF4BehYTI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769136704, "uuid": "315b9038-363b-4071-9b7c-b9f332518f0a", "value": 149223, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136704, "uuid": "eb5820ab-4eed-43f6-87ef-e3d80e8661e8", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1121bea8-f807-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769136968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769136968, "uuid": "0f31a042-c10e-4162-82da-4f71a7f42f38", "comment": "Malware payload (Mirai)", "value": "6e2d7839d17852ff2b29e49eb1eac2e2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769136968, "uuid": "2edbec45-0e42-4608-a67e-f0634aea79f8", "comment": "Malware payload (Mirai)", "value": "60ee54d823037df20b7cf3cac83011410b774a06a7a98d36c48031608c1328ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136968, "uuid": "6497a083-3387-423b-b7bd-06c46b0521cf", "value": "T11F435CCAEA43D5F5FE1A02781033AB765F72E53A0064DB42C7A4E931EC52A54E71B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136968, "uuid": "0209b1c9-b291-4286-a02d-859b450d0bbf", "value": "1536:IeujKYsEM+K+EUVEd3K7GUrE6N34J/fihAzRw:I9KYsEDK+Eu93JN3o/6R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769136968, "uuid": "10e840bc-c09f-496f-97a7-36b7ba440d55", "value": 55472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136968, "uuid": "323bf2df-f6a8-4c14-99cb-8ae67362fed7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b441282a-f807-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769137242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769137242, "uuid": "42f3ccd0-e1c6-4769-bd1c-b09e9e5e049c", "comment": "Malware payload", "value": "f95f5ec1b5f3b9f387484e78afff7cde", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769137242, "uuid": "609a7f48-303f-49aa-8531-db3f4558a6d2", "comment": "Malware payload", "value": "afe23c684ef644b9131004bb6be3c9e87b49b1bd72856c20d8afd6034c181f1c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769137242, "uuid": "d120c3fa-3243-4863-8264-aa0004cf04b4", "value": "T123E3F86F83F7313572138359F5A6772896ADC133EB410EE2F9B2969C8FC11A201762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769137242, "uuid": "20d36b8d-ff79-43b3-a7c4-29bbe1d60f7f", "value": "768:EZdapEbrTXlGRNjcXscJGcz74k/tHcTwAOPUmpplsfifRfiVIrePfHKIXoFSnUhU:EapArrl4k2wTPUmpDoIroA4YhhJg1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769137242, "uuid": "0909ef4f-4e6b-4f3b-a778-7457bfb48588", "value": 149337, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769137242, "uuid": "1d6ba5f7-4b33-44f5-b42c-93a805f94c8b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769137399, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769137399, "uuid": "7688995b-876a-4e09-9c26-7418f3103a4d", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769137399, "uuid": "ecd57c3a-8b66-40ce-a5e1-16198e455899", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769137399, "uuid": "c6fcb015-233e-4575-b22a-de8cbafa0e01", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769137399, "uuid": "8693a2b5-c568-4361-a0ac-e3feb60fe47c", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769137399, "uuid": "3b66bb41-6fcc-42f5-8b5f-ff67b56da05c", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4bb8a18-f80e-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769140249, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769140249, "uuid": "05b5ca1e-e2da-41b1-a323-41e1451cee9c", "comment": "Malware payload (Mirai)", "value": "94daad63838c5a87a2a54057c92361b4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769140249, "uuid": "0e0ee9c7-c047-4323-b992-33cb3dc6ce68", "comment": "Malware payload (Mirai)", "value": "0057626e8a5345ea434dc4f3afffb6a6e115ef1b1e684738143cf1125979eca9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769140249, "uuid": "842e318e-72f0-42d8-ba93-12a866989f5d", "value": "T144437CA3CC2A2D28E45589F5B038CF749B63E415958B2FB911BAC3795043E8DF14A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769140249, "uuid": "e71d91c7-8a73-402d-a00a-e6c87b436e22", "value": "1536:m/5un+BzIJwAvJQuMK3eDd79f7QaC+p2ULeCC:mRufT3Ax7QaSU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769140249, "uuid": "24f76f9a-518e-47f3-8914-ee50b469a8a9", "value": 58140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769140249, "uuid": "1dea854d-2de5-48d7-a6ee-bf8ed1e55573", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769142018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769142018, "uuid": "5323dc12-07a1-4b47-8926-14c7e8a67192", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769142018, "uuid": "c23c7226-67ae-45ed-bc2c-5179d97c5d62", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769142018, "uuid": "9642643f-507e-49e2-9381-6d18cf10deee", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769142018, "uuid": "99bcdb65-ae16-4e67-b782-efc69c3f183d", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769142018, "uuid": "c448b4bb-ca50-4ee7-8189-3b5f85babb18", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769142078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769142078, "uuid": "cdea1640-7461-4472-a7e7-c69dfb5530a2", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769142078, "uuid": "6650d3f8-f021-4ace-a6d3-b67ea49ae868", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769142078, "uuid": "ae6cbb29-e6ce-4af5-a806-19b4fc2bdecc", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769142078, "uuid": "d2a55e06-6b44-4382-b6ce-d41d90fa62b6", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769142078, "uuid": "6eb09cb7-e2b7-4390-9583-983886fdb2c4", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1769142856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769142856, "uuid": "551e0f2d-ea84-45a2-be9b-fdead0947e2d", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769142856, "uuid": "fb6ccff7-be9c-4169-a621-642da09f1ad0", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769142856, "uuid": "e0730911-4df9-4105-a19d-b0dbc2b00b9b", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769142856, "uuid": "7afdccdf-dff4-4bd7-afc7-41ee686ba793", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769142856, "uuid": "b16a2fba-8b1b-4d6a-90b2-9f320432615d", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47396b85-f386-11f0-9446-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1769151609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151609, "uuid": "a77b9315-62bf-41c7-a9b1-42a03f27aab2", "comment": "Malware payload (CoinMiner)", "value": "68b8f427224a0ef22e3d5e03363fbef8", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151609, "uuid": "107d0893-a8be-48d9-a063-b6028d141d18", "comment": "Malware payload (CoinMiner)", "value": "f1f57eb28380e340acececdea76a5efb3617d597225c13be9a954cb159907be0", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151609, "uuid": "72026ecf-be31-4e44-a5f0-26d0b23825c5", "value": "T18D5533D2B6D3C6CFC4F3FA39941846BC79353D2A5906030B9A6D43B77A1AD680B87D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151609, "uuid": "9500e454-37a4-4d49-b2bb-32a1c8766762", "value": "24576:dO7EQb5XgACLCKdjpfYnWN+ZPhTUu5UPsDGyMVYNVZpUPp:dOZnWkZP1dUuMVYHwPp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151609, "uuid": "10a96dae-14a5-42f4-b287-5ac3e2f6ac10", "value": 1308604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151609, "uuid": "316b3e67-6a1d-4c19-8d03-5dd1e6173bdc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49484ee4-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151665, "uuid": "6264f67a-3e78-4803-92e1-70278977012a", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "a428fa4107600e2b727875b50ecaee5b", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151665, "uuid": "00da5ba0-15ef-4e5e-9ed9-d19269ef8ef3", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "41fb6be80f588c9e7823f862baf7b43dff49206a1c45f8a03e3dbd5f15678e14", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151665, "uuid": "18a1827f-dd5a-4739-a67c-c55b0252db5d", "value": "T119E37F21F252D0B3C83718F13736B571B3DE8E2C19A96847EAD80F99BCA48136F549", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151665, "uuid": "6e32fdf8-98fa-4673-bf20-11d4798c3d47", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151665, "uuid": "99367472-849b-4c70-8e62-5a57451c1192", "value": "3072:V6glyuxE4GsUPnliByocWepM+CXIhlxYxBd5h:V6gDBGpvEByocWe7rhlWL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151665, "uuid": "b5a8556c-4a3e-4722-bf05-16955b0fca34", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151665, "uuid": "ff63f092-a357-4552-8e50-ef8d6343cb8f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "494eb154-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151665, "uuid": "16bc5012-92f2-41af-a9a7-4ead418cc3ef", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "32b9b42d4e20eb3551663159a926b5cc", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151665, "uuid": "08775bd6-98c5-4d8f-bd46-f881900e33c9", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "7744909ba1357e348376c7dcd1bc097d63d6d018e6da04287ebb763f073d60f1", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151665, "uuid": "d2dd60e0-26ba-47e9-b92f-8c9ab297d3a9", "value": "T1C9E36D21F212D073C87718F12736B572F3DE8E6C25A56907EAD80F99BCA48232F459", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151665, "uuid": "6bd2daf5-1303-445f-beda-6eca92672134", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151665, "uuid": "dbbdd37e-837d-4eb5-aad8-690e7159ec3c", "value": "3072:tR6glyuxE4GsUPnliByocWepwYPCAW1sxvRYUi:tR6gDBGpvEByocWeXPv1Fe9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151665, "uuid": "c133b5b3-3b02-4868-b39b-beb3b8a29528", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151665, "uuid": "9c1be22b-2996-442c-ab82-81eba073b521", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "497b1797-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151665, "uuid": "e610f686-44dc-4f96-b202-c06b77eb3adf", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "8a182b49d071fbffb3fc10ab1d2b54d6", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151665, "uuid": "17218a32-dc13-4f95-b0ef-1841658b6cba", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "da9b344bd9920b1d403a0d62f94881acf5d65b6fea495b04855aba40188e6e36", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151665, "uuid": "e4f6504f-1457-489d-a3e2-a4bb17b3d1f4", "value": "T113E36D21F212D073C83718F53736B572F39E8E2C19A56847EAD80F99BCA48236F459", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151665, "uuid": "69b43817-0d6e-491e-bb08-1e039a28c7bc", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151665, "uuid": "4ba8027a-381a-4dc2-b8ad-c30be228f288", "value": "3072:c6glyuxE4GsUPnliByocWep0ifhg1CroIzn6O:c6gDBGpvEByocWeDq1Cs4t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151665, "uuid": "db9aedf6-a970-4a49-b30e-c50f2700b201", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151665, "uuid": "6cd05397-4e86-4f3d-adef-23883c7be6bc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49e11220-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151666, "uuid": "4f357f52-7296-4532-9599-9ce509e8f970", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "7ec6af79dbb58df1ea790331bd7bf046", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151666, "uuid": "9d2c37de-150d-4719-8a4c-b1f600cbdae4", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "68863b0942c76880c9e9abb4c93ea235501974af3d04fa82228068878d0f4bae", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151666, "uuid": "260b23b8-e3a6-4bb0-9979-2947024c8ab6", "value": "T188E36D21F213D0B3C83718F13736B571B39E8D2C29A96847EAE80F597CA58232F459", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151666, "uuid": "a3b8b751-24c3-437f-9301-40da549e4baf", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151666, "uuid": "d1cd8ec9-5af6-42a2-9e9b-2c0e0f8d495c", "value": "3072:v6glyuxE4GsUPnliByocWepzOinDDkqKKJWo3NS3:v6gDBGpvEByocWeZDwqHwo3NS3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151666, "uuid": "6176b686-82a8-4bd3-92b8-54e99bf80179", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151666, "uuid": "cdf2f108-1d2c-42b3-91d2-821c4eac84d7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a615e6d-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151667, "uuid": "13c0035d-2b09-4671-8120-ddc14f7e753d", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "9622acf77029bd62e2797edde7df1e11", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151667, "uuid": "e088c6b8-44bf-4e00-a5a7-b70c2fadf9de", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "6c0127433f689c0861355352460f7dc6b6ae3d86aa7db0747e60b3b9a18c4a87", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151667, "uuid": "4437b0e5-293c-4426-b8ca-190a049621c4", "value": "T1CEE36C21F252D0B3C83718F13736B572F39E8E2C19A56857EAD80F59BCA48132F45A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151667, "uuid": "0ffefae7-61a6-482b-96ec-53e7483a7343", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151667, "uuid": "79b5fa4a-22a2-4c70-8d21-6da8aa6d214e", "value": "3072:V6glyuxE4GsUPnliByocWepcY8Ty5w+joZeYlK:V6gDBGpvEByocWeKYt5Cs6K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151667, "uuid": "7a04e387-e786-4770-93b6-b0ad12b84298", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151667, "uuid": "c668760f-f7ed-4c49-9d10-e0c0db5331a4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dc3ea53-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151726, "uuid": "12a0a622-d00f-49d5-818a-1fa935042864", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "062c17287630f6ebaf5fdfc4119a82ee", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151726, "uuid": "3d5dd1ab-4002-4536-bf77-1a31ebf104bf", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "a28e55a948927ae556de391674d88cde33a4ad9700f7e5e21a94d8d3755ebe70", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "9a0df1fb-f179-484b-a359-16ccb76dd358", "value": "T127E38E21F213D073C83718F12736B572F39E8E2C19996947EAD80F99BCA48136F455", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "bea214be-52ae-441d-8cf8-c17f73466981", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "f31037cb-6543-44d0-90a4-c156fdb7056a", "value": "3072:m6glyuxE4GsUPnliByocWep3TkRhtN5mv0ABLunq:m6gDBGpvEByocWeZARTm8Ad", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151726, "uuid": "6868158d-760f-4d90-9e05-a61cb6f22dfa", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "07852c78-5597-4db4-851c-fb39f7987809", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dc95aef-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151726, "uuid": "cfb6541d-c78c-44f6-93aa-28971fd8a97c", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "7f8c65347a23759a87f203205c8cbd4e", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151726, "uuid": "b2fce6ed-d1a4-4d77-9b5b-77db716fb4ac", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "48975e8570cc778b5b94e51237d1c67f923047d0c90e5f9a0eb8b8da04fe04bc", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "8c73fb59-59e2-42bf-9bfd-d006db3eda8f", "value": "T187E37D21F212D0B3C87718F13736B5B2F39E4D2C1AA96857EAD80F59BCA48232F455", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "07ac9c13-9ee1-4b43-8bc8-cd4f30df740e", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "db356c77-ce8d-48d4-a97d-6a28330a4822", "value": "3072:O6glyuxE4GsUPnliByocWepNx3AxMF2v5+IQr8n:O6gDBGpvEByocWebxwxfzhn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151726, "uuid": "b484152e-3cd7-4e69-b5ae-2963a0a101d0", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "4c69ba55-55cf-413a-a9e5-4d4f8b447e99", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dcd51dd-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151726, "uuid": "b98af024-cf63-4c3d-a775-5646e257d7f1", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "2cb123411f4c396bb4bf09e2a5ef06b5", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151726, "uuid": "78b3d3a6-99f4-4e59-97cc-91d36c1bc6ec", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "b67e5f6e9fb2273ac8ae5dd3b49c7695bc680686cf93a729bbdef2669f18d429", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "b70b2b5f-7302-4983-acbc-6f8c32acdcf5", "value": "T1FCE36D21F213D0B3C83718F1273675B2F3DE8D2C19A56957EA980F99BC658232F449", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "801b4694-c6d8-4516-a318-78c5a70b2532", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "8214137f-1499-4158-804c-92d595eee860", "value": "3072:66glyuxE4GsUPnliByocWepPYW4pIIWWNHxgBW4Z:66gDBGpvEByocWegpIIW0xg04", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151726, "uuid": "5fc23375-b01a-4168-89c6-8d8dbb468538", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "45561f4a-de32-4269-9b3f-f5eda39d8eb6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dcfb1ce-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151726, "uuid": "4ce6f7bd-177f-4203-baff-288e55f03907", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "b04bf7947543c8d78996323efedc719e", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151726, "uuid": "e2165745-d3f5-409a-b40e-bea4ac9a1184", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "857a902aeaa351e72676fb764543e2e8fc5c332b5881ea8dfe407ff257f913e7", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "199f835b-37fa-473f-afd6-be3a23fdbafe", "value": "T1BCE36D21F212D073C87718F53736B572F39E8E2C19A96817EAD80F59BCA58132F149", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "ce28b3d5-64e1-4e12-9844-f07a99dcd6db", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "50b0f9f1-5877-465b-97cb-b353f086187b", "value": "1536:XzICS4AwwRlcz5AxE4vGP1iU8KnliIs3iocZMgkGJp1kUM/9OmAnhU2MJYezjsVi:o6glyuxE4GsUPnliByocWepSVCezYiG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151726, "uuid": "2651d976-d8b3-4852-8e1a-96b101c14f15", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151726, "uuid": "c8241117-ba9a-49f5-8d07-c2438328388d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6debcdba-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151727, "uuid": "db478ace-7d56-4fe5-8328-12be11f57192", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "ce77b45ef810454154e7858200aeef4a", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151727, "uuid": "6e6b7585-4ee3-428b-897f-170176345f93", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "db176add8daa4f1b68ad74b7ed6a123003a7705badcd119086f4f5d9f4083469", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151727, "uuid": "531bd990-2cac-4db4-971b-87805566fb75", "value": "T173E37E21F222D0B3C83718F13736B572B39E4E6C25A56907EAD80F9DBCA48136F459", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151727, "uuid": "246077bd-80f3-4a78-bf37-a988bae71c0b", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151727, "uuid": "9e6cceab-7430-43e5-8772-7d2371e63d5e", "value": "3072:r6glyuxE4GsUPnliByocWepioX/mClBe:r6gDBGpvEByocWeQovmG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151727, "uuid": "93e8a9e3-7b93-4521-8c32-2aaf6ea68cf5", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151727, "uuid": "c56725db-d9cf-4a0b-8d3c-28e952730ef1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dec35e3-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151727, "uuid": "d556b000-85bd-42c6-9236-d46c5c785e40", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "6ea802aa073e20f331c6e1e5aef6cf7c", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151727, "uuid": "d4a923e6-0b8e-4902-816f-c144d3513718", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "7ba1caff23d3a218037c59ac9ec7228af4a8db03577292404b1cfea6bb79023c", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151727, "uuid": "25f40883-1651-48bd-9e69-91e6f73aa44f", "value": "T1B8E36D21F212D0B3C87718F1372675B2F3DE4E2C19A96947DAD80F99BCA48232F155", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151727, "uuid": "9474be1e-06cf-4a74-a9bb-431ba6f6245f", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151727, "uuid": "2a39b7cf-fadd-4356-a997-0c0e8a6e6879", "value": "3072:r6glyuxE4GsUPnliByocWep+lWzklDg1dIikbo:r6gDBGpvEByocWeAlAiZE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151727, "uuid": "f3190841-d2b0-4f5f-9661-5c57ccd3ab59", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151727, "uuid": "8ce59dd5-87b1-4185-8839-4cc7685ee1dd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e99cb50-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151728, "uuid": "01dcb27c-230c-4efe-be1a-52e48920a4a0", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "8fe0eed5aa48af2ffcf0cfd38221d66a", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151728, "uuid": "366135f7-515a-41ab-933f-64941616a878", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "3bb10edb151f0b54ea11de5b216a0f7e4c6b899bcae54da97b3ec87b5b862359", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "63624ca5-a09e-4924-b7f9-d0cccd853a66", "value": "T1B4E38E21F212D0B3C83718F13736B571F39E8E2C19A96947EAE80F99BCA58232F155", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "e7f1e5a9-6900-4029-a0ab-c9a868848096", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "07985a51-2a03-44b4-bd8a-1469fe5a5846", "value": "3072:K6glyuxE4GsUPnliByocWep7H8dxrXeykFFigg1Ek:K6gDBGpvEByocWeBH8dhXAr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151728, "uuid": "a39eca8f-2c18-43d8-9c13-7a4b833c5499", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "0016bd44-0fac-4e97-bea5-49193f2e5757", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ea12335-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151728, "uuid": "cb4f2f6e-0526-4d96-bda1-38e7b0d5e869", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "06bd4afc59e6c5b974aad55e997615d4", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151728, "uuid": "97b03d0f-cde1-4dee-8ab6-878a6aa1ee93", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "56dab61397e1cbea1d8dfe7cf728ca9d61c0040881780b5f45cfe68fcd47ed6d", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "087a8c49-db1a-4c11-bc3a-213c50e31062", "value": "T1ECE37E21F113D0B3C83718F13736B572B39E4E6C1AAA6947DAE80F59BC648231F45A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "dd72ab90-1ecd-4d02-a433-63a0c89bc7e8", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "004a8d4c-9317-4fca-8eed-73a8fdb53f2f", "value": "3072:N6glyuxE4GsUPnliByocWep+LdI1TEHGwU:N6gDBGpvEByocWeHR0Gd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151728, "uuid": "00a233ab-6b09-472e-9b60-22ab86a86521", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "19eafdd7-1cf0-4a9d-8d15-078073f5a046", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ea23758-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151728, "uuid": "c707cbd6-bea3-483c-b3fa-7f7bfae64356", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "d03f48b7f644799c79799e19979f9ce9", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151728, "uuid": "ec707dc9-0cc4-4c5e-875d-ec2a8cc267c3", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "55cc603248b4c0858d18c029c500c2663394102b6b63b06cb147eab2168448ae", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "e46f9104-abc0-4cd5-ac4f-fb53c4da40ca", "value": "T1EBE37E21F212D073C83718F13736B572F39E8D2C2AA96917EAD80F99BC658132F156", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "9288bf09-f0ff-4069-93c3-a89d5673e689", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "738d827d-a085-4051-a9bc-24ea1ccbe083", "value": "3072:+6glyuxE4GsUPnliByocWep5aT1EwGONbaU:+6gDBGpvEByocWeLyDDNbaU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151728, "uuid": "96139025-5273-44f0-856a-15c44b6d8875", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "80696faa-0837-448c-a1d0-4d05d2fc6575", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ec2cc6b-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151728, "uuid": "a0d7f19a-50e0-419f-9e20-3c6697b9abf1", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "70bb84b0ff878ca095fd03774ed3fc6c", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151728, "uuid": "a54a75c2-fb47-46f2-b6ee-bafe168f9531", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "6e549de24c05fcf0c5c66111e9ab8686bb9ec02677fcdc219d994cd6857f5891", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "cdf4fece-a7cd-4ecc-893e-c48db1e4adc3", "value": "T1B6E37E21F212D0B3C87718F13736B1B1F39E8E6C29956857EAD80F99BC648232F459", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "076fb9f4-e874-4df1-ac37-9da036afbfa6", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "c79e693c-b363-40c9-a0e3-f479674d93ca", "value": "3072:W6glyuxE4GsUPnliByocWepDK5kpg3gzL8Pj:W6gDBGpvEByocWelK5P3IYPj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151728, "uuid": "9c8ce8d8-e601-4a9c-9a1c-3ee8506e5b49", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151728, "uuid": "e339f0c0-7b6d-4092-abb1-6108f27cda06", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91a7a930-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151786, "uuid": "bf04f351-c8f1-4803-a079-d194dda5b4f6", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "cac48d0d15ce4a64833f4768070b1eb2", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151786, "uuid": "05d04a00-0984-4f60-bd7d-78f5a3c967c4", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "267df6cfd790b8c9dfd48f518f5cad435df3158344f7f5adb8b6ab1e0a6aa251", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151786, "uuid": "a67fc3df-eaa8-4047-a776-c289407b6bfe", "value": "T16EE37D21F212D0B3C83718F53736B572F39E4E2C19A96847EAD80F99BCA58136F059", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151786, "uuid": "c71a3ee0-5bb8-451d-aec7-3ef58d71318c", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151786, "uuid": "1a4e0d43-7822-404a-833b-463b86e176c7", "value": "3072:V6glyuxE4GsUPnliByocWep3tt8LJUQ1Ix7:V6gDBGpvEByocWeltjQyx7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151786, "uuid": "14fc345b-c23a-400f-b94f-16f42f68f7c2", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151786, "uuid": "c4b063c1-bed4-4886-b2cc-82852bfea7d8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91a7cb2d-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151786, "uuid": "eb1eaaff-2b39-416f-b181-14b28509497d", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "5d6de0cf1ebda924ffd04bf1c16db0ea", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151786, "uuid": "896bdaa3-ee7f-4d6e-8fa5-9f046b35b01c", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "8540b955e851488606b3508211167daf280af7b6fc11caea4aa7f4cccda8e307", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151786, "uuid": "7c93c88f-0e8e-4edf-99d7-6505382d76df", "value": "T1A4E36D21F612D073C87718F13726B572F3DE4D6C1AA96847EAE80F59BCA48236F049", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151786, "uuid": "d44886da-c3bb-4b71-ad4b-60a3ed3bd557", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151786, "uuid": "39b85b9d-4393-4c05-9345-b85415afab33", "value": "3072:J6glyuxE4GsUPnliByocWep7v+J1kOoFMxzc7:J6gDBGpvEByocWe5vnOu8u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151786, "uuid": "c94f1cc0-fa72-4792-8450-f6e22ebbd93a", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151786, "uuid": "a7a5a73d-7d03-4100-80d5-4a0025fd01ee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91abc5e0-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151786, "uuid": "6be6a2d5-f6c3-4d0e-b169-7ab5e85dad14", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "3aec3b9525dcbac3e7d6f83980c93d18", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151786, "uuid": "460d0efa-a603-4c12-9dec-672211fa8cad", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "023280288a154681b1652c24289acc49e44beb65e1f12948aee25dad981b3e0e", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151786, "uuid": "b7420252-4f0d-45b0-abec-cfa73ba9b28f", "value": "T164E37C21F212D0B3C83718F13736B572F39E4D2C19A96817E6D90F99BCA08236F45A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151786, "uuid": "92865c09-cfad-46f0-aa24-20b23c251310", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151786, "uuid": "c6a85d7a-37f9-4e0d-a388-950af06fe97a", "value": "3072:56glyuxE4GsUPnliByocWepjj2cqT5Cc:56gDBGpvEByocWe1j2VN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151786, "uuid": "5d818aaf-85e9-466f-85e2-f41025886057", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151786, "uuid": "fcf7b284-98be-4bbf-9925-aa3e82e3ae3f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91b0eecf-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "8c947a68-2504-48df-b270-3b3b42e3dd61", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "f877556c934509f401f17b4a8ec8d1c8", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "10d6c912-a3fb-44cc-937b-3c41d6cccd2d", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "0f14a05d458d8645c63e666c96ff0314fe2461daf81a19feae74ef748378f60e", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "d330b9f2-733f-41c7-845a-f1f036429ab1", "value": "T1BBE36D21F612D0B3C87718F127367572F39E8E2C29A56817EAD80F5DBC648232F45A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "9921eb8d-ac15-4992-9153-e573bb9e0bb2", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "ee9191cf-e36e-4c53-b212-faf3986f453f", "value": "3072:A6glyuxE4GsUPnliByocWep7p9b3YjzYAVvIIQU:A6gDBGpvEByocWeFpNuzw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151787, "uuid": "a96024cc-d30f-4c6c-97c3-23f08ba5a52c", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "c0bf6f62-b0bb-4289-8aad-389fdc7b30aa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91dc7693-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "b8877798-b955-4a08-b0fc-9921c7c51e7a", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "17ff96bfcc045cee6e713d35bbd63472", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "4838cc74-3352-47ff-bef4-c8a5f93151d2", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "46bb3df9a85c89c546cf5a01f5b8d7e9ae0d6bf4d92372c82d0764bb89dd5421", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "65365563-4f27-4d32-b9ac-18efc2260cff", "value": "T1C2E35D21B212D073C87718F13B36B572F39E8D6C29996817EAD80F9DBC648232F459", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "f7c86c2a-c189-4470-8321-a2981a780b1c", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "92e71377-5dd3-4cca-8576-54b509edba7a", "value": "3072:a6glyuxE4GsUPnliByocWepMcpy1M5Vyj+z0:a6gDBGpvEByocWeb95Vy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151787, "uuid": "1ac22c58-b78d-4136-bd13-380f645ac30f", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "03c02f07-41e5-4801-927a-e0b6f47f9371", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91e8d3e3-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "2c0b1a8a-856b-4b19-8e30-9d4b6fad8520", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "b99d3075c0aac8bce49eed74c655d2d1", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "c1816b1d-2784-4383-83b3-705767965b76", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "4be3266e0c7427823adb0b3b5136bb89d9f59bc1eff9e89456cb9517f585e52a", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "080745c4-6a0d-41cf-b200-4eb83dd3848c", "value": "T1C2E36C21F212D073C87718F13736B572F39E4E2C19996847EAA80F5DBCA58232F45A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "0d217afe-2618-44e8-9559-62c20d1b40be", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "8fd94b39-71f5-4ebe-adc0-40b1b1af710a", "value": "3072:B6glyuxE4GsUPnliByocWepDHaLdYH+Hf1zNy:B6gDBGpvEByocWe1aLdYH+/1B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151787, "uuid": "96b18b80-9f9c-4373-8c93-4109934957b6", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "0439314e-0c30-4a18-a5f1-267b731b0250", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91fea903-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "b99d6af1-c4ed-4dec-9cad-ccd59dae7b59", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "c064e11632486453137d7c5af9a4b159", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "f4c77dd9-fc21-46c3-b7b9-185b3986f587", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "1d218f810f262659fc2b6fa8a42b2fe217580666546ff802840a1350624766f0", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "8d7c71f7-1848-4f0b-944f-87515a45be42", "value": "T13FE37D21F212D1B3D83718F13736B172F39E8D6C29A96807EAD80F59BC648232F559", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "03fa93ee-2d21-430a-8093-e66e7c6df84b", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "8cf9496b-6d4b-4db9-b536-7e55593d4377", "value": "3072:F6glyuxE4GsUPnliByocWepO0pcZy5uKwLbP5W/+u:F6gDBGpvEByocWeg06EuREH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151787, "uuid": "1a1784c5-5ea6-48f8-a42a-b3de414908d3", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "6e1b7445-d012-4529-8a1a-55500984d871", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91ff3c6c-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "38cead98-7378-4c8c-adef-e411a2d18f4b", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "a6d2d9b4a56b14abab9eee08e63b0a14", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "f7f9675f-930a-4197-9c29-212b13baba21", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "5a3e61eab1551f1459ec1a0303f5b37b981161c21bf7d1818893415711e52cc1", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "d6b84c69-42b4-4700-afa4-0bc0480b15a4", "value": "T1D8E36D21F112D073C83718F12736B5B2F39E4E2C29A96847DAE80F5DBCA58236F159", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "b634d947-94de-4bbc-82e4-9e6e98dbd4c6", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "24256cbf-80a6-401b-8737-3a2469a3e5f6", "value": "3072:C6glyuxE4GsUPnliByocWeplHSu6Wpal:C6gDBGpvEByocWeLHS8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151787, "uuid": "d5e312cb-d58e-4949-b769-5737c9c95419", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "f6439923-60a1-4fc5-acf1-184433fa6522", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9217fb01-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "3f2f75af-4b7d-42aa-9059-ccdc9690e739", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "21f20a3b9d79750769bed240d415958e", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "96f5e624-6caa-4a1c-9b3b-8600731511cc", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "83313da4c33e6c413933e577f94e86c575b54a4a2480cba90c3407c99c27113f", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "649ab282-9cb7-4f75-b6eb-e22620c420cd", "value": "T134E36C21F212D0B3C83718F53B36B5B2F39E4E2C19AA6947DAD80F99BC658132F055", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "a15c1244-8753-4ed6-9cdf-a03ae7cab879", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "90dce53e-072d-419f-8ac9-cd6ba665fde4", "value": "3072:X6glyuxE4GsUPnliByocWeprlkos7yPR+:X6gDBGpvEByocWeleRy5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151787, "uuid": "9861cee4-2a5f-4388-bc86-b61b0c81eadd", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "3b3613b0-4e37-47a4-bd91-3c787e72d7d1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92193061-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "bdc6642d-eeef-47eb-b4ff-0193fef7451e", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "c4769bd7f6171a9eee43dac802590fdf", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "39108c20-3a65-4e3c-b13c-bfd8877085ad", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "c2e8cdd98f0d5c1882920816ff19adaaf0961462d117ca47ea0cd00545dd3ad9", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "f44342fe-369c-41a2-bd3f-f1647139c80a", "value": "T1E6E37E21F522D073C87718F13736B572F39E4E6C19996847EAE80F99BCA58232F049", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "25517426-7820-4ff8-b90f-ec07ad3638d4", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "55d8ab34-db53-40ae-898f-92bdab005146", "value": "3072:u6glyuxE4GsUPnliByocWep046zyyYanL3h4HwV:u6gDBGpvEByocWeOdWKn1owV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151787, "uuid": "3f487f1e-16b9-4710-ae1f-33fcba51283d", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "74b1e055-49ac-4ca6-90eb-dbb7394ebabb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9229ad24-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "a447fbff-3471-4c4a-aade-ef7d9391ba5c", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "6334a7b9a57a7c1471764384b0e2258d", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "ee72ffc4-163e-45f0-b404-82b6aef57f6f", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "2322908792f3bd634a139411d42474c93951599c5356195b6f1f7f09bd455023", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "810d63b9-fd87-449d-9acb-dfcb8d788885", "value": "T169E36C21F212D0B3C87718F137367572B3DE8D6C25996957EAE80F99BCA08232F059", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "b641f626-464e-4501-88de-3509747935a2", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "c2451ec7-f97f-4b29-9fd1-bab429dd420a", "value": "3072:S6glyuxE4GsUPnliByocWepGn8AyEK5lo:S6gDBGpvEByocWe0+EK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151787, "uuid": "0228492b-e3a2-4e7e-bc64-324594e19867", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "1d4f3e71-d1a6-4ba0-b06a-bbe25c508a57", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "922db65f-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "0768177d-64eb-4ae9-b229-176edf8e5fd8", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "85f0d5bfbad1d8aaf48b90a19bd8794a", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "b9b27f9c-362f-4246-ab16-093173b78fe2", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "99ac02e76e50e0a053e19611e97965105796f0da7fa1959e59d7b5327869e19d", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "91d5df81-059d-42eb-ad89-b7bdab6ea5e9", "value": "T114E37F21F212D0B3C83718F53736B571F39E4D6C29A96847EAE80F99BC648232F459", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "be741f2c-c4ab-4cfc-874b-217d672f40e9", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "98efdcdb-40c0-4bcf-90ed-b5fb9130ee3b", "value": "3072:16glyuxE4GsUPnliByocWepWRhc1aJS6t0:16gDBGpvEByocWewRhc1aJb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151787, "uuid": "64f7e519-7d8b-4a52-9df2-8fbf49f4dabe", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "bebd2014-9416-42ab-aed8-f7260225d15e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9234ad62-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "95ba02f6-31b0-40ef-b2cc-100098387ffb", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "5237c1cdd4457db4732d9afb328d13fd", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "202183b3-09b1-4252-b225-2b00f3b3a10d", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "e3a3d9e668fa8c144c48299206d7eff67a7dbbf3410ddc2aefc440b6e072bf6f", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "70c93db3-2426-431a-b114-fe5009b14431", "value": "T12DE37E11F612D073C87718F13B36B5B2B39E4E2C19956807EAE80F9DBCA58236F059", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "f563877e-506f-4839-97af-46751fd451fb", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "3cd823b7-79de-4573-867f-5db9e8cb65c5", "value": "3072:u6glyuxE4GsUPnliByocWepWVXwJbEAWLJqCk:u6gDBGpvEByocWeUWbEAWVA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151787, "uuid": "892f2ce5-1f8a-4b38-ae13-d258ed16b581", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151787, "uuid": "237f9e9b-5c3c-4bd0-8be1-072bd0835083", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5617bdc-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151846, "uuid": "4d5c6720-4f0a-435a-aa53-2853a4287d3e", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "a62594ec30885b40bf55127e1bbb398b", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151846, "uuid": "868a6e2f-7b39-434f-b703-4d18c0a12be7", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "80d42d9d8d97f4245bf6a279a8f83668385812337d39e0282068c8e344dc755d", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151846, "uuid": "77559d39-3f46-41ac-8585-fa446a48f21f", "value": "T1ACE36D21F252D0B3C87718F13736B5B2F39E8D6C19A96407EAD80F59BC648232F45A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151846, "uuid": "5ab9fa6e-b281-467f-8cf5-cedae9fd277e", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151846, "uuid": "c2aba825-b25c-47fd-b159-86c4e20b3533", "value": "3072:46glyuxE4GsUPnliByocWepl/A5si7BWtcEO1:46gDBGpvEByocWejERstcE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151846, "uuid": "4c69c607-05ff-4cba-940a-17c781b6ea39", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151846, "uuid": "ba9a7ca7-2fab-48a3-8bb8-3fa2f5881866", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b58a2ab9-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "e88a7aa2-11b3-4d75-99e5-c760738dad95", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "b13b11e5b192fb6e6bc13e93a160da36", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "97f975e3-a2fe-4cf0-99a9-91c52568fa74", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "1589fc5bd6b430feec62c625914d94f73e261e45655f98f8553fdda708d12800", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "b38d7bde-406d-4358-8a00-4f65c53988d2", "value": "T1B5E36C21F212D0B3C87718F12736B5B2F39E8D6C19A56807EAD80F9DBC648232F556", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "c88bf3c3-863d-42e7-91a8-6b0874045619", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "e1c398bd-2b24-4b35-a075-f748f3cd2342", "value": "3072:z6glyuxE4GsUPnliByocWepKjM8wmxlbg8WTGIThR:z6gDBGpvEByocWecjM8w4lbgzfdR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151847, "uuid": "cc8f0753-a6e6-491f-a856-1101da72defc", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "3999201b-b86b-4a3d-b4bb-ed7c99fda84e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b59d0d94-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "8e095397-4452-423b-b9fb-5719ada75e67", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "0bb5cec1d3281876715e59743ee972fb", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "1c459678-a6b8-4bda-b322-dd38a106a2ea", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "8fb06ea350e49fa9ef38c56e731adf6713a47c8de714fe55aee6519cfd6b4da3", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "22d2af95-2e72-48bb-b0cd-dd3bb1e5a847", "value": "T19BE36D21F652D073C87718F12736B572F39E4D2C1AA96807EAD80F59BCA58232F05A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "f6e615f7-fa7e-48ab-a9c8-b6442aca4af9", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "6e8e684c-2588-4b50-b956-593dc65244a0", "value": "3072:Q6glyuxE4GsUPnliByocWepZIoLVlbSkqITDig:Q6gDBGpvEByocWeUoLVZSFITDi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151847, "uuid": "c678132d-ee81-490c-aa78-8e0321e40f16", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "c4ec6a8f-daf7-41b0-a41c-b04813249b16", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b59d9f27-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "2350292a-5ff2-481b-8bc0-25affc06f434", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "3c6edd9bc75a5956209060e817384992", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "50c0ff53-0bb5-4463-96d4-9ba3b776c267", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "b6ffdb84f61503fa0b8cead54a5479af317d3adec7fd375f3df2337575981b6f", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "8c85f107-7dfb-4725-9ca3-84105268a2a2", "value": "T1BBE37E21F112D0B3C83718F13736B5B2F39E8E6C19996507EAD80F99BCA48232F559", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "e096e586-3136-4c31-80a4-435a5ad81f51", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "1622d965-8988-4e03-bb90-02ef4fd507be", "value": "3072:A6glyuxE4GsUPnliByocWepnGYt5w+CA:A6gDBGpvEByocWeVo+C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151847, "uuid": "b96d0519-dcf6-4774-b09b-fd4c52b42ffb", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "ca455080-0e90-4773-87bf-02095a3d1422", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b59db120-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "4b853e40-4d97-458c-9a1b-c65fc38cfe3d", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "f598f1930edc142874aba68b2850a90b", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "c601b1a5-cd99-4957-9ec2-453a6a6d9dff", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "71744a88ccca712ad9b74087ba046be05625b4ac83e1c65a1fd5259584aa109d", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "6cfd372a-193e-4817-a452-4bac48839240", "value": "T189E36D21F212D0B3C87718F13736B5B2F39E4D2C29A96847EAD80F59BC658136F05A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "f91b7004-18a0-4c08-9742-b1a2b850bdc1", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "a53730ba-40a8-48b7-9ce3-8e7a50cf6e41", "value": "3072:a6glyuxE4GsUPnliByocWepKyMDlkqk/Q:a6gDBGpvEByocWec3DFk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151847, "uuid": "20114d33-a4a9-4b64-8900-9df8eba83d5f", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "388a52d5-6947-477f-950e-435f9f1786da", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5a9592d-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "a33c47c0-30ee-480b-9138-d3d77d507a95", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "43cf14ea8a5a3d698eab8c86b7f74714", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "0501c33d-16b7-46d2-94d9-84ec0f7e9081", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "3ab171a4fe9b095f4bc79b88b6425a88e6962cbba0d763117a01918829fe59fb", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "de4dee39-fdef-449e-8f96-0dcbe08369bd", "value": "T128E36D21F212D0B3C87718F12736B5B2F3DE4D2C29A96847DAD80F59BCA58232F459", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "84f8da34-910a-40cd-a6d5-933f7a0fa312", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "a69db900-ae10-408a-9e91-27751a3a0058", "value": "1536:azICS4AwwRlcz5AxE4vGP1iU8KnliIs3iocZMgkGJp1j2Rxwn4DcpUx3QkV3fomn:p6glyuxE4GsUPnliByocWep3JpUxL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151847, "uuid": "829f99aa-83a2-47b1-80bf-e43a215f04cd", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "57d24764-49dc-4bab-9bbe-abbba513c17b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5b0e4c2-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "b741c013-dec0-4585-94c9-bd42162db89b", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "a583aa6ce01a80ec3edbbeeac6ed089f", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "b945909f-48e2-4bd3-9b2f-4d194ec3bfe1", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "2212b78bedb274dd6be7bbebdeeffe9406197cb065fedb370b302b720573fb25", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "b60e9908-7e75-4b78-a931-5d3662195648", "value": "T186E38E21F212D0B3C87718F12736B572F39E4E6C1AA9A807E6D80F9DBC658232F159", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "e2fad1fc-97fd-4d88-903a-c5e3dd7cfea2", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "5aa66322-e3c0-475c-b7da-d96fd5d10d5c", "value": "3072:Z6glyuxE4GsUPnliByocWepAA/oWBrbnG1i+D:Z6gDBGpvEByocWeeAQWBr0i+D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151847, "uuid": "1d469e25-63a2-4dce-9ba4-f06a2de463c9", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "d1a7cd71-870d-456c-9f08-825ea9f7131d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5b455f2-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "2ca2adc8-7c4f-467e-b055-506e374abf08", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "b859ad88dde748d124bae583d4396096", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "969ecb29-07bb-4140-9b3a-fc239c0a90b7", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "0ff637682614ed66cdc76643efc709b6af08351dd701f92604a406ccbb3bf045", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "e3e85aaa-4c51-4c4c-8204-308e6e8160b1", "value": "T188E36D21F212E073C83718F12736B572F39E4E6C19A96847DAD80F5DBCA58232F45A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "00478395-9bfd-4824-b98b-aead556ec73f", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "ec5600be-309f-46e4-bad3-fe20c3df211e", "value": "3072:M6glyuxE4GsUPnliByocWepYFIklvGoNT:M6gDBGpvEByocWe4Ito", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151847, "uuid": "2c33c2b2-b97a-4074-ad7e-bd5dc301b32f", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "5af516f8-44a3-4fae-8718-ce16a92ae9eb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b602271d-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "fad3cac7-5c93-4db2-b64a-d35c433bc7cc", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "0d73a686487815372e266860544795d5", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "73b67c52-36b8-4dc1-bf16-ede6a40b6957", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "68666eec45ae5f29e414dbcca1a99d2a767c45f934c7490d3464f0ce7e8cd833", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "6bb68c3e-2847-4040-9f1e-b408476826d8", "value": "T1EAE37D21F122D0B3C83718F1373675B2F39E8D2C25A96857EAD80F99BCA48232F455", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "02df8474-400a-43d4-88a8-aa6703655559", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "8de0aa17-dc1e-49a2-ae06-c504e99992ed", "value": "3072:46glyuxE4GsUPnliByocWepEsE3Z1H14Jj5mB37:46gDBGpvEByocWeDE3Boj5O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151847, "uuid": "94f19ada-ab36-4a55-b1c0-21703ce3ac90", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151847, "uuid": "116b5a76-036f-45c4-95dc-f69337bdb585", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b60db2a0-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151848, "uuid": "beee7349-882d-4340-a69b-88659ff0e49a", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "bab09c4b2158d3da02004d8c0450daad", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151848, "uuid": "3e05ea9a-cb12-4c94-b03b-4a6b80e57429", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "67acb73457262a41508e41e7777113937594ce158e6a8e73eef2c5a2b16ce384", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151848, "uuid": "39c1eca3-4b17-42e3-a4f6-7c9a53408bcf", "value": "T14BE36D21F212D0B3C83718F13736B5B2F39E8E2C19A56857DAD80F99BC658232F549", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151848, "uuid": "0632491c-5677-4806-8de0-9f0546c62856", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151848, "uuid": "20ba3830-ae13-4f2b-8522-e2cb5d6f025f", "value": "1536:HzICS4AwwRlcz5AxE4vGP1iU8KnliIs3iocZMgkGJp1cLyuVzSDAdmWQUNnEXJha:46glyuxE4GsUPnliByocWepFAdu2nkJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151848, "uuid": "fa0077da-a4bf-4c93-b8bf-0e2dee68ae13", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151848, "uuid": "0be5c701-ab99-4881-9232-0cd2903e7076", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9e0125b-f829-11f0-9446-82aee05be84a", "comment": "Malware payload (Ransomware.BlackMatter)", "timestamp": 1769151908, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151908, "uuid": "2cb5bb40-8b76-4d7e-8287-503c6fcc8165", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "b08e0a38c3327816a1e605e4473c8ad8", "object_relation": "md5", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151908, "uuid": "14c7082f-58da-48ce-876e-7c7be47de96b", "comment": "Malware payload (Ransomware.BlackMatter)", "value": "6d9f17932c1736527b80db9f3bb6ccc693ef22695a349fbc1d96e845ae5930c6", "object_relation": "sha256", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151908, "uuid": "c2584c1f-125d-49f0-be48-9cf9adb507b2", "value": "T148E36D21F122D0B3C87718F53B36B5B2F39E4D2C19A96447DAD80F59BCA58232F44A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151908, "uuid": "0d2223fc-dd3c-4ea8-bf5e-94fd99e97254", "value": "41fb8cb2943df6de998b35a9d28668e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151908, "uuid": "22f0aea7-b7c1-4e0f-ba8e-f041a914feb2", "value": "3072:66glyuxE4GsUPnliByocWepNuIdx+GXmDXqDAo:66gDBGpvEByocWebuEzmDX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769151908, "uuid": "c7821791-d4bc-49de-a7ef-0f891f02d307", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151908, "uuid": "cf577f0f-74cb-4e4f-808c-12bd42052474", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b725c5c-f405-11f0-9446-82aee05be84a", "comment": "Malware payload (MyloBot)", "timestamp": 1769153043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153043, "uuid": "20212a57-191c-4aff-b030-652cc022d179", "comment": "Malware payload (MyloBot)", "value": "4ec0a155f64883e74127c660e87eb915", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MyloBot", "colour": "#0460ec", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153043, "uuid": "73bb7245-d101-4be5-85ca-527ce39995b4", "comment": "Malware payload (MyloBot)", "value": "c9970ea5cbfb7712430399ef0484e3ac36b628c90f7ca270a3a2d4e9887f4fdc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MyloBot", "colour": "#0460ec", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153043, "uuid": "4fd8e033-d9ad-4bfe-9ec1-89702238df38", "value": "T141B302493BD01726D06A92FCF5EF11ED776E6620EB723F1E9C12CB08161DAA740258", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153043, "uuid": "1384308b-9c55-4d8a-b9df-81b6838fb5ee", "value": "54f24774187bd048261f1d14185dd25d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153043, "uuid": "59ca3c06-58d5-4c8e-915d-095cd7e4566c", "value": "3072:lvoK6yLpu9vn8Em6fjaK8AiI14SQKXE9X2ZhVAXI1pe:lvB6OpR6fjSvTKIX2hVA41c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769153043, "uuid": "8c4f682d-bbea-4ccf-82ca-03c6cf302d4a", "value": 109649, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153043, "uuid": "915464a6-f86d-4c61-b2ea-afe1bf26d6f3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa536b31-f82d-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769153546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153546, "uuid": "b673ce97-b5b0-41c7-a00b-c813b2326a83", "comment": "Malware payload", "value": "c2614adf12349681d7746f3abdd013c0", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153546, "uuid": "7d90ceda-e1d3-4248-9193-cf668fd5fca8", "comment": "Malware payload", "value": "1323bb548e5b6d0f664e66cd222dcdddc811c1f3676139b31a69364a1c044a78", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153546, "uuid": "6b3b24cd-e70d-4fba-a35f-6364a7d83dfa", "value": "T1F686333065C0CBFEF66A2D3B40B7C3A65EB9203017B6E5E7BDEC0B492E143E295155", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153546, "uuid": "1b1dba50-756b-4f69-ae62-ab16a84e2ad7", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153546, "uuid": "a5a18fbb-e9e3-4d98-86fb-41f2729469cc", "value": "196608:B/VjYUhtrbR6VxeEJNE/pXunH+/G0Ylsz1dxigV2QxUSswpTqnUtib4:X0itrN/NGH++LlsLogV2QmBwoUAU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769153546, "uuid": "b17c8baa-4f15-4400-8306-6b134b8084d6", "value": 8526848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153546, "uuid": "5191a1c5-61e6-4fc2-a275-9f1ad513f2f0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8c79bb2-f82d-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769153651, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153651, "uuid": "18c6e973-5054-40c4-9441-bc168a27f536", "comment": "Malware payload (Mirai)", "value": "e424f4f1c1563f4c1a0f3a74b4ec3b91", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153651, "uuid": "43ad509a-8fc7-4ee6-8c74-b23d9eb4fca5", "comment": "Malware payload (Mirai)", "value": "53fd4663cdcf57cef80ea33494f3b982a6fbdfca0306600696a1c7efdac2f9ae", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153651, "uuid": "934e0e51-a794-447d-97eb-7d8e8eadf640", "value": "T19FE0ED8E64126782C6ABEE3BE063DC10F00BDBC105401F00F0C4AA37BCD8A893011A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153651, "uuid": "599647ae-fe6b-4701-bd2d-8fb82560602f", "value": "6:SJDO2ebAhTu/DO2QSA1qDO2Saa6A3UDOTAASPnD1DOa6AAhDOo1A+eX4y:gD+QUDUSYqDO61DkQ/D1D8TDJ1YXT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769153651, "uuid": "d8e7109c-3a07-41b4-937d-ba40d2a5bf61", "value": 398, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153651, "uuid": "693cf78d-f23f-4741-b09b-16d3a1424a0b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71ef69a1-f82e-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769153881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153881, "uuid": "cbeb678f-8397-4843-8a5e-91fdcb49fba0", "comment": "Malware payload", "value": "320c570cfb8e9fdc4772123f59ba4fe5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153881, "uuid": "88132bf8-ce3e-4e70-a681-e4fcca30833a", "comment": "Malware payload", "value": "eb4598d0449b6b5448eb51d5492d0194bc2572a526d424f8aa344fac8cb62e88", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153881, "uuid": "06a648b1-842e-42be-aeca-3f89d7382ab4", "value": "T1967339D7F400DDBEF80DE73B44274416B230E7A20B921B36235B786BAD751A5193BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153881, "uuid": "c3877a56-f816-4337-84e4-8d046479f62e", "value": "1536:Fyj8j/8Pc0m6qKDjq6ZEwAq8zzyaGX7lhOl39WeLG/fZ1QlPmY:s8DscoNq6ZEwA7yaGXWl3oeCg+Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769153881, "uuid": "32dc5d66-e05a-44e0-b5a7-b7c7d4055445", "value": 76028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153881, "uuid": "ca073557-3f62-4360-bdcb-47c7a9b0a00e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c113cde-f82f-11f0-9446-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1769154139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154139, "uuid": "a2cb30b0-9ab2-44ee-9f59-5e741224c56f", "comment": "Malware payload (GCleaner)", "value": "a2623def7c008169ebe11b664b5b0a9f", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154139, "uuid": "450b0ce4-362c-4f43-86a7-a35d1596cbe5", "comment": "Malware payload (GCleaner)", "value": "60f00b8b9e7a3153155fd5d368805dbc180b6d31021cf10ff2057f9ac8e6ccee", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154139, "uuid": "3a211822-a23c-4770-a1d0-8b1229ac3890", "value": "T11136E04FA1D61953F6326AFAD92695396F37FB210B1B0F3618CC5EF969ED30428463", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154139, "uuid": "41419a89-a8a0-4a43-a5ff-7660fc9853c1", "value": "dc88b81cedd2f2e7adc0511882c6745a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154139, "uuid": "298d5f00-9031-46d1-8272-8e2884bf5110", "value": "49152:ZgT9Iu1gq72utf9U+Xae1MwuHw5btp7d181/w+J16lqZP16MunvjmySN1bNML0oB:ZgT9hxdPaeGw3j182A164911WXLIm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769154139, "uuid": "413f8553-fb4e-462d-b9c8-0582e769bd26", "value": 5346304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154139, "uuid": "3edef612-4e48-43e7-948d-9aebbe3016dd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "074639e4-f830-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769154561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154561, "uuid": "6cfcf66a-be80-45b8-8ffd-d30764d9ce9e", "comment": "Malware payload (Mirai)", "value": "19f603654dd3802ea355684955304239", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154561, "uuid": "550c425c-365f-46e4-9bba-2be984e7eadd", "comment": "Malware payload (Mirai)", "value": "000e8049d4d0ffa293f37491561ea085d562e20430250b5637122fd5c106e2c3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154561, "uuid": "f4a794ec-a227-428d-839a-456af4e24cac", "value": "T1DAD3F845FC405F23C6C612B7FB5E428D3B2A17E8D3EE720399256F61378A95B0D36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154561, "uuid": "852653a8-6579-4ca5-9406-702ae72d3ede", "value": "3072:gHZ+X/AoxxFOV48wlP5nARTaPu08BiO49LS4ib7:gHZYACAV48MP5nuk9G4iv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769154561, "uuid": "85ce8488-a12a-46b1-9673-d47bcb7ceae8", "value": 133888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154561, "uuid": "a2d7e85e-5bf3-4a07-8a50-f1d4743f2cca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e748559-f830-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769154573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154573, "uuid": "2907ff4c-8677-4220-a811-7098aca69dc8", "comment": "Malware payload (Mirai)", "value": "7fcfaa14a8e3c42366548a2ec15b1cab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154573, "uuid": "0ee37b8f-1d47-4f6a-b890-4afca0fe69a5", "comment": "Malware payload (Mirai)", "value": "0f50ef34334a2dd1f69765a340a93fc293fea57865f9bfa3ceef429aaa8f9b71", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154573, "uuid": "90ee81c9-9162-45b3-bd42-25a039231708", "value": "T1CED32A06B30C0A47D2632EF03A3F67D093EFAAC121E4F640355FAA899175E365586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154573, "uuid": "7939082e-603c-48de-ba10-30b73536e5a4", "value": "1536:WUHQLSWPOHYOlI+QcAizmJxpHvTHNIUMpQfg+CbPMPHvANIKUjjWfM/qiMkkxN/2:9WPOx9VzexZ7HZng1PMANZxNbhI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769154573, "uuid": "e2bb3d84-c918-4737-b9ff-57ded283cc9f", "value": 132376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154573, "uuid": "352af74f-1912-49d0-b111-7e8ce33d557b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e7d13c9-f830-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769154573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154573, "uuid": "0cc7b79d-cd93-4df9-b53e-2082b4ffa5d6", "comment": "Malware payload (Mirai)", "value": "37fd22a315246b9d78354e7e5d7db97f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154573, "uuid": "41d2bbb3-45d2-41e7-b2bf-1d9a5183399f", "comment": "Malware payload (Mirai)", "value": "c5dd0aa5237192f9f7ca53d0742e2668f7794e8a1e20df5dfae8ee86638a069d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154573, "uuid": "26db2fd1-b026-424b-92c4-2994602d018b", "value": "T10B936CC5F683D4F5EC9705B1113BAB375B33F0B52029EA43C769A932ECA1510EA16B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154573, "uuid": "a1e061e1-f449-48be-99d1-a84671892e96", "value": "1536:xpG2cWAcCghsZcWU3S8HsStOU1gQI68jne8Fs8ZyYDdw8SAwHEoSrtAjm0xZ:xpG3WrCEjWUigLl98FgY+8SFk1Im0x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769154573, "uuid": "af46d563-486b-445f-aff6-b20da21c9dbd", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154573, "uuid": "1b65eba9-a03d-4f7d-85a5-be3c8cb0340d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ad20631-f830-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769154701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154701, "uuid": "6e1768bd-d298-4690-a3be-918e0d650a00", "comment": "Malware payload", "value": "fa594f28309e304f2e991dc643b2efb9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154701, "uuid": "9a0f5544-52b0-4c32-a88d-944880b2efd8", "comment": "Malware payload", "value": "0045c0b93dbdc0d6c8885ec0cf29e750f2a64bf2fcd6a7c07065dce3b4c20363", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154701, "uuid": "fc31525b-5d00-4c35-bea1-559d31aa36e3", "value": "T15393B509EF600FBBE86FDD3706A81B5235DD551722A83F363978D828B64A50B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154701, "uuid": "994b0383-7e5f-4524-b38a-011dffdc0952", "value": "1536:/5aGkClHyfDW1Nx920HWTQXQFEbzPbK4Zr1FPaGMADO4dJ:cD0uWLv8+b64TtDO4d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769154701, "uuid": "992fa63a-9266-4e9d-965f-5b1a7c76515c", "value": 89528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154701, "uuid": "6baa9ed6-47b0-4628-bdda-534a4f55bf8e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99feb270-f831-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769155236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155236, "uuid": "6cd738d1-c40c-4b58-9f54-bf9488a5029d", "comment": "Malware payload (Mirai)", "value": "355798272407e5ce39f309cad96b996d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155236, "uuid": "f3b06a85-c3e1-4309-827a-2e5335fe72cc", "comment": "Malware payload (Mirai)", "value": "a7b90ff4efcfd8c971f1cfc07528b2c84e3d1021796cb9239d4a593634cd672b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155236, "uuid": "b3c8478d-e63f-4ae6-b8a7-51efbbd278c2", "value": "T1E9633C32BA764D2BC4C4657661F38735F2F6878724AC891E3EA10E8CAF6565032877", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155236, "uuid": "96694c86-c11f-4bb0-b00e-110289063081", "value": "1536:7eq3WoMTMdhGw3M94y2tmxGYW55GmBD7txB5x:N3XMTccVGI4YwGmBn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769155236, "uuid": "0be7e68c-d16d-4dd6-aa5c-51b6bc0c16e6", "value": 70056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155236, "uuid": "64997586-3127-4e43-9d80-bff72aff3705", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac77062e-f831-11f0-9446-82aee05be84a", "comment": "Malware payload (MaskGramStealer)", "timestamp": 1769155267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155267, "uuid": "a8cab1b0-03ba-4aac-a42f-fe3779a9b80c", "comment": "Malware payload (MaskGramStealer)", "value": "a6cce30ce59440df45233b9e2375ca9b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155267, "uuid": "9d418ffe-0ac9-43d8-82b2-23a747658130", "comment": "Malware payload (MaskGramStealer)", "value": "48363812cd10833ff71c8d735e4f7edc6187a6bb66ad7878e32ae9d28a07d37f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155267, "uuid": "51d3385a-a0ec-4bb1-9eb0-9b3d88ccf17a", "value": "T181963C92BE444735D6DBB23AD56162852230F184033115D7BBA917AA8C6FBC8173FB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155267, "uuid": "0244f2e3-3018-41df-8f87-121ed7bf3b1a", "value": "9cbefe68f395e67356e2a5d8d1b285c0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155267, "uuid": "36f6b7d5-53a1-41be-9ffd-4143fbe1356f", "value": "49152:hqpSkwOrb/TvvO90d7HjmAFd4A64nsfJdJ45t/a0WGz1Mqf6jZPd6ALMEcTdUDgB:Ee/qglbctEjBmZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769155267, "uuid": "4ac556fd-40d1-4e3d-bd82-7e79ab573bd7", "value": 8804480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155267, "uuid": "d7cb5515-eaa8-4fb5-89a5-a46abfada9a2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acee1fe8-f831-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769155268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155268, "uuid": "b05cd68b-bd89-4d30-935c-88acdc75dd48", "comment": "Malware payload", "value": "18ce32655e47ba9f56ade1d17886dea2", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155268, "uuid": "cd9ab83c-6720-402a-b479-4f24c8851324", "comment": "Malware payload", "value": "2d9c546f0580fb1e4c119aaba6c1c8876033a8e17dbe4cf3afd2c57ec7b2803f", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155268, "uuid": "2e739b4a-f869-460d-95fc-d2b3dd0ac177", "value": "T193B412397C4837EC57BF8E81956C2B0D4EA617537A82A9C1A0F273D702631299F3AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155268, "uuid": "0e836de9-65d4-4f40-98de-5eb796b6f114", "value": "12288:T2vYEgDrWv6KTV0lVMuJeAtAi5JOwJ+wIpFz0OUpMQ9xeMaoi9i7u5F:TDE+i6DeAb50wUHDLHyv8s7uf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769155268, "uuid": "1aef1a48-26ce-4ae8-9438-7a17a0ed6f60", "value": 534732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155268, "uuid": "4919cafa-1911-4a57-8f90-dee025d3ad23", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ada35177-f831-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769155269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155269, "uuid": "81f7d0fd-b96e-4930-9375-0c6c20fa231b", "comment": "Malware payload", "value": "c354d0e94d85d653dd8b7327b3627396", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155269, "uuid": "bcf5b960-9127-41c0-95a5-a3cd321e10b2", "comment": "Malware payload", "value": "04b152e8f06befda5deaa1adc110c1592509d7dbcd57b9d9b765359ee83b3cd2", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155269, "uuid": "5e87e6e6-ada7-4187-a3fd-b4749e2b4a21", "value": "T19E9412717A4076E857FB0ED191ECAF58CE361B572E0685C0B5F033E602272246BBAD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155269, "uuid": "ef375c52-39d0-400f-b727-79e36b402e25", "value": "12288:0dLeKiGjUqssYmrP+tkzTkbAMR9/v1sUbNBmsf2edN8:0dLwiU4YmRkJTvvBy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769155269, "uuid": "5da1ae4f-8cb3-4deb-82cb-2a068223b13d", "value": 409296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155269, "uuid": "1f157117-be99-4c23-9733-84f26e1b232c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8cc2df0-f831-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769155315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155315, "uuid": "50cf8ecd-1082-49bf-a05c-5d10fc4bf6ad", "comment": "Malware payload", "value": "cea2ed5af1e3342830b965e64233a53e", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155315, "uuid": "12f6ad4c-50db-4845-a20f-b998f537f6b2", "comment": "Malware payload", "value": "722da6d38241a14a79207dbc9c96c65809a16e76c711af808951b5c8bbc5b8e0", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155315, "uuid": "7074445d-7123-4e29-8863-d24469ec8541", "value": "T1F9B52351249C0170CC64C6F0A8CF73BEF94FAE468D444E192B4DBAAC4DE73B5AD386", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155315, "uuid": "7c3d64c9-e749-46f3-9562-73269777a188", "value": "815e1ba56e855b07daa7197697b159cd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155315, "uuid": "05b87889-780b-4c93-b607-34e2cb686351", "value": "49152:FN9C2K+drQD0s69ahuMuVq8bBMfjz5nNrPuBEUgqo27Vb8:Fjj9KYc8tAfHQRgC8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769155315, "uuid": "a67d4168-57a9-4939-8cc6-b0e7c77de4c2", "value": 2337560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155315, "uuid": "16058b82-4d32-40b7-b83b-0a4698c2a9bc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b89c9bc6-f833-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769156147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769156147, "uuid": "9f87fa0d-118e-4676-8197-263c99c5e014", "comment": "Malware payload (Mirai)", "value": "fcbe78270e72e9b3fb03dd59bd94eb4a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769156147, "uuid": "7aeffd3f-a2a7-4751-bb54-9e9b0a580d8d", "comment": "Malware payload (Mirai)", "value": "62959d7bf658f6d679c35062dd2421d830c94a4fc1b2336f9241a70832a42b49", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769156147, "uuid": "c2978476-96fa-4dab-9d4b-215fe3295860", "value": "T1F701B5CF19111EB08564EF2CBA7344296009C1D1F6630BD86D47083B8DE5B0F75B6F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769156147, "uuid": "5ebb95b5-39fd-4aff-9923-aaf4e3ec0d1d", "value": "12:xVHI+jQVHj+jQVHjIWT2T+jQVHyeF+jQVH6tz+jQVHnSF+jQVH4VND+jQVHT+jQR:ZBKIM2Sq43ty+JzV4ZjM/Ln", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769156147, "uuid": "272ea700-654a-4a02-95ac-a18278b3ceae", "value": 762, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769156147, "uuid": "5d725ce8-8696-4d04-9231-19df64d8d493", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "813139b5-f837-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769157772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769157772, "uuid": "15fb7917-99b2-444e-ae2d-251913ec50f3", "comment": "Malware payload", "value": "6f42837c2ba55ab1ff5761a60664df76", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769157772, "uuid": "0cd15543-430a-483e-b18d-d6921472b5fb", "comment": "Malware payload", "value": "6e0d1b5b22017b737f4017d0432fbe7267cde8bd14ecdb937b465abce32b46f5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769157772, "uuid": "19d8757f-9d99-4562-8132-e2e99555c8a1", "value": "T15224CE19E5D817F92A5BB0C44CBA4A813E3A1BEB72B6553356B09F3A64ECF540C031", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769157772, "uuid": "76754c05-d91e-4470-8e74-c35465ad3dd8", "value": "6144:eSmn7+IbSw1WvEmRWPb9ggc9uTW3wFzUKcJum+pBvKDd:eSmqImw8MmRQxgj9uPtUdgm4KDd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769157772, "uuid": "38cef494-9c1e-407f-b351-5862e54159fc", "value": 223295, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769157772, "uuid": "59546d7e-e7fd-4ad2-94be-b4bfbd710cc2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "366ae56f-f83a-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769158935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769158935, "uuid": "b9fde8a7-7ebe-4cba-9c77-5239f23dbd88", "comment": "Malware payload (Mirai)", "value": "6e25e75855cf5ca4881ac9cab57b02a6", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769158935, "uuid": "56d1cd39-b87e-43d9-bf52-13b57ab1dfa5", "comment": "Malware payload (Mirai)", "value": "e3da1c38d2b9d43dab7ce233fed3138df44c4ed514c5868df3feeccffc41be27", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769158935, "uuid": "c149ec84-ff7f-472a-908b-f69df56f592d", "value": "T1FC634C52BD429606C6C412B7FB4E428D372743B8E2EA32039D299F2177CBD9B0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769158935, "uuid": "21a7f5e1-1b34-4037-a0fa-df40be85a1a6", "value": "1536:ZOidm8VrlEyt8ndE+aaXmNqVP7VRleO8RATWEznL:ZjdrJiP2NqVPPzdn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769158935, "uuid": "919f0ec9-0e5b-4791-b516-6fd4dab595c1", "value": 66716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769158935, "uuid": "c9eea003-aeb1-44d5-b8e5-b9ea61fd8202", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b57d902-f83a-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769158997, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769158997, "uuid": "d20f5895-40b6-40b0-9fe2-d361811264a0", "comment": "Malware payload (Mirai)", "value": "703d7463beb63feebd4facf2e0f15add", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769158997, "uuid": "ac3015b3-7c44-487a-aa63-e8632a5eba41", "comment": "Malware payload (Mirai)", "value": "022025342910595ee6b7a025b209ff5a2b1840cbac7e5345a6e5ac4ed5c37f92", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769158997, "uuid": "019bc987-9899-4c60-886a-48c4b2bda432", "value": "T197631917B8829B11D5C512BAFE0E514E33135B7CE3DE72129D24AB2077CB9AB0E7B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769158997, "uuid": "6d441cb4-7536-4be5-951f-71ea4e5c3d7d", "value": "1536:3snNPNmDqBgcEvnc3B8CK6xa0Bb0ps+PVC+it0eAjRkK5YYwxo:eNmEgPvc3lK6xa0qCt0dtkKiza", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769158997, "uuid": "757121a7-de31-46e9-b3d4-983cb4f80a79", "value": 72872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769158997, "uuid": "11416de9-9ddb-470a-a1d7-3fab2afe1e96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e421ac66-f840-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769161803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769161803, "uuid": "a351a7d2-2b59-41d1-9650-27da636a894a", "comment": "Malware payload", "value": "d98c5ffdc749b3b64f8ab9231438370b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769161803, "uuid": "f46893e3-6f3b-4afb-9a83-bf887d9ba287", "comment": "Malware payload", "value": "63c80f5826194dace1255bb210c2d9bcc460b7abcb4d8eba09c045d5c8c63efa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769161803, "uuid": "929f4a2a-8a1a-496b-a12d-630b378a9a38", "value": "T18163290ABD41AF00D89125BAFE0F538933535BACE3EE7102DE142B2527DEA1B0F7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769161803, "uuid": "41d7cb8b-c22a-4571-84d1-7c274bb24990", "value": "1536:LKnoM7K3CL5PWa1ZulsabR62liy9diYT+MVW9GsPg+oCd+:qK05PT1ZulsaFTT+sm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769161803, "uuid": "fa2aa778-d8c8-430c-9c9a-a5d789136da6", "value": 68092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769161803, "uuid": "0e4dd4bf-9311-4921-ba5a-45f11a4913fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "498357f1-f849-11f0-9446-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1769165409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165409, "uuid": "a98a8b8a-0dd7-42e5-8e41-53367b58fd59", "comment": "Malware payload (ConnectWise)", "value": "773dd9f4f05ab4f9b62e3a55a854dbd5", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165409, "uuid": "2ac0a02a-c342-4abb-b526-cf34c8803e06", "comment": "Malware payload (ConnectWise)", "value": "437bfe4d12009bfb420e72b361911e34aef7e207d0ea5978334e040d8845f316", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165409, "uuid": "0ca1c623-d228-435e-9d2b-247e7cfab1bc", "value": "T119D622136BF89E67E0B1DB74FF365464A7277E055922B1EE1214790E2F70A8089A33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165409, "uuid": "01a2790c-b296-44f8-b2d3-ae677ab0fd9d", "value": "196608:eHxcp9ym3nltDUJVpHxcp9ym3dHxcp9ym3xHxcp9ym3wHxcp9ym3gHxcp9ym3sHB:sGplpWGpPGpjGpeGpOGpKGpq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769165409, "uuid": "29a46543-264c-47df-9893-0c88abb76cc9", "value": 13541376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165409, "uuid": "8c0011a2-3841-4a9e-a613-043e41320c73", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5acace3-b854-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769165973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "5113cd22-671f-4a56-985c-d61831736235", "comment": "Malware payload (Mirai)", "value": "a37d9f8cb8c937aca9ecc027cc792340", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "1c7bccae-e9e0-45d2-b9a4-fec424dfc7f1", "comment": "Malware payload (Mirai)", "value": "37444aaf2a15551e182f35b0501adb44ae52705c0b385d709e822ee18ae6b286", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "969098c8-d1fe-46c6-bf15-45fcaa2700fb", "value": "T1881318DBB4099D7CF85FEABE9413490DF631375550830B3667A7FDA36C321648922E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "5d0a9ac2-edcd-409d-b016-b233aad38975", "value": "768:1ne3hoZSQh6a5fZYNCYnLIuzV7ajhJ0m+w9w/S3U8jvR:1uecQ8SYNTLIuzdaf0m+wK/SE87R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769165973, "uuid": "1617adaf-6456-4f2a-9ebc-87e32a0ad585", "value": 43600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "8d993e8b-e7d2-43fd-8936-339d627c21a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5b22f32-b854-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769165973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "1ebc9dbf-776f-4f0f-a1bb-fae7ec924c05", "comment": "Malware payload (Mirai)", "value": "7fd4276b2d2feb44ef44648c48e7402b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "d3f64e76-aff2-470a-9fea-fab22a488a16", "comment": "Malware payload (Mirai)", "value": "24b8846706503e38321a71be85d68169326030a20a8efb64bedc8145103d22ee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "7622682d-c9f6-4ca3-9de1-e8bce5f4f3df", "value": "T1D0234B21B9392F17C4D4A8BA62F74768B2F5124E25E8CB5E3D720E8EFF14A8055136", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "2cd568b7-2d3f-491a-8788-4145ea1bc8da", "value": "768:MMouY0Fbq9jJWijbp9NboSofqmb1sO+2jzhX:MMlY0FbSjJWijb7pocQ1Wu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769165973, "uuid": "9c6539af-1b4e-49bc-a577-068f24ad35d0", "value": 46804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "42a98521-bd48-4d46-95f5-bf47ffae8fb5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c59e589c-b854-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769165973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "6c5fb01d-d744-40b0-95e5-f3ab97186d74", "comment": "Malware payload (Mirai)", "value": "cc1d72cea4a12dcedb18cad2ef5f2d39", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "7338cf84-a6ff-4835-8b10-5cfeb8d7fd37", "comment": "Malware payload (Mirai)", "value": "16b870f6de57049a36b6a8b6c8ce5610efa69cb5b6d6495d82d549cb74bd38bb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "a18fc71f-ee9c-4495-95dd-221f207feb5e", "value": "T15D13F807B94680FDC0ADC374477AB53AD53335BE1239B3B63BD8FA129986EA10E1D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "701cf6b6-3340-45e5-9c96-29565ed47851", "value": "768:HO5xyjKy5klOY5lYDJN+Tb4/s3gHSAnWTtoTWufBT7AZy:C4jKy5klH5lYFsTbUs3N+atoTWuFkZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769165973, "uuid": "a3ec3857-8194-43b0-8864-13d3f6268b6f", "value": 42752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "77d79faa-829c-48b8-9ead-78bd7471d343", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5d27baf-b854-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769165973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "62b61b88-8570-483a-bec9-4fc3e8f606da", "comment": "Malware payload (Mirai)", "value": "a320a9cd5ab812940b860987715a7604", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "a1698c7a-3e47-4474-bf5e-f988906a7363", "comment": "Malware payload (Mirai)", "value": "dddd16cb5c5e035211360a5458544611738fc8571ced8ba4138e5e13158c9cbe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "e2d508c8-fc94-4720-aec6-85e8bdce9c5f", "value": "T15B034CC8B903DEF8FC1606F42136F77A9BB6F07A2128DD97C39995329C42A05A5062", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "8d2d1491-3133-4049-80a8-a92828994bb5", "value": "768:wZT8epBPi4gJW0KMcjp49A9/YuEGWlqEPEgouBnk6PyJiE9Ee4V:wZIezPi4gJW0KMgp49Ax8lvPFxBnk6P4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769165973, "uuid": "f511da94-3ab0-48c5-8562-3e75685bf1a6", "value": 39356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "a3668c12-ea0c-4a9e-af61-e0b2512eb198", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5e1a63c-b854-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769165973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "1c20088a-9fa1-460b-bb87-e04adc80f0e6", "comment": "Malware payload (Mirai)", "value": "7ab080911981573349153ca2b8f01d80", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "5cb54de4-c608-4443-95a7-85f9c6bed0e8", "comment": "Malware payload (Mirai)", "value": "964b22f03b8c29dd5a24b8b2bd5648eaec1a750ada4e0f1a4a001e9f2dc27bb7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "e6bd77ba-de71-4f82-a1bd-7fb2a110c35a", "value": "T1B6132B42322C0E5BC6A66AB0253F17E093BFE9A020F4F585655F9B868675F371087F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "0a5ae7ae-888e-4f45-9a17-b0375b495ee0", "value": "768:MJu1MhGolG1QN8GvotOR0jMJZaG7rnEkgN8RbhoIAY99:ch/lG1QN8wo4xvJEgfAU9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769165973, "uuid": "7e0696ac-d53c-4e1f-a14b-d6ea0d4f5054", "value": 41892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "5bfd3519-2302-46d4-a5b5-e8b71c17cee6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6839190-b854-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769165973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "c61304a6-c874-4931-9635-804e14d22d41", "comment": "Malware payload (Mirai)", "value": "67b11aaf462681223cd9e887cc5a3086", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "122f96d5-dad9-4635-9501-da48801cbd58", "comment": "Malware payload (Mirai)", "value": "e33743491df24ba92b79656fea6b398302042a6d07bbff9bbf254243317b1f7e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "2adcf73a-0bad-49b2-aead-f628c6dc2b5a", "value": "T165437109BF650EB7EC6FDD3709A9174524CD651B21A87B3A7D34D81CF20B25B19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "c489d755-3aad-470b-9136-ea7926f4ec4d", "value": "768:oLWu89xw1IlGGIunNlFgdMR+e2KvDVub3w6h12pcS5+46kjU4Z/eT5tIne2el9e2:oLWu8fwgI2M0Lg9gzi9S1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769165973, "uuid": "b34f77ed-f01c-43eb-a39e-d613b15387b3", "value": 59220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "0006ece6-dec8-4df3-afb5-f70a22ede432", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c54242f7-b854-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769165973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "6af209ca-9252-41a7-8272-d3325612aaf1", "comment": "Malware payload (Mirai)", "value": "b3330d8a7a445904a2e863cccf047247", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "913d3924-e212-46fb-ad25-a584948f3392", "comment": "Malware payload (Mirai)", "value": "d4cd65f586307579b6eba2540779633ae3e7a68906b6ca3a772e99532fedd605", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "b4a5418c-8aee-43b7-a1bb-b7e78943f106", "value": "T15243971E2E619FFCFBAD863587F39E219648339216E1C584E15CDA011E7034E745FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "080ae6ba-bd35-4e71-8785-a694abba1f13", "value": "768:TDul5U9mAG5Y2zrEI/fEInwa05zNx8jMyOFy26OybGFjFp2gnAOxAWsFnkPDQPe:Y5smAG59zRqn5zNKlbGFjETCQPe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769165973, "uuid": "379a1db7-b052-4f0b-80ce-e0e0455403a4", "value": 57092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "59a930f0-cccd-43af-bdd7-28e3c1d53bff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6200446-b854-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769165973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "8b71664c-b657-4a9c-b7eb-00e12ab4c95f", "comment": "Malware payload (Mirai)", "value": "e0019969acea482aa21ff9adae02a5cf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "d2ee0ee7-1ac1-44a4-9bff-8a62ae1005af", "comment": "Malware payload (Mirai)", "value": "abe2a6cf5eeb276ef68c627032aea68f769e049203fe29d3c5a565c7fb68475a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "9f6ed202-5bea-4c19-b34e-8de60d8f1d46", "value": "T17D037DBAC8296DD4C6544674A8358A7C2F63E110D3833FFB5A4585A68047EFCFA0A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "c3152c65-0006-4e5a-acb7-f59965d009db", "value": "768:MaFf2wtYwNSKvPnveeddMi0EN+D2rbCvofi3SCq1:Ma12wtDVzOwpb/fkSCq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769165973, "uuid": "95a406c3-fe13-43f0-ab21-e82957210caa", "value": 39204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "70ea6cd0-87af-4aea-b211-935acf6e5366", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c65dee9e-b854-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769165973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "fdbddc37-e84a-49a9-bf0d-e13f6a6d6ccd", "comment": "Malware payload (Mirai)", "value": "dbbea7051c7ec0004f24f66eefed3def", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "141a1101-1047-4456-84f1-adb70dc549c2", "comment": "Malware payload (Mirai)", "value": "bc8e56b086d6dff8c4bbc0024306f2f368dad282fb69e01f832facedd66f52c5", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "7db9c635-38ae-4350-81a7-c786301c529b", "value": "T10F130991BC829513C6E4237BFA6E018D332623A8E1EF32179D226F5177C692F0D7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "d7f1bb61-6cc2-4ba2-8941-2733b5f87e94", "value": "768:PIAeruxMQkm/Z0te+mk2K40lJ0C8SaQFXqTTWBcFtvoKc7nPN+4WLaRVw:VerZXm/mT8SCVtpQV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769165973, "uuid": "92ea1e8b-c1b2-4170-a7ee-75d45d4fc857", "value": 44724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165973, "uuid": "0c0daefd-881c-4ad4-929b-bc31dcdd7f05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1769167747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769167747, "uuid": "b1f5583f-2828-4952-b5b7-b882d31c029a", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769167747, "uuid": "420cd58d-0e9f-4f30-88b6-bd2a504ec10e", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769167747, "uuid": "653435b2-f5cf-4b04-8ef2-7ed166b81ab2", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769167747, "uuid": "ea03b694-9d0a-4df5-b759-97093960fec1", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769167747, "uuid": "113a6f39-f8ca-4ca9-9134-5673297be14d", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cd19637-f84f-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769167938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769167938, "uuid": "2ee5e00c-01a6-4cce-991d-88a74444566e", "comment": "Malware payload (Mirai)", "value": "d8d6e1f9edba6c9372a4c50037b5f1f9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769167938, "uuid": "4f159d24-caf1-489f-9e8e-9893a7637b4a", "comment": "Malware payload (Mirai)", "value": "ad2a9ee1c109c05164e75e77ebd86c48d7dfceb2905614ce895f2147a9ef3ac1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769167938, "uuid": "03dbde35-4da3-4f5c-bf6e-db8428234a8b", "value": "T1C1533907B990C0FCC099C1745B6FB63AD933757E0238B2AA37D8FA236D49E215E5E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769167938, "uuid": "db3adab2-6c68-4a7d-b117-8e19599e0c41", "value": "1536:AdjjnP81NXoIsbbJTDXyuirO+yYCv9mDVIviFxu:gjPmN4NbJTB7+yjVmDVIaY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769167938, "uuid": "40b65c74-3b42-4e73-8e8f-01b35995294f", "value": 63360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769167938, "uuid": "ea41fd2c-8e44-4ece-a1f8-2e3c581bfd46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca417be8-f852-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769169491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769169491, "uuid": "690ec233-1507-458e-99b3-5ce26973517a", "comment": "Malware payload (Mirai)", "value": "07310913f35875bee55c0836f5950771", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769169491, "uuid": "d51413e7-47d5-4ead-8a83-a9fcd045aa3f", "comment": "Malware payload (Mirai)", "value": "694229b803f6921d4a9f7cb2ed221a0e2a72d277aaa2f6712297fb828ed1ce7f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769169491, "uuid": "57b50706-7bb9-461b-98fc-2ffcf78c526b", "value": "T111931AD6BCC1C612C6E0A1B2FB0E51CE375643B8E3E6B107DD19AB29674B8670E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769169491, "uuid": "ea1626d8-f875-4b09-9e27-b21d6c3b5606", "value": "1536:un3u9mUgl5bjSSjY5U4xIVWpKwxTQInJAq1LJL2kvM5b:u3ugL7vj+mVsxTD6q1YCM5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769169491, "uuid": "cd2e0082-0b56-4bd1-8fde-502fd80fa9af", "value": 92884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769169491, "uuid": "9d185bb9-c0b0-4072-b355-2411a40b9184", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e6fe3e4-f855-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769170464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769170464, "uuid": "ae095ebc-f554-4940-b601-b68ba36b0a77", "comment": "Malware payload (Mirai)", "value": "9cd2f18097c599ac4b0ca1757b774112", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769170464, "uuid": "8f2c7fd8-a3aa-48ec-9d09-eb5a2116345f", "comment": "Malware payload (Mirai)", "value": "9e273b9c028bbb7ac356293f29fbd69f65785404aeed6cf53a11d172801577fb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769170464, "uuid": "5b88d937-2c18-4884-8fe0-f047b0318e26", "value": "T15B939D11CCA55EE8F03AAD3020FADABB4317E445A90B6CB73C4686655057E8CF4B7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769170464, "uuid": "6940d7cb-cd4b-4ed8-adac-e50d41f38a4e", "value": "1536:gB4sGuJEEU+otrkUyEhGEmtZKJIYLVoR+7iO3E2qC2dYQJ/b:gB3GO++otrTyE9mIJIL2qTyK/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769170464, "uuid": "cc8fe6a4-e407-4a14-91a2-9bfff8490d24", "value": 91344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769170464, "uuid": "36ef99f3-6353-4cc7-b88f-e6f8366acd5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18df327c-f858-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769171770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769171770, "uuid": "47ddb047-5b1e-4e4a-ba9e-75e5b9d7579a", "comment": "Malware payload (Mirai)", "value": "da0176366d8099cec74f44726ae5c20b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769171770, "uuid": "62c35d88-7006-4890-8dbf-56aa27c04131", "comment": "Malware payload (Mirai)", "value": "5643642320cc1c5f4a31fbebaac6bb87b37058c5461f32379ca46582a14c941c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769171770, "uuid": "d61e7a09-4b84-4396-8bf3-76bcfde6b665", "value": "T18773E70AFB700EBBD86FDD3746AD0B4525CD524721E83B7A3574D828F25A18F4AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769171770, "uuid": "8524d0e8-f916-4564-808c-8dd485d3d3b3", "value": "1536:o382pCI6i5oEPDIr1dUy++4yQu7zn7sLC/bT:oM2B6GoYabsO/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769171770, "uuid": "556fa291-aebb-49ea-9380-3ea7e17d2201", "value": 76500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769171770, "uuid": "030e1d2b-2a88-432a-afe1-862e04bd2a3d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a81ffbd6-f85d-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769174158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769174158, "uuid": "e8967052-4500-4408-9623-b17dd96d789a", "comment": "Malware payload", "value": "dbb16374aa1f9d60575083c43b976b45", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769174158, "uuid": "ad038ba6-c682-43ca-876b-6092a39fa2bc", "comment": "Malware payload", "value": "62982ce16e0ca206e69e83f1f4a3672cf59938702dd3d3c85e3297d3c016452d", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769174158, "uuid": "9187f892-0c8d-4e03-94f4-5bee1d94b0a9", "value": "T153F4F8B4A9018129D89F21F5A1EA6FDEA49D0F101BC4ADF365C03EE704B22E635739", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769174158, "uuid": "237e556c-8733-4106-b9bc-e39c60c0f62c", "value": "730282de27576d683bf7a345acb2cb52", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769174158, "uuid": "8576278d-e733-496d-b710-f6dfc222be94", "value": "12288:bUFxc9FSLzUCCKRm96gziMfZ1Nd/or8/rqgXrXVqkBUHl3G5SljtcjYgHZj+FSji:bUFxjNRRgziMfZ1Nd/or8/rqgXrXVqka", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769174158, "uuid": "67e59e58-8fe2-4f5b-8c16-082c4ba1ea9f", "value": 749568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769174158, "uuid": "039f4feb-cc37-4999-8ae5-4066b6b03eca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40a2cdb1-f85f-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769174843, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769174843, "uuid": "b3770a1b-5a28-491d-8565-5fd8c2183dec", "comment": "Malware payload (Mirai)", "value": "0586d56c232260596474a1a2eb0d6afd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769174843, "uuid": "0d317161-53f6-4ea6-b01c-ff5f2f029454", "comment": "Malware payload (Mirai)", "value": "ee7604b35770f0ce0b821f9dc32fcfc2d31d6a962cbdc9404811b21f2dacdb32", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769174843, "uuid": "7be97d70-3da4-4561-9b4e-a3042bf8d670", "value": "T17393088ABCC5C712C6E071B2BB1F51CE335643B8E3E6B1438D19AB29675B8570E3B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769174843, "uuid": "5f2bc397-9c04-4b33-8e98-b68bfbeddb1c", "value": "1536:yMwGIHgptGkQq9cPZNc4v2IqvtRQsWI0rBRoYON38wBI/b:y/lHYtpCPheIqvtu/I0XoJN3zBI/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769174843, "uuid": "c678c12d-2fc5-4e11-9f6e-85de20336ed3", "value": 95444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769174843, "uuid": "eba4ff89-c73f-4225-b740-d62dbc00e7f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "369b470a-f2ec-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769174994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769174994, "uuid": "991cb9ae-8bba-4e99-8bd1-91b28b8ab890", "comment": "Malware payload (Mirai)", "value": "0f760aa956bba844c2db8e6f3b47fb8a", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769174994, "uuid": "a4e10215-070f-4340-8a4a-4fd316416700", "comment": "Malware payload (Mirai)", "value": "b2cb954d4da4f46675fed24646cfee8e19072beea03b66e7ce0a31f6ea6cc1ae", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769174994, "uuid": "df2cfb8a-cda5-480f-acdd-74e2e450b9ac", "value": "T19EE39FB3F30B1091C82306F417CB6B9C2E2315425F6B86D3BCAA313A2A765DE5915B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769174994, "uuid": "69d057c5-ba60-4fc2-9d44-2d1c7f5d0468", "value": "3072:X/1HeTDitCaG9y+y0+Xk+cdLfSFztgQg5CvugQt5SPub01yVq:P0mGvy/aKFztgjCvattVq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769174994, "uuid": "1297f506-bb3a-4d8e-9058-9ff83997aecc", "value": 157136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769174994, "uuid": "350990d2-044b-4fda-b29f-eff4bdf64fa5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af0bd419-f85f-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175029, "uuid": "4d07d9f4-ea47-4e53-82c7-634d309684cd", "comment": "Malware payload (Mirai)", "value": "f95c122d3c22757f52ee7b888b50405a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175029, "uuid": "9b1b34b4-cece-43d7-9cd2-feb955057749", "comment": "Malware payload (Mirai)", "value": "85e8a9edfeb6658e844522b9e4b0beb4fb26868a266b0b2e583ccab0340edd20", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175029, "uuid": "66d0fb15-f81b-427d-9aa1-69f78d7cc64e", "value": "T1CEA34B25ED796E27C5C0723A51D34530F5B643AA25BC990B3EB31D5CEF18320316FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175029, "uuid": "1bf4cb40-878b-4905-854c-4575929974c3", "value": "1536:COms1+ZD3TqdNDU8sqZHGXHFjm5NAxY7yZ0DIpaUgvQDfbn:xFYL8NJsxk5NACGPdTfj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175029, "uuid": "c39feb62-9f69-4b92-b7eb-69ae5c734311", "value": 99548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175029, "uuid": "17c88ed5-dd83-4a15-bbe7-33f93a525780", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbdc1acb-f85f-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175077, "uuid": "6d545431-dd82-455a-8dea-1ace335c0e9e", "comment": "Malware payload (Mirai)", "value": "265c91b16e2570d4ce61e8f475432da7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175077, "uuid": "fab4766e-cbb4-4f6c-94b2-92820020fc5c", "comment": "Malware payload (Mirai)", "value": "23a15d0b6762895205ff8b4b713cbfa6c8cd5693ece863f2940becaf11ebbe62", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175077, "uuid": "b095ba43-e1f3-436c-8420-687a0132ce8c", "value": "T1FA93188ABCC5C602C6E0B1B2BB1F51CE375643B8E3E6B143DD18AB29675B8570E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175077, "uuid": "d00b0412-efe7-4de7-afb3-3339ee5b3fc8", "value": "1536:yfOA4IgUbtIeN0akwL9/krd4sVpnfYI0SRJEyFCiUV5b:Kx4IlbtfL5apQI0e9FC/V5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175077, "uuid": "60b8a592-9221-4d18-93c0-efa231d68f7d", "value": 89808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175077, "uuid": "930e03dd-9434-4a83-b9f3-a42358da132f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7319534-f85f-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175096, "uuid": "97360934-2f6d-4f20-938a-b30c6ecc3791", "comment": "Malware payload (Mirai)", "value": "b086e7b0fd69ba5cf942562b4a7afda0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175096, "uuid": "9108fd4e-a25d-4e83-93d0-40deacee5240", "comment": "Malware payload (Mirai)", "value": "c751ddc7fbfc0144120d12e76f921671883c8f531abe162884c4dcbe15f599a2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175096, "uuid": "b2e972d7-e7ca-4043-9638-f4357bda3dcd", "value": "T166934992B810DC7EF81BE6B680570B16B224B7E15E426F277527FD23EA6D1682812D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175096, "uuid": "170764bc-0baa-4dec-a713-2c1a9d290f3b", "value": "1536:SH4byJ9/xnWOsaMLZJHoaC6DR103XKrj7uZZkPJjeJYyconc/V8VpWuSV:SH4bMZJsJvHoyOnkOAaYJonc/yWuG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175096, "uuid": "a9095d7b-c550-42cc-b89e-8d5851ed0a32", "value": 91956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175096, "uuid": "75d7b61e-e3ea-496a-bc95-27c26762dfcb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de1156b4-f85f-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175107, "uuid": "6922bd2e-0494-4a2c-b49d-bd43210bce68", "comment": "Malware payload (Mirai)", "value": "66fca96c6c3defa38a97428eb20dadbe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175107, "uuid": "d5e06b63-1aa1-48c3-83ad-1170ca1fb849", "comment": "Malware payload (Mirai)", "value": "d83654476c4fc3fb7445a09a8cc2c6718132b8bdd635472c6e06c3894f394177", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175107, "uuid": "9d96627c-7d2e-4bb1-b0e7-68cd31afa0f0", "value": "T12F838D02CCB65DE8F03A7E7120B9DABA4317B505A81B6CB73C4782255017AD8F5A7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175107, "uuid": "829d9975-ab7f-4180-9760-0a797ae929af", "value": "1536:mS4bo4AFEEP+QKjG0EuUaESCsdJfLCn5x3C5xCK74sI9jO5b:mSwRc1+QKjZEuQN4fIy5xx7vIY5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175107, "uuid": "e9d93a6c-208f-479a-803e-afa3e9b31796", "value": 87248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175107, "uuid": "9d110e1e-4e4b-4d85-a213-6cd33dca2fa5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e390518b-f85f-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175117, "uuid": "8368d698-0071-492d-b199-62208880b534", "comment": "Malware payload (Mirai)", "value": "4c55a4c6edbf9941efb9d4d84c699d83", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175117, "uuid": "cb81f5c2-2f5b-4281-be1f-d1ce947fd465", "comment": "Malware payload (Mirai)", "value": "6d37e0d8b0d0af50e8dbf5798beb3d2caf6cd03c489580bb8d3745802c3dc751", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175117, "uuid": "b62877ad-76ea-49ab-ad45-b2e1482da6e5", "value": "T10AB3A55BAE529F7CF32C82354FB38B36A659239133A0C185E66CDD405E6028E587FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175117, "uuid": "4bb0ab94-6816-4097-8fc2-4443e303b329", "value": "1536:/wUicN6ujrbTRbTP7TgctW+UC1PawSgUS0EIe5nLJ9qa5b0VJ:/wi6e7tWZC1PawsS0EIkXqa5AP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175117, "uuid": "8fd54a05-ffc3-428f-a477-04a8d5887af7", "value": 109236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175117, "uuid": "adfd499c-8aeb-48d3-8333-c9833566770f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5480746-f85f-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175161, "uuid": "b2d32473-d750-44f2-8609-969db6302a43", "comment": "Malware payload (Mirai)", "value": "607336f2ab873bd36d0373c179b12297", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175161, "uuid": "a264ffc2-746b-4c0b-9e26-2207335a5d17", "comment": "Malware payload (Mirai)", "value": "a119646dc1aba58da5e34dc54280e56b19ce1a7439dc5c65d031fdbedc1e1b1c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175161, "uuid": "232e70fb-2bcf-44ed-9bd6-6ba8ffd450fb", "value": "T17D432A85B991C612CAC46677FF0E42DD771B03ACE2EE73039919AF64279B81B0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175161, "uuid": "c18eeea5-b41e-4491-bb25-df80f0a0f4c6", "value": "768:r0PSkoH4fPYa6dbu6Qk3FuYSsbjQ3t6NO6jlQhsWI7ashZixUDS6lcgkFjxmkvRD:aHYxdbB6YQ3t6gK3Bb99kOkvR/b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175161, "uuid": "98c22596-b3ae-48d6-b5c9-0451dc9f2139", "value": 58580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175161, "uuid": "a47f2af8-6e2a-4671-a208-95623c49bffb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "027de432-f860-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175169, "uuid": "4fe4bac3-e2fe-4a6d-bed1-f830335124a4", "comment": "Malware payload (Mirai)", "value": "134ec40c13e202fb02e40a3838e14bdf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175169, "uuid": "fcb09b21-0c93-4336-a95b-b2698158a850", "comment": "Malware payload (Mirai)", "value": "9085a8f120503029cbf923d9fc0d3791a64c8517bcbb1354f8e1d71e8fcd93ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175169, "uuid": "5d6f4b84-2338-42cd-af1b-fe729207911e", "value": "T196C3080ABFB11FBBD46FDD3345A90749289D560621B97B7A7A74D81CF24A28F06D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175169, "uuid": "8c0d5610-cc24-41ae-bb42-77d0e30eb938", "value": "1536:Xr4wLpuvQukgm35/KmovxJJK3aH0UJqhYCRJbRc81OhulO/U+TXDZfqFX39wu7rX:XkCAFxJyEXsoiasM5qUlPRjs5/T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175169, "uuid": "2cc13bf3-6074-4d75-9103-09b6ca896d41", "value": 121548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175169, "uuid": "ca6719e6-9ca0-4fb3-b8ed-68b1e6adaa94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13570854-f860-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175197, "uuid": "834e5b13-4799-4ff9-94d7-5b230deed21e", "comment": "Malware payload (Mirai)", "value": "19ef773ff0f0450f6324eb74cb04c63d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175197, "uuid": "1cbc415a-589c-4b16-b399-2805da6c27e6", "comment": "Malware payload (Mirai)", "value": "3afcb0412ce8a14a27e3bb9a9275f33db2109a42a62b8dee4f568d30cbbe9685", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175197, "uuid": "48e122f0-e030-49e8-aadb-44805c599f8a", "value": "T127636C128C7559ACF07B7D711039CABB9713E40AE95B6CBA3D438215401FA88F5A7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175197, "uuid": "22f43374-b6fb-48aa-8c52-62881a6a0ac6", "value": "1536:t74H8TYcqEO+zTi+yTOzHUbsbEoouCPH5:t7Q80cW+zTirTOTi25ou05", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175197, "uuid": "fbc1b9ff-bc31-4dcc-9c3f-4b448b011945", "value": 66760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175197, "uuid": "73cd9010-aaaa-4f1c-aa00-35c1e0fec701", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3645ef36-f860-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175255, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175255, "uuid": "13cf75cf-9d7a-46e7-b790-3da58c7d1de9", "comment": "Malware payload (Mirai)", "value": "8192ccb0341586bd34d500109796488b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175255, "uuid": "042c5822-fe4a-4658-8b46-5ba41f47c476", "comment": "Malware payload (Mirai)", "value": "67b69ffe73aad94bdf96cb92c5c261761c5ec5a39a3f3d21ac0a7f427cddb43f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175255, "uuid": "32bb0577-d0dd-46f9-8317-a36025c77a9c", "value": "T146B3B64B6E529F7DF32C82354FB38B36A659238233B0C185E66CDA405D6038E586FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175255, "uuid": "5121dfc2-3457-41ce-bea4-26d72b7d93ea", "value": "1536:4WHK6OZBDbRDbySb5D7Gfku9i+u8SvI9ovw9+HF2/bXI:4T6AlCfku9i+u8D9o/F2/7I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175255, "uuid": "34376b01-5f2c-4777-aaa2-ce3d66e51645", "value": 117452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175255, "uuid": "1059510f-4843-4d6f-a55f-8738a951a56e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3691b00d-f2ec-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175256, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175256, "uuid": "7fe3def3-a2fd-4b21-98ca-9191c4d97ab7", "comment": "Malware payload (Mirai)", "value": "5b50cd3bfdf26920c024a6d63b32ba2f", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175256, "uuid": "e2608338-b9e9-4ab5-847e-5efa5515679d", "comment": "Malware payload (Mirai)", "value": "6c32c4038da5e4b810ff21b5ff60c762d00173bd131618cea84122a2de562948", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175256, "uuid": "322a4759-07b1-4a39-9a0e-34f5fc12f2c2", "value": "T14833F254059EE340E6302E3EB9B9CC1A1DC997ACDAF4F0B245944B811F03A6959BAF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175256, "uuid": "4e4a238e-ceee-436c-8c2f-a32d846fdafa", "value": "768:B44O4eyC217SuUTXZazr6s7PvQAdpakxue6+t0NGX06/OnhqolRRN1iZ20njShIr:BbdAsKU64hp1uGKsKR4M0IBg2gzzh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175256, "uuid": "6243ebdc-a2fe-43e9-b636-303bf5a1378a", "value": 53776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175256, "uuid": "1e0b7925-73c8-4158-ad58-a3a023af525f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3db8ca23-f860-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769175268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175268, "uuid": "47d8c385-55d1-44cf-b780-fadbc4e08947", "comment": "Malware payload", "value": "f9bdaa6a55a879ce0fe9fe278e34e842", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175268, "uuid": "d7a98dfa-fe93-40d7-9183-14f0679110fb", "comment": "Malware payload", "value": "eccaa80bb39ac062904e501b5bd207838235596797e499747d1f8e49a27d6d5e", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175268, "uuid": "39385496-37c1-464a-b219-0bbbb57df58d", "value": "T19605F6A16A118036E95B12F065FA6FEE649E0F1443C0EEF761C06D9784726E239B3C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175268, "uuid": "949f1a74-d7d9-46cc-8fee-672c2fe71330", "value": "36c942f3b6ba2b099504be955e1d672f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175268, "uuid": "7e712708-4fe7-498b-9136-6a7763382e24", "value": "24576:04VidKP9TD1k3+NUUVK2USQ8HKdxM5sT3kPCHRkxgXyutyulIZIgKeD4S70UQk1L:BVj1TDsUR1Pp/6Xhe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175268, "uuid": "90600116-7c34-4068-9a33-8e31c51a0e5f", "value": 795136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175268, "uuid": "bfba25ec-05a4-490d-aa9f-3f5d4d21f5c7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d0734b1-f860-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175294, "uuid": "8ac7d246-b009-4e63-bcfd-fec206d34e6a", "comment": "Malware payload (Mirai)", "value": "6dee06cb749ec2de813bd2fa35573a6d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175294, "uuid": "8962310a-17d0-4792-9e63-62e742e4860d", "comment": "Malware payload (Mirai)", "value": "a0b7ffaf3735bee44b4ebe927e18768a8a7d32696a1657b46fcbcb56a2c508f3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175294, "uuid": "18026538-cc0f-4c8a-81cd-eadb03b6fa6e", "value": "T12FA31CDABC818B11D6C166B6FE0E518D33134F78E3FA7213CE185B2D674A86B0A3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175294, "uuid": "c60175bf-4b9a-4908-a487-54ef382e3b62", "value": "3072:7HTrSBxz+r+EeBfM2PbhlK1YICyH4Asm8fqNmMz067ant58gR/:I+8PPjK1YICy/smfNme06GnHb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175294, "uuid": "3058a249-3820-43da-b59c-dad9ad013922", "value": 100788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175294, "uuid": "0ee7dce0-9ea6-469c-a51c-e6886565555e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66e95abe-f860-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175337, "uuid": "33750bc7-755c-4da0-97ac-60bbb11ec7e8", "comment": "Malware payload (Mirai)", "value": "c02b0b341f1e6e08053c5dcf54ac2ee9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175337, "uuid": "148ce6a9-0e05-4665-bd6b-29506728d6b9", "comment": "Malware payload (Mirai)", "value": "0218821633763f08fa37c2a7b59cd5f18c454c0d6d23ac823aa6ae840cf0b61e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175337, "uuid": "dd0cca01-347a-40bc-9342-9645d4215bc5", "value": "T11393B74A6E218FFDF768873047B74A21A75933D626E1D685E29CD6001F7034E681FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175337, "uuid": "a6697b7c-b6fd-4fbe-88d6-6611e0f032ab", "value": "1536:J7l23RZPV5uAX4nn09TlL5ovZeijsZhkv:f233PVFlTlL5oahkv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175337, "uuid": "71fa42a2-5a6a-4b29-85e3-8fafbb70065b", "value": 88820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175337, "uuid": "66cb782e-d254-412d-9c08-7c962f314b55", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95b92b34-f860-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175416, "uuid": "7310b51f-3e49-4c7b-b440-de9f97cfa9b0", "comment": "Malware payload (Mirai)", "value": "e6199eb4a7454d5013164589444cee95", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175416, "uuid": "ec3a3cea-88fd-449d-b0ce-3c0db380a6f4", "comment": "Malware payload (Mirai)", "value": "3430dce6e85a3f00a4fa603a94ca7c84224bedd177c10997901756fedfba279f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175416, "uuid": "eef811cf-f54a-48fd-bc6e-4e60d77aa18a", "value": "T1AFB319CABC819B11D6D566BAFE0E518D33134B78E3FA7103CE145B2A638A85B0F7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175416, "uuid": "a98ffeee-6dbd-47b2-80c7-539a879ec1f2", "value": "3072:3lkipR5olQoEO8fnPvOv+HFrctp/frVUunR6a6UQ0Rs1fVC6TZJ/:kll4P6+HFQprVU6R6a6UQ0a1fVfT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175416, "uuid": "eaf5141f-93d2-486b-912c-cec55f1d693a", "value": 114224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175416, "uuid": "3341acef-9136-4cb1-a1e6-da7c658c6dd5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a563ebf4-f860-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175442, "uuid": "2bcf5b2c-bc12-4a17-94ff-13f3604259bb", "comment": "Malware payload (Mirai)", "value": "00edb66f80ff99c8475b16906b6c4fce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175442, "uuid": "853782e0-4393-45d3-959e-2c43c5546c77", "comment": "Malware payload (Mirai)", "value": "eac8aff4e049d416ba169a010dd35ff1c23f8f7f259b99eacba1b45a2680b1c5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175442, "uuid": "60fb33aa-66af-493f-8a8b-5910426448f5", "value": "T1B783B60AAB20ADBBD81BCC3308B8478229CCA55771543B7A3974D92DBF5654F4AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175442, "uuid": "47726430-e832-41fe-8a29-e16a8234f078", "value": "1536:kMubySUyjix4pDdjlmm5WJgzZgDIvSTQb9GsPgQ+M:PubySdjiSIJgzkUn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175442, "uuid": "d6fa7f2c-9028-4f94-ae31-834ab4080784", "value": 83076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175442, "uuid": "4933347d-7c81-4da2-a3a9-60cf9d870ed4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9aed357-f860-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175503, "uuid": "c81c6ba3-be62-4751-ad20-2211a02ae8ea", "comment": "Malware payload (Mirai)", "value": "0292958866fd2a094621690214e938d9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175503, "uuid": "d79bd3c8-b039-4de5-976c-b66a9b3919e4", "comment": "Malware payload (Mirai)", "value": "7fb27a6651bc2a9d70151f867cc72b7529e024db61e4a713a9618cb1b5e508b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175503, "uuid": "3532f55f-cffb-4e2a-9a9e-e501f98e9691", "value": "T1B5435C42B30C0A43E1676DF0393F7BE1939FDA9110A4B389750EAB5A8273E325547E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175503, "uuid": "d94c9306-b47b-4811-9d37-51c7ddfeb3e9", "value": "1536:s6pBwj0FevOyDsMEOS9aorZoDkRtcC//bh:s6pij8eS9acZZ/t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175503, "uuid": "80d69c0c-4fe1-4e99-bca7-3fa1dc2c3fcb", "value": 58680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175503, "uuid": "53800a27-b2d1-44d5-985d-91d74ae025be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4805d34-f860-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175575, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175575, "uuid": "463610a3-79b5-4512-8426-24efd14e42ef", "comment": "Malware payload (Mirai)", "value": "69bda39bbab1fd0203c8ecd45f554ad1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175575, "uuid": "2050e8cd-95c9-40d8-8dbf-554133747534", "comment": "Malware payload (Mirai)", "value": "80f4e4bc95a2aa70d5a50e438db7fd8b1c9c786ec60476a0a03b24aac08187cf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175575, "uuid": "80772ef3-3e04-4c78-9e0f-59be39b58618", "value": "T1F2633A05ED385D27C4D0753A56E34530F6B643A91ABC9A4E3EA32D5CDE14720313FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175575, "uuid": "99f05a76-6838-4ea7-8c67-9f0af1872eff", "value": "1536:ZKhha/GwlQK2cEijMB1Rh4Qz8Pk8SloJR:ohAZlQV8jowGqJR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175575, "uuid": "892f8a6e-b7be-4d5d-b39e-bc7c3dec52fd", "value": 67956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175575, "uuid": "d5848646-b2bb-440b-b760-16ab4bc0452f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdb6a566-f860-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175590, "uuid": "843d41e5-1644-4890-921d-3b1d8c68d584", "comment": "Malware payload (Mirai)", "value": "a87429342f4af8da8320620da56bcb70", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175590, "uuid": "a56dc0aa-cb95-400a-a82b-789fd4915482", "comment": "Malware payload (Mirai)", "value": "cb389bbeb9a072ca962220a325a7289eb5d87ececb7bd458ef10c5bb3730ce15", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175590, "uuid": "0ad0e2f1-3939-4f6c-9f05-f135c410f576", "value": "T1BE736AC08942F4F1E819017561AAF3336577CDB901A8FDF7F7A45732A42AAA072877", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175590, "uuid": "4bfda992-685f-415a-9984-1940fdc1d36d", "value": "1536:7VWo+Mi/FpAvD3928OirT8+iqxK2z6fyhZLFU28iNhzh+spz6Gwb2ldbiNb6uBE:7VWpjtp+r92/M1xZ6f2ZLFeiXh7z6GIJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175590, "uuid": "bcacc3e8-7017-46ff-b79d-307d6e1293ca", "value": 78932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175590, "uuid": "da41839b-57e8-4d88-9831-82afe167cc33", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ebb3e7b-f861-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175619, "uuid": "2733b718-fdf0-43fb-baef-04b3100c57da", "comment": "Malware payload (Mirai)", "value": "48e0fb8a1805e883b7b710b71b38e3e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175619, "uuid": "ce1e36b9-dc2b-4870-adb4-b31850a7f186", "comment": "Malware payload (Mirai)", "value": "3c36ad0afda4ef2e3c26bb8d0f8fc34709140b717281964779abd7997d82f6a8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175619, "uuid": "756a74fc-a16e-4178-b5dd-d8c619a2c0a7", "value": "T16FA34B25ED796E27C5C0723A51D34530F5B643AA25BC990B3EB31D5CEF18320316FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175619, "uuid": "435ac307-73aa-4567-92ec-18ad1e2dcc8c", "value": "1536:COms1+ZD3TqdNDU8sqZHGXHFj8ONAtY7yZ0DIpaUgvQDfbn:xFYL8NJsxuONA2GPdTfj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175619, "uuid": "f86ccc0c-8cfa-4869-abc3-aab3132b6c78", "value": 99548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175619, "uuid": "b2d19c1f-628e-4ea5-a3d1-3a859aebf024", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19bd366d-f861-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175637, "uuid": "4d096b6d-189c-4c0a-a69c-ac8a3144de2d", "comment": "Malware payload (Mirai)", "value": "ff4ee4f416ad0cff12cc229173fd5ce5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175637, "uuid": "6bebf0b4-10d8-4afd-b12a-9901a32eec77", "comment": "Malware payload (Mirai)", "value": "25c9b703c9c2ad1b47581666c83a90777c2cbbbc97379eb7c04f5333c79629e9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175637, "uuid": "f55e2051-1f70-47a1-9749-32035709082e", "value": "T142532AA57510AC3EE42BA6F780430A59B12173F98942BF27663AFD63CE7E1742C12D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175637, "uuid": "89c042cd-d976-4695-ab2f-39ce75cfb5b3", "value": "1536:XbUUHutJ9F9JgHOrHUIRfAsVWHkHoQkX3TjI8aKuH:XbUUHuBzssHAjiw3nxuH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175637, "uuid": "795aeee2-7bc2-4bee-89ff-df7a8f2f131f", "value": 63200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175637, "uuid": "72280045-c4a6-41d9-832b-0a87ea9de11e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "325d4311-f861-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175678, "uuid": "55a8b74d-09b2-4484-a07f-2c772938e584", "comment": "Malware payload (Mirai)", "value": "5197c4bc57270e0e37babe333cc4b375", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175678, "uuid": "a6f9e10e-70a5-4325-b665-82a6a57337d2", "comment": "Malware payload (Mirai)", "value": "4a216103695814c9887a8177b7643aa9a1a49c1301008da13d25d0fb88a3416b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175678, "uuid": "34574f69-4ae2-4e41-84e3-a25645d3d346", "value": "T11183E84AAFB21FBBE4ABDD3305A6074A389D650721B53B3D3A74D81CB61A64F05D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175678, "uuid": "65e7a831-0f4f-4496-a22e-dc0fb47d53cd", "value": "1536:Y6eC0557ruogqP5/2uomY/ge3mz0stqtYC9tFMblM81ixuZm/blK9caQZfqFX39o:d/4jY/lbanvP+Nw2mQA50", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175678, "uuid": "c7f70344-4c4e-4715-93bc-e80cd9f304ff", "value": 84576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175678, "uuid": "088cc9e6-c588-427f-8db4-8bb33ce3686b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83bb9c0f-f861-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175815, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175815, "uuid": "beccb701-2391-4a3e-9faf-8feb64956b45", "comment": "Malware payload (Mirai)", "value": "7382fb70ee182f3e633db7a1cbfdb7eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175815, "uuid": "e0103e2a-123d-4c43-96cd-c9c80ade1345", "comment": "Malware payload (Mirai)", "value": "e63735a4dba02583f5a9effab8999ea1b07e67d2f02ac5f5cd243097d9e450e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175815, "uuid": "2d0d802c-c613-4452-8bf8-7afbb7002b23", "value": "T116B3B64B6E529F7DF32C82354BB38B36A659238233B0C185E66CDA405D6038E586FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175815, "uuid": "2553970f-a0f2-45a3-8cbb-0d71afec43c3", "value": "1536:4WHK6OZBDbRDbySb5D7GfkuKZtC+TSvI9ovw9+HF2/bXI:4T6AlCfkuKZtC+TD9o/F2/7I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175815, "uuid": "c3c8a65a-c956-497d-bffc-f75b5ce5726d", "value": 117452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175815, "uuid": "d6e0395d-a11b-42a9-90ac-47963746a12a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "938d7584-f861-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175841, "uuid": "765935a1-a79e-418d-bc9c-292711c0393b", "comment": "Malware payload (Mirai)", "value": "02831f3bda82aa8bd7cbc0c2662c8298", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175841, "uuid": "c9fad3fa-7897-4560-b764-a8b8cc361f15", "comment": "Malware payload (Mirai)", "value": "52cea539ff1e7522d4f1d484809c0f5e506955341b9930cc036a41bf9b78e129", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175841, "uuid": "7dfe3a0f-9a18-4f39-b332-9ef30e27085c", "value": "T1A5B3F80ABFB11FFBE4AFDD3345A90749299D460621B93B393974D81CB25A28F06D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175841, "uuid": "74ec62ab-753b-43e5-b50a-9e5673e09ede", "value": "1536:EoXwI6q/ukgm35/KmoINyW23aH0UJqhYCRibRc81OhulO/cKClmZfqFX39wu7r8N:EYVfNyqhlNciwuoQgIW5j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175841, "uuid": "9aa5187e-e219-4bf6-96e7-29981286d565", "value": 111604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175841, "uuid": "2120f026-902c-4311-8608-f340dcf4dcf9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b7f0524-f861-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175855, "uuid": "5e4d8367-375d-43bd-9acb-3aab98912ccb", "comment": "Malware payload (Mirai)", "value": "d68197b58dd70a99d942ae3d2d7d3735", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175855, "uuid": "861cf204-68c8-4d90-bcec-66d19262f203", "comment": "Malware payload (Mirai)", "value": "e175eb2030f608223d693624a1bced22bd031a63e993f230202829571f0e55cb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175855, "uuid": "1b97fc87-4c63-45c7-91d7-740fdc7db89b", "value": "T152B31ACABC818B11D6C526BAFE0E518D33174B78E3FA7113DE145B2E678A86B0E375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175855, "uuid": "496818d5-1c6d-4ae6-961e-58e61c3b35f0", "value": "3072:ZeqnAozfH+Q/EdZfonO2Z/BfXR2bvTRTfiq3MtdS9V7MKty5b:FH+TynO2jf4bv1Tfiq3MTS9V4K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175855, "uuid": "645620d3-d751-4ddc-9d57-f3340c279c10", "value": 111988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175855, "uuid": "7b4c483f-1781-4fd7-8e21-c35051a0d3c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "368b193a-f2ec-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175881, "uuid": "5921df40-0a4a-4391-a0ae-f44a85d01577", "comment": "Malware payload (Mirai)", "value": "7e07feaccaab1d859c02bce12b3aaf49", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175881, "uuid": "b18510d3-563c-4468-b645-c0c90866a881", "comment": "Malware payload (Mirai)", "value": "6ce3e03082e6381112f007b173ae1ec419479a599560bd242bd51a35eb4358a5", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175881, "uuid": "c20c0d5a-5e7f-4de6-b06e-8a58f92da05a", "value": "T1B0430234B31101A2ED1809300B774B9D232E0FFA51477932A15EFE976D560E9DE03E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175881, "uuid": "4e7d934f-7358-4e54-b887-546e3d59d686", "value": "1536:u4kKad2CGj1NUqIpaBotfHathOWSQEbysFNVJuU:byqxt5B77CrfVQU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175881, "uuid": "55282b05-2de1-46fa-a8d4-1e09564c1329", "value": 58232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175881, "uuid": "f4e562fd-5e0b-4aaf-b722-0b8fe65e0f49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36971ab3-f2ec-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175921, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175921, "uuid": "217181ca-ff07-4d0f-978e-33b1291360d3", "comment": "Malware payload (Mirai)", "value": "7a3749cd321886a79d03bcad15cf8519", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175921, "uuid": "0881381d-8f70-4ccf-9477-519116a018aa", "comment": "Malware payload (Mirai)", "value": "7b178cce65dc25e492e52a865d899c7b7ade906b1937f8d82a95a39eb7d4c38f", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175921, "uuid": "6d5a035f-caf0-4908-8465-fcc31daa39d5", "value": "T1B5043BC7F901D9BEF80BE77648170915B630B7E210924B337257796BEC3A0991927E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175921, "uuid": "9a0b8ac2-42fb-4470-86ac-35c7ab6f8b1b", "value": "3072:Bptx/9kVkc9Uck8m+9V64KJ96mVNKVijbi+L64ASMyGyJ/uh/FEGf:3tx/9kVkum+9VFK7jVNXLOyGwJGf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175921, "uuid": "435b2ce7-3f36-4c10-9361-11f77edfac91", "value": 175744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175921, "uuid": "7ad5150a-23e4-4e24-8ce4-7e41db22c1d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3221aef-f861-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175948, "uuid": "1b840ad8-84ab-4fea-9ee0-beb03771377f", "comment": "Malware payload (Mirai)", "value": "c14461f9b0184ec4fbd5f31cabcddde5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175948, "uuid": "b080e515-53ca-4381-8570-5983dabf1605", "comment": "Malware payload (Mirai)", "value": "d793a70419c23f60a095946235db264c70a5606d8cd8c62ed2f6d8967efe0105", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175948, "uuid": "130a31ac-62db-4122-91c1-005d9facbc6a", "value": "T11F931CD6BC81CB11C6C166BAFE0E518D33174B78E3FA7213CE185B2E674A8670A3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175948, "uuid": "dc50b655-ac0b-4979-bc0e-a50ed594da70", "value": "1536:f9n/GxuHji9jpt9YbFAh5oEDTYfo/Nssm/pQ34K7sJLpjMWsA/5blMliTwMg7tC9:kuDALqbKh5oED8fKsu4KULpjMW/wMg7+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175948, "uuid": "f668440a-8a1e-47ed-a869-cd0d1b898918", "value": 95472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175948, "uuid": "8ecaacbb-cf21-49a4-ab61-7142f97b6d75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "daf2b435-f861-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175961, "uuid": "07a57fc5-4281-48c9-9c9d-e5a2914b3294", "comment": "Malware payload (Mirai)", "value": "62d032e1ece110b98966c7ddbff3b3d4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175961, "uuid": "0833c672-a4d5-41cd-a37f-81d19e222a86", "comment": "Malware payload (Mirai)", "value": "1068de113f54c8a8666e9b945eaa7042bfe774b2b11d0e8d986fe1f3f08695a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175961, "uuid": "1c974f2a-916a-41cf-a9e0-84e28120b972", "value": "T16604885E6E228F7DF668873447B78E25976823DA27E1D644E1ACC1101F2039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175961, "uuid": "be91ef1f-3f3a-47d8-85d8-a685620930a1", "value": "1536:yl2JvnXPvLDQ+chMJdDNsCK9HFP18tOQGgezLiM+C27TfF+h/iuf/P/z4d/o:ygv//cwZsCK9ltSOQ+LidFS/v/Pb4Vo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175961, "uuid": "3dc50b3f-6402-443d-95b6-e5d1ff2cf726", "value": 173796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175961, "uuid": "8d9230fc-c8f5-404f-bdd6-baf1b446f3ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1dab032-f861-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769175973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175973, "uuid": "7e3ebe3b-1179-4e61-977b-12caa765ec04", "comment": "Malware payload (Mirai)", "value": "0e87d8b2b218c6e9b5754094ba33b256", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175973, "uuid": "4793e699-acb5-45cc-ba3b-f974b4be6a95", "comment": "Malware payload (Mirai)", "value": "ff8c3de859887fe84e8a92abd7276782afd74bcad0adc3592782fcd5826b4303", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175973, "uuid": "973bd65c-7e56-4c2a-a377-4a552411b9d2", "value": "T14F632995FC819613C5C022BBFB6E428E372653A8D2EE72039D256F2137D785B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175973, "uuid": "f97752c1-4d0d-470f-a23a-e7c4b76a5174", "value": "1536:RpfDF1JYaUZfVeLz8SoyaF3GipcFOEEd:RpfDzYfwLzZoyWpqId", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769175973, "uuid": "f4ca48f9-a344-4063-8512-4ecfe3affe18", "value": 66952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175973, "uuid": "6cda89e0-0fc4-4156-bedb-267e3840c9f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01e6a2d2-f862-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176027, "uuid": "70f3f449-28d5-4eee-ad13-2450b4d18e8d", "comment": "Malware payload (Mirai)", "value": "1d6720765e806c244b9243fd44d7482e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176027, "uuid": "4bfd2a0e-1579-4b9e-8dc8-2a1a68ed1ecd", "comment": "Malware payload (Mirai)", "value": "6045e9650290b610870f6a08346537a4920617e3af78f060c03f117de712b292", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176027, "uuid": "4ba3c6e8-fb14-482e-8365-7b90342054bc", "value": "T18763088ABCC5C202C5F060B2BB1E55CE375643B8F3E2B157DC19AB29671F86B0A372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176027, "uuid": "0c8d58f2-0986-4ec9-b91b-97d0dfd5052d", "value": "1536:Z00sQsToPt/JybD0DcM4gR3d32qzmpal5:ZDsB0Ly00S3l2qzAal5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176027, "uuid": "a0b6f9ec-1cc8-4578-b2bf-6fcba0d20f4b", "value": 68440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176027, "uuid": "0bd52336-665c-4ac7-9c0b-014dfd7cd1de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02f3f199-f862-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176028, "uuid": "967a83ca-c939-4fa9-8425-d940febf39c1", "comment": "Malware payload (Mirai)", "value": "2e9bb71a0a2cd6786eb44764eac4a049", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176028, "uuid": "0b81e927-e4b9-4701-9e7e-d4bbc3c39e2e", "comment": "Malware payload (Mirai)", "value": "d4a7ab256aab8449b3da1e658dc9c50ad3b9401e858642c7c4d54750724c6127", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176028, "uuid": "b0e28e90-c796-4468-974e-89d37ad0a402", "value": "T17E836AC14242E9F1E919017CA17BF337A532C97802A8FDF7F7546A32B825960B18B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176028, "uuid": "a26150b5-ce5a-4ea0-8f47-0aaa841f3bad", "value": "1536:L4COPqifHf/SL4E8+6adUCsmTz2Hb72PB06onBLrBzvWnVWoBcxxHLme0NfOedsR:LJOiQ/KsEbpTTOb72POdtbzjavBI2u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176028, "uuid": "c2aa9c76-7e16-4526-80eb-80aaa86118af", "value": 84308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176028, "uuid": "711303e8-b96c-4e6d-8ec8-f85990cca3ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11507fcd-f862-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176052, "uuid": "74cc82a9-7f2c-4548-b74b-a5b45c9148b6", "comment": "Malware payload (Mirai)", "value": "5d9a1b6c2de47f0fc22a88efe992e5f7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176052, "uuid": "f6ca75bc-b28e-46cb-a2c6-c658b10c3f44", "comment": "Malware payload (Mirai)", "value": "7a3798b4040955d8c9595196f08061dbce4c8170fecbadd7a8bb6a5080fb49e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176052, "uuid": "29cfc9fe-43bd-49bb-a3f7-d8b4802af4e6", "value": "T14183B74E6E939FACF32C87344F739B3BA655278633A0C185D26CD9416D6024E586FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176052, "uuid": "096e9de3-16e1-4265-95ac-a1a326dc74fa", "value": "1536:ysxCRRmyyH/eN2eNuyNv7zB2OW/+rrprw/ylax5Y:TxY0yAazB2Oty/ycx5Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176052, "uuid": "87196f27-bc2c-42df-aa0c-0c001308f765", "value": 84576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176052, "uuid": "b74eca1b-8a3f-4c84-9fed-2310bb665ee6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c6a023f-f862-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176071, "uuid": "ab5ee36f-c3c0-4007-a0ef-148f22f2aa5b", "comment": "Malware payload (Mirai)", "value": "fd4e4b1d398eb24a101e1e5f774b917d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176071, "uuid": "06ae4087-4656-48f0-a939-4fa0951ff6f9", "comment": "Malware payload (Mirai)", "value": "e45e5c7f45a95291fc9a7da2d1e536ba327fe9ff84587834d2689c1bc9e8c2d0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176071, "uuid": "2757f86c-3079-4fcd-a4c8-d744191d5592", "value": "T11904D81AAB550FBBCCAFDD3706E90B1139CC954B22A83B363674D528F54E50B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176071, "uuid": "a701120c-b7a1-4a1c-95d0-f970ee6a5e05", "value": "3072:OeEksFM+wXpOgaVB8H3NaMFuDbcpB99k+rhsKb80:OeEnO+wXwVGdaMkD4pHi+Po", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176071, "uuid": "b08f8f1d-7d2b-4749-9ac9-1411eb8ce5ab", "value": 177860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176071, "uuid": "7e94578d-031c-4558-8dfd-72174c9ecbc3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d36b867-f862-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176072, "uuid": "ff2484c6-e8ef-47f0-986b-94c1258b7d6d", "comment": "Malware payload (Mirai)", "value": "bbcbc7e040d1f8f60a7deba31926041d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176072, "uuid": "d89516a7-5ffd-4b6e-b5cf-c996e9d107e2", "comment": "Malware payload (Mirai)", "value": "a258215ef6aeb452aab3bef0cc7650f8f0905e80f68a3b5b439a105ca43cdeb8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176072, "uuid": "1550157b-7e8e-43cf-9aaf-8afedca274c4", "value": "T1DEC3080ABFB11FBBD46FDD3345A90749289D560621B97B7A3A74D81CF24A28F06D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176072, "uuid": "bf78f812-b81c-41b6-a8eb-c9c03d405e40", "value": "1536:Xr4wLpuvQukgm35/KmovxJJK3aH0UJqhYCRJbRc81OhulO/U+TXDZfqFX39wu7rC:XkCAFxJyEXsoiasM5qU6PRjs5/T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176072, "uuid": "feba0169-b9b2-4ec1-88d1-c6e4f4801473", "value": 121548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176072, "uuid": "cde11708-8f05-4be1-8d87-ab0eb9cb0902", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64d37a50-f862-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176193, "uuid": "39bf7b45-3657-4b27-ae09-6e983862d7a4", "comment": "Malware payload (Mirai)", "value": "98c31688e71fd2a70f3e752897abec00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176193, "uuid": "eac5ec37-7ca3-4c76-9ad8-02cfb211e0c6", "comment": "Malware payload (Mirai)", "value": "3e0a775813e54987ef01d1c06b546679d25eea27087cb9fab9bcfbd558bfc1d4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176193, "uuid": "bd580083-f7dd-4b8a-b73d-4f97159d5375", "value": "T111B319CABC819B11D6D566BAFE0E518D33134B78E3FA7103CE145B2A638A85B0F7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176193, "uuid": "2183bb4a-a291-4106-b54d-642809488a49", "value": "3072:3lkipR5olQoEO8fnPvOv+HFrcWK/frVUunR6a6UQ0Rs1fVC6TZJ/:kll4P6+HF/KrVU6R6a6UQ0a1fVfT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176193, "uuid": "9f04e988-58b8-43a1-934b-b1dcf660d548", "value": 114224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176193, "uuid": "e44f2853-59cf-4704-adbb-63fb92a6097b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e32a24c-f862-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176235, "uuid": "f1b349df-b841-4e6b-9773-f9966048f786", "comment": "Malware payload (Mirai)", "value": "cb48cf7add7933c464425d54bcdb206e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176235, "uuid": "e75c28b8-d445-4287-8d40-064284a63c95", "comment": "Malware payload (Mirai)", "value": "7fe3a021c593e3b973e118a90e9866958291cb1aa795ad56c0a888825a78bde6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176235, "uuid": "4ad4fc7c-e420-4b83-90f2-d96fe7dde893", "value": "T19F83B91A2B21DFFCF6AD833487B3C6746688329126D1C298E55CD70C2E7424E594F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176235, "uuid": "a45fa9b6-12c4-4716-92e6-f1e736ce9e12", "value": "1536:Jjes22juECawrpuCGi63kFmzQFCpqu+BcjCb6Z4gfgM0Ezzc9GD7Y9GsPgo11119:Jjes2aHCawB1bIfuh9zB/5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176235, "uuid": "9ad5ab34-6732-47a5-b27f-ee02b00f4ab9", "value": 83076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176235, "uuid": "d2f2e930-9f5a-420e-9b43-740984bcf428", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "936085be-f862-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176271, "uuid": "b6fb9d90-7377-4881-9c01-1fc2b3ec5a51", "comment": "Malware payload (Mirai)", "value": "73e1591277ca9ca88f8982a596b1dfda", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176271, "uuid": "a6e57424-6362-48a3-ae19-1e188e13ca51", "comment": "Malware payload (Mirai)", "value": "1fe8601eada9215a40c41f88436f6aeb75fe176fd828a39504bfc3951d085137", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176271, "uuid": "50450d23-c9ea-4461-999d-69f5f194e8e1", "value": "T16CA3199ABCC1C212C6E0B1B2FB1F51CD375643B8E3E6B1478D19AB29674B8570E3B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176271, "uuid": "da58df6f-2ad0-4dc3-ad25-23ee8c5b9c90", "value": "1536:PziyY7HkCF0UVh3p9N4K/cQN7I+4SelxTJyHPaR+u+rvh/b:P+ySEAn3CicQxI5DlxTEPagLh/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176271, "uuid": "0d5797d4-77ce-4b36-a93f-11f653f7b913", "value": 98296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176271, "uuid": "b317ffa2-8eae-486d-95d4-a9542c7e4082", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a97d29d7-f862-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176308, "uuid": "53069206-8187-4984-a98e-fec7a29ad268", "comment": "Malware payload (Mirai)", "value": "78cbc635fcff7f86dd390ba0226be016", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176308, "uuid": "d1e4aae3-9558-4ad9-b467-958d1f804145", "comment": "Malware payload (Mirai)", "value": "a30667d7e0767a6ddd21bcb4e6e367d243c5dd03cfd9fe0e7c34e0b80a2d38e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176308, "uuid": "bb03bce0-c03b-4aeb-a733-497db9285469", "value": "T15A833AA6B400DC7EF85BE2F380470B15B324B7E54E52AB277627FD27DA2D1681C16C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176308, "uuid": "9802f8fa-6d59-4f04-a3f9-6b05c91220a6", "value": "1536:0SZp5GJPX8uv/hEyv2OSRfb2spMKuIRakPe4tJL89WTNS8c8HUGuSy:0SZp5Oss/hncyuRlVLKWTNSZGux", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176308, "uuid": "2a85e612-7f67-43e0-9d66-8252db9a8cf6", "value": 87240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176308, "uuid": "402544a3-96c0-4f06-897b-7c6a39a9344e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6f4cd8c-f862-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176357, "uuid": "e40d3f82-4019-4776-98a1-505fdec36d03", "comment": "Malware payload (Mirai)", "value": "ae821d2932d158db64b8ed75249f0a9a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176357, "uuid": "34b5aea3-f381-4236-bce1-11e02084b161", "comment": "Malware payload (Mirai)", "value": "3a898a23193f0e3e4c40704e786666d41b892ada47ac9b73b9ecda29e36fc78d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176357, "uuid": "15667a01-78d6-44e6-8195-3108dd752fe5", "value": "T1B6631901776A4047F3E75EB22C2F6BF057AED6A231A0A185595FDB0F8134A321586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176357, "uuid": "fa634fde-78f7-4324-895d-d9d071120c3d", "value": "1536:5ytqEH4O8o4V6ItIGkrLYIHiv2kDd3Rnb/oRhS/Ewtk54:FO8oQ6LOdBnb/0S/Ewq54", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176357, "uuid": "7559c3c9-0000-405d-a70b-6ef59950a1a1", "value": 66864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176357, "uuid": "50ed18ef-c2a4-4e43-b080-08c0a6169193", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3c09259-f862-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176406, "uuid": "804c792a-dfd7-4ad6-8f8b-08ac28743e5f", "comment": "Malware payload (Mirai)", "value": "328b1cae7253495e76fe0389895f9a36", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176406, "uuid": "8625f346-f2f0-4b5a-ab06-a6d0f01f5249", "comment": "Malware payload (Mirai)", "value": "cb50b25b6f92409f629ffec8c4284fca41509f5c93b960ea1e85af41964c175f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176406, "uuid": "7d4f1d01-4c02-40ad-81a0-1c89f590363e", "value": "T140835AC14242E5F1E919017CA17BF337A532C97802A8FDF7F7546A32B825960B18B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176406, "uuid": "0daaf3a6-d0c5-4b7c-b77e-1daf19698ad5", "value": "1536:L4COPqifHf/SL4E8+6adUCsmTz2Hb72PB06onBLrBzvWnVWoBcxxHLme0NfOedsE:LJOiQ/KsEbpTTOb72POdtczjavBI2u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176406, "uuid": "46e00054-6470-46f1-9108-5df14141f9ac", "value": 84308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176406, "uuid": "48c67490-f7bb-4c1e-bfd5-90279a3753e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01c86dcc-f863-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769176456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176456, "uuid": "1319e71a-29bc-4352-ad51-c557306eb473", "comment": "Malware payload", "value": "2bec6d11716017695ceab5ee457c54cb", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176456, "uuid": "e64277af-bffa-4f2d-ada2-4ed37473298d", "comment": "Malware payload", "value": "39009116e5c7dae77693a1ee6162afeebf557277014c0245282450f2fa26d866", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176456, "uuid": "6eca07ca-7115-4a86-bc07-016d1c7e5680", "value": "T1C205E6642811817BEC9B52F461FA2FEE59DE1E100B80EDF791C02F9750726E239729", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176456, "uuid": "72e05b22-760f-4d9d-8ea0-dc3cea5d66fa", "value": "3dba82b9bf867c8cae19b16a3b46d075", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176456, "uuid": "8fdfd544-c94a-4cc2-b260-b784af754a22", "value": "24576:08Dh4ZpJ6A+imkouFDEU1FvJKaThOfFB0IR8JUodWmIsjH7Y/bTI8bLcO2cdx7l:pNs8pc6x7l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176456, "uuid": "1841cc1c-19a4-4659-a4a3-c9f87e3ba75f", "value": 804864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176456, "uuid": "4dc79856-2452-4270-ab9f-99483e151676", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23fa6b64-f863-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769176513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176513, "uuid": "e7082ffb-de30-446e-a117-d4693acadf74", "comment": "Malware payload", "value": "45404e33ce0c2f6a495bebf11a1ed14b", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176513, "uuid": "49e0cd05-0fd7-45da-a1fd-cb5789aa943a", "comment": "Malware payload", "value": "e5853b75d78142e271c7b390cf473ff9c4f6e6905a92f0963703b17c47905dc4", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176513, "uuid": "3e26f183-52f5-400f-940a-b2adf672d7c8", "value": "T18FF4F9B0A8118066D89F12F056FE2FFDA59E0E501790EDF3A5C06DEB04712E678B29", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176513, "uuid": "65102469-2c27-4bcd-8333-8e557986f80a", "value": "4bd229834078747e818e52da30b244a8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176513, "uuid": "fee8cf5b-2e4e-4afc-a389-ac8139cccbbe", "value": "12288:YLu65bzQxmWmDv+8yUNqWlUluKRob+WRm3ULipKMfgS0PPuiredThLIFsr//NJK4:YLemDv+8yUNqWlUluKRob+WRm3ULipKi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176513, "uuid": "c1a605bc-5fc0-4a8b-83c6-93a03567b27c", "value": 758272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176513, "uuid": "5addc44f-a014-4d8b-a23c-be925ced3910", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d46d78e-f863-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176556, "uuid": "18a5bbea-ea03-4043-8e2a-9934b197c8aa", "comment": "Malware payload (Mirai)", "value": "a9c8e1aa2907dc36e3669a7b32afd9e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176556, "uuid": "33782025-1492-4f4e-b6f3-b49cad3fc9b6", "comment": "Malware payload (Mirai)", "value": "a50c71757f65544bfd75080610572672faa4d47e89c1ef2eb91c107f3b7044c7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176556, "uuid": "02844939-c951-4cfe-9052-4dac09878332", "value": "T1E2838D12CCB99DA8F07A3D7010B9CABB5753E549A90B6CB73C4782650017E98F4A7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176556, "uuid": "5c21f3c7-7c43-41da-a240-ab131804b3c1", "value": "1536:I24NeYIKvEd+L//rkZVAhJJsI8JtLuYPhHuKqBC/HFlN5b:I2KeZV+L//rOVAz6vt3xqBOlr5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176556, "uuid": "b2b59d07-284b-4934-a00b-e1ff5ca2ca8f", "value": 84756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176556, "uuid": "52ff671e-d497-4b7a-a05b-b655dcb3821f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b928d55-f863-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176633, "uuid": "0603917f-6a6f-42b6-b2c2-7806c4256558", "comment": "Malware payload (Mirai)", "value": "734c09ffc6e9f06625a837a693d376a4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176633, "uuid": "c0c87164-b12f-414f-b6aa-a993fbfe50c5", "comment": "Malware payload (Mirai)", "value": "1324b7889d04146a419cb1b45168e0fedc8b4bc51b962f0c09a23e0274de7197", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176633, "uuid": "7e7d2220-8bb7-4b1e-a08e-5e989509909b", "value": "T16C430B95B982D612CAC07677FF4E42DD771643A8E2FE73039928AF24278781B0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176633, "uuid": "1a7f94a8-538e-469c-89d3-727ac1ce4ff2", "value": "768:3W6+f1e9irMOCN3K+oqTdubeAZcf7d3jYTsetIeEh1ROvqPXstOw/b:Me9oMFN3tcZcf7dTteWnXLw/b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176633, "uuid": "29426937-6f20-4b39-86ca-45cbd130e68c", "value": 55200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176633, "uuid": "202ac43e-c0dc-441e-b3a2-c9453e179df3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70f7b6bf-f863-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176642, "uuid": "f5b1c069-39d3-43fd-b6ba-e2f48eeee62b", "comment": "Malware payload (Mirai)", "value": "76355a7e93d77bbaf1d2fd2cbac88113", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176642, "uuid": "3914ded1-86b5-49da-b6cd-71691ee3d411", "comment": "Malware payload (Mirai)", "value": "1486692ab8793bd206dc95d4fb22b3cb9ab7f96b1b0cc4c0051821e4800455ec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176642, "uuid": "4860706d-c6b9-4a30-98e3-8ddf3010913d", "value": "T1887309CABC848B11D1D526B6FE1E218E33134B78E3FA7113CE185B2E574E86B0A3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176642, "uuid": "539d61c6-7b73-480c-ac04-7084838959a0", "value": "1536:zdntuEjF6j9MtiiFF84lLdEAqYf8W6sqbaMrbIMxirfp2VBu5:TjcBJaFdlLdEAPf8x72fp2VBu5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176642, "uuid": "c1778ea9-96db-4ead-ba6e-6b56889d105e", "value": 74956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176642, "uuid": "10d2f63e-37dd-40b0-828a-588e483deb7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e5f3dad-f863-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176665, "uuid": "295f5891-3493-4c21-9939-9ea6bed3ce82", "comment": "Malware payload (Mirai)", "value": "f44152d444ab0ea36e93289fcbefccc1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176665, "uuid": "e63944c7-ac0f-4eb0-962e-1cf271d45112", "comment": "Malware payload (Mirai)", "value": "8ef49840fae854019ea3526b01f28e8d6e263f8cd71867264fe6b21dff139a22", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176665, "uuid": "e2a84982-0944-497b-a6c0-bd3cb28c5ac7", "value": "T1BDA3199ABCC1C212C6E0B1B2FB1F51CD375643B8E3E6B1478D19AB29674B8570E3B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176665, "uuid": "9f1514a8-b9a5-4c4e-b76f-eafd88f20f84", "value": "1536:PziyY7HkCF0UVh3p9N4K/cQN7I+4SelxTJyYjqR+u+rvh/b:P+ySEAn3CicQxI5DlxTnjqgLh/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176665, "uuid": "810facc4-a677-4162-a39a-c959dcf10cbd", "value": 98296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176665, "uuid": "57cfb4ea-2d07-4dce-9427-db24791eac8e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93b616bf-f863-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176701, "uuid": "87612781-bdf0-4c67-ab0a-fcc2332c6a38", "comment": "Malware payload (Mirai)", "value": "066e08b98fab7cc1ad8ab280516b422a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176701, "uuid": "91c11327-f29b-4459-8b6a-b0f9e2237256", "comment": "Malware payload (Mirai)", "value": "576cb1eaa0aafeedceaadba91926b6ce077a5352fe20d4a7a72f8c660ce4618b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176701, "uuid": "70278188-8ff5-4062-87d1-3a22f927761b", "value": "T110934B25ED796D27C8C0713A51E34630F5B6439A26BC990F7EB31D5CDF18620312FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176701, "uuid": "0d21eed0-0aad-4a1e-a5ac-dc824818bfd2", "value": "1536:jNj6kOpQYNzdhsYECroHQXwyHErh5XNA3hVHQjHh29sURkwJbF:jd6VHlKCSrbNA3oNaKwJZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176701, "uuid": "57680a44-b63d-4b9b-974b-ef53f997dd35", "value": 91668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176701, "uuid": "705ed95a-16f1-405f-9b31-a4fdd62814ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ca6603c-f863-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176716, "uuid": "bcdb6b29-664e-40bf-8f47-02a0185a0ad3", "comment": "Malware payload (Mirai)", "value": "c4e0a87b7e6559d78d474d55a566729b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176716, "uuid": "a363bf9f-561f-4a4a-85cf-e38dd15c6005", "comment": "Malware payload (Mirai)", "value": "9965150270d520b55bd17882fe39997bc5365b150667ba664662a5a50732a310", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176716, "uuid": "5017f963-b7fc-4683-a42f-e1922875d47c", "value": "T15E93390273694447F7A70DB1283FBFF157AED5A121A0A285685FDB0F8135A32158BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176716, "uuid": "4ce1b37f-0295-4987-9ffe-7f41102fe2e1", "value": "1536:yPhFH5OjRy/6oSGkrLYIHiv21mCs7mn9czJLdCdgS9pwd01GLsJj5bE:iOjw/UeCs7EUJ0uS9ah654", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176716, "uuid": "64fca7d1-c2a3-4b8b-a33e-a2e5b69de45a", "value": 89080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176716, "uuid": "c6104938-8478-47b3-aec5-268551a27d4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af15f145-f863-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176747, "uuid": "149d0316-2506-4351-b228-1161878e8a7a", "comment": "Malware payload (Mirai)", "value": "215f883a36103fdaf3595cb2a6b4089c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176747, "uuid": "b00b6a36-18f5-4784-a5d9-7c9fe5babbbd", "comment": "Malware payload (Mirai)", "value": "8a620fd9ca2a89a1f5ede265fe065a5b8e670cba751b08d326daf99526bc2b83", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176747, "uuid": "6c3d7dd8-3aa6-4b96-8555-af62632f02b6", "value": "T139633B32BE761D67C4C4703A61E70635F2FA434721BC8A2A7D720D9CAF58644325B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176747, "uuid": "37e0f374-3a31-4e75-beec-cdeb61f2eb11", "value": "1536:7aMCR5fWScHJRSNAXYGcyZ07GLomjawA0fb6:WN5JNAIylDi0fO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176747, "uuid": "85028bd5-8b6d-4d74-bcb2-ce00f3cd54ee", "value": 66780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176747, "uuid": "a5c64b15-1eae-42bd-8a2a-81c761a2715e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b228a657-f863-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769176752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176752, "uuid": "91887021-ad3d-4afb-82b1-e6f408340e8e", "comment": "Malware payload", "value": "b93be8b00d1a90cb4fd39b9b853e2a9b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176752, "uuid": "a9b67669-63af-4558-b389-8451790c4dc5", "comment": "Malware payload", "value": "faf6a0fc41496dd6eb52603dd49e346810d69056652bc6d4b2b5b99ce5ba037e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176752, "uuid": "34c9f2be-a914-4fff-bef9-97432b625d2b", "value": "T1088309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176752, "uuid": "2ee15a51-b640-48fb-a6e2-399345f47316", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn6WaRVN/:XEKltp9txAX/yr2pb6W0VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176752, "uuid": "2dc0e48d-781c-40b2-a516-e4f3f12c22b6", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176752, "uuid": "c7aeef09-db0d-4bf8-aabc-b6eb6d82753a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4ecb72b-f863-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176783, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176783, "uuid": "2855ec76-0344-42e0-921d-2490e5d888c7", "comment": "Malware payload (Mirai)", "value": "e1688501e993e8a08c97ca512aeca730", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176783, "uuid": "08e73217-6c7e-4ad6-81ce-db0d0df03c40", "comment": "Malware payload (Mirai)", "value": "0a401ef20221ec54fe4a873b7ef0953676001ea80c74c7114580d8ef3d0ff739", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176783, "uuid": "1253a841-7d00-48fe-9d09-d4e452da74db", "value": "T14AE32AD7F800DEFAF80AE33748530905B630B7E245925B372257797BED3A1991863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176783, "uuid": "bfe0fff3-6950-46eb-94bd-13b7bdde5800", "value": "3072:SuRsZR504+TWvhKyZAjAzyslYtVrjbiQLrBXEtycwcEO:zsOcjZ4AhlY/LrBEyczEO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176783, "uuid": "dd11395f-9ae4-4b23-a86f-424404aad614", "value": 150496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176783, "uuid": "f6916f31-5829-46e4-98b9-1e476889efe8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "069956aa-f864-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176893, "uuid": "4fc87bae-208c-4cd5-978b-336055334e0f", "comment": "Malware payload (Mirai)", "value": "1e92409cdd401b3ab474e6b278233c86", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176893, "uuid": "2c0de7df-8459-4b1d-a8f5-ce872504a570", "comment": "Malware payload (Mirai)", "value": "2d92919811b20e5477bbcb50f312e6f14f8a5a3bbea8b323c3e4dfaa8f1e5c87", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176893, "uuid": "bd522e23-ff8b-46ac-a776-2aec74715b89", "value": "T174432A93B404ED7DF809DB7385570A06B275F6A50E530B737333A967AA760C8093AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176893, "uuid": "319e1a1d-4736-4179-beb7-c4e4068f17b7", "value": "1536:+H3SOqUYBt3dRNpruPaIsDHBU33Xnc3k8nXPuSK:U3SNrNRj4PsUnXnc3VPuJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176893, "uuid": "f8ad61cf-5d61-4ac7-8395-84ddccb11004", "value": 60312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176893, "uuid": "dffddcb8-c168-41dc-ab81-7093e381ab44", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "152a3d8b-f864-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176918, "uuid": "af74a314-a71a-4481-858e-ff7e553cda87", "comment": "Malware payload (Mirai)", "value": "67a0cebd7e74d3af3397fc8fae77860e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176918, "uuid": "d283c772-64df-4e2e-b59b-3c0601211296", "comment": "Malware payload (Mirai)", "value": "5f0d962ef96aec45df07b09525e5d70f9ebdb282c868f5d80bcf54ce089cdef6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176918, "uuid": "1133ef0a-8a03-4635-8182-f1eec3c6a5aa", "value": "T103D33A17B5C180FDC4DAC1B44F9AF53ADD32B1AC1238B16B2BD4AA221E5EE315F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176918, "uuid": "fec8e5fb-718a-4dd6-97d7-0d8c2979f243", "value": "3072:tGtwnNiaOnUTuFyPT9OSQb9OaogjV2a5li7CFkzASQPdL:tGtwnNiaOnUTMZL9pSQPd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176918, "uuid": "390b53dd-0f3c-4eb1-99a9-b5d31a99640c", "value": 139576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176918, "uuid": "b4daf3f3-c70f-4399-9857-4403caee83ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2118da0f-f864-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769176938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176938, "uuid": "a61cb4d8-5e6f-436f-b474-f1de78650284", "comment": "Malware payload (Mirai)", "value": "35657279be8dcea502afc6251b954e8e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176938, "uuid": "69bf5ee2-77c5-40b7-b25b-81dd680fe1de", "comment": "Malware payload (Mirai)", "value": "e59937d217056f88ca7fa74c717cc8279fad96ebc3a2d3aebb11df4194a69237", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176938, "uuid": "9548753d-34cd-4e0c-9f8a-683e4f7b9288", "value": "T10F930A46B9419F12D4D621BAFBAE414933136FBCE3FA7102DD20AF54238699B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176938, "uuid": "e4ada7b3-8679-483b-8625-22364cd9581c", "value": "1536:UAn+tB/UOmIV1sxRuh8RBrIeaY79y5oNTYdNlTiiHsu3+nKHZFYHrs+T7:Q/rmysxRuORBrIeaY79y5oErsu3+nKHg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176938, "uuid": "10dab888-be3c-474d-9f63-ae0456befbca", "value": 94984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176938, "uuid": "a195ed0e-1429-41da-b49d-ca0ef597cf3f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3aba1825-f864-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769176981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176981, "uuid": "95c931d6-d6bf-44f1-8a60-e560c28b4980", "comment": "Malware payload", "value": "8f058935477c05b054373ed1db839902", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176981, "uuid": "803b1a92-2338-4c13-8fc5-a95ac76eaae0", "comment": "Malware payload", "value": "e817f23928542ddd3b617153beee06fefa09bb177534fe739b2b8d1e5250111d", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176981, "uuid": "299b79d9-3314-4d8f-b3ab-b5c764eeb2e0", "value": "T123F3236222A473BAF0918936492E45F7DCA89781133BCD7C7049F5AF7224F68E9774", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176981, "uuid": "c00e5f3e-f25c-4cc6-9c04-059500e890ee", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176981, "uuid": "ddff4921-ff2b-443e-864c-828abc046251", "value": "3072:Z9mtEH5j20NXVnwfdfwmEZnWoqjLFX5lYL0UGcNAZkCawCQDGfMeS+g:7aExvXVCwmEZnWoqFX5lOCZklj5fM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769176981, "uuid": "fd64e8d4-c395-423f-bfa5-93fd9b48688b", "value": 172032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769176981, "uuid": "2a9a1ed7-a91d-46bb-8de1-4613874eddff", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5de35078-f864-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769177040, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177040, "uuid": "92824731-0e87-4e70-81ae-45c73839ea88", "comment": "Malware payload (Mirai)", "value": "7104dc2f43351da5b90a4ac26c579404", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177040, "uuid": "94edbe8b-60d8-4be5-accb-2ee6f9ebd9ab", "comment": "Malware payload (Mirai)", "value": "3d2e7343f160704591fd03b539d0d19d06ffefba4127a51dab7ba1a4faf72f6a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177040, "uuid": "f77a1aab-49dc-4682-a171-abd05b3c3f73", "value": "T1F9332907B9219F16C5C50A77FE0E53893311A39CE1FBB2029D196F6637EF45A0E2E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177040, "uuid": "54e6e4d1-95c2-41ed-8580-45bdcf994964", "value": "1536:caHxvuhFp6rMKZ8BSaX2rArseVwWLuF80xQEp9GsPg3+M:cgu3kPZ8d2rgsUlLuF80xQhH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769177040, "uuid": "4d8916e8-ed9a-4580-afc5-746483b23def", "value": 55080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177040, "uuid": "ed4b46a8-2960-4915-bc2e-3f08052c85fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81b7a6fa-f864-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769177100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177100, "uuid": "49b4ea53-b720-4320-92ac-2bb102b6da4e", "comment": "Malware payload (Mirai)", "value": "332ea3ee7e6ecf92ff04c568369e90e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177100, "uuid": "99b7219e-eea5-43e5-9160-5390605110c7", "comment": "Malware payload (Mirai)", "value": "0f9d6f6d7bf227842228719c332170ca920bc8fb7449d62dc8871862269b3be8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177100, "uuid": "01bc5dc0-7404-41d0-865f-68f00e9cd38c", "value": "T10583E8CABC848B10D5D525BAFE0E218E33538B78E3FA7113DE185B2E538AC5B0A375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177100, "uuid": "5c12b530-663b-47d6-874c-a3ad1e5c4e2e", "value": "1536:/PdnXrCJWrRNZtuHNFQxWKEeUYfF6sdQm4MD3d7/m2K2lJHiqyIFTHp5:/EJavnQNqxWKEeFfF6nm4MD3d7/vXyIJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769177100, "uuid": "c1e2119f-209b-4c14-8727-183bfdeaa577", "value": 87412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177100, "uuid": "b2304a67-14f6-42d6-8ded-80906b670b89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36b267ac-f2ec-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769177120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177120, "uuid": "087c70db-a3a4-4e6e-8eb8-612e904a4f8c", "comment": "Malware payload (Mirai)", "value": "0e3a65c6528b6cdaad7f2775943801f5", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177120, "uuid": "ec6904f3-00a2-485a-86ad-7acb77702d3b", "comment": "Malware payload (Mirai)", "value": "032378d26a8e343e980eb8aad7832dc77ed35283c3ffcbf48f5c7597dea89e78", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177120, "uuid": "be3e3610-041f-485b-a1d7-1db933734df2", "value": "T166D37B73D8256E98C625C5B4B0648F782F43D1A881436FBE69B7C2B05487D8DF609B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177120, "uuid": "a427e8a9-24b8-40d6-a225-311145df2192", "value": "3072:QOuckx3SPfcjjNr/qDhTdDWIZ19K6hh1LYb6:QOucl0jNri9dSIP9dYb6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769177120, "uuid": "8b2dd5c3-428c-4a98-b0f8-2e23146846b3", "value": 141920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177120, "uuid": "a674aba4-9eaf-4f6b-9193-3dff08a493fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "937c3ee9-f864-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769177130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177130, "uuid": "3dadf482-15f0-4db1-ae0c-628aa06254f8", "comment": "Malware payload (Mirai)", "value": "331da1b9528dc2af02ac5558162b86ae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177130, "uuid": "64e63bba-4177-4b61-a385-74f87cca32e8", "comment": "Malware payload (Mirai)", "value": "2b55565e5f31824c28d81aafa520043d701a2db174868996aa0d10140d09403d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177130, "uuid": "1438523b-9e67-4832-8185-992aee5a56c8", "value": "T122337DC5A243ECF5F825017510BBE3722A77F53A10B9EAD6D7A6E831BC22111F2467", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177130, "uuid": "0704e13b-c406-456b-ba0e-b3d42d466d30", "value": "1536:eRNJ1ef3NdpD/rqiu3ao/qixElfgbxDv7uB:INJ1oNbDeiuD72VmZu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769177130, "uuid": "17c983f9-0288-4b48-8e5e-25b3f0903706", "value": 51956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177130, "uuid": "0e3a058e-8572-4002-80ad-2de55bb0fcb4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eddb5f36-f864-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769177281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177281, "uuid": "dfab0eba-ba2a-465c-bb85-a2077a77a223", "comment": "Malware payload (Mirai)", "value": "151f12c1d09c88d6eaea00a22ca0dbb8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177281, "uuid": "6254611a-ec9c-4a30-a348-d8107d30209b", "comment": "Malware payload (Mirai)", "value": "b20db714bbdb236c1ca04b8e335bfaec9b43119e7a2d58939fe2b26808e0479b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177281, "uuid": "52d3f0ca-36aa-41ba-9c37-3787c30ebf98", "value": "T13693B60ABF550FFBDC6FCD3706A9170535CC650A22A93B3A7534D828F64A64B49E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177281, "uuid": "fd947ca2-14f7-4839-a676-37479f80ca19", "value": "1536:O6MHCD9rnYyor6UQTtbXPvczrd/iHZQ7OOXQGKCnStf7bmsm:O66CD9rYyOzrVgCSdfXf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769177281, "uuid": "959e0d0e-2ab9-4572-a1d6-6f0512b3067b", "value": 88820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177281, "uuid": "a01e0e0c-1855-4498-b9a5-a6249537e58f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ea638c1-f865-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769177336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177336, "uuid": "72280c9b-3db7-449b-a123-8edad6a29b50", "comment": "Malware payload (Mirai)", "value": "fd35ece242556fa490676d9db3070dbe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177336, "uuid": "99d57416-e840-4b13-9675-ce90957e30f2", "comment": "Malware payload (Mirai)", "value": "0488844caefa6b3079a1dc188bebb21fbfc966a5c7318c98d7739de257abc32d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177336, "uuid": "4e050fad-2379-4742-b245-5db03bf6bc9f", "value": "T118C31A45FC405B13C6D212B7FB5E428D3B2A17A8D3EE72039D256F61378796B0E36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177336, "uuid": "ef99eeaf-a712-4fd7-8926-7c2dcb26a20a", "value": "1536:Jdv+s43G5bUWkURAASh71QAFMxK4VIGUT2yd69O/LsA46nGtplEGwyw1FrR7DVP6:jv+XQ3R7g71QNE43Uqyd69O146GPYbT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769177336, "uuid": "c377ff9c-9b88-4c8c-816b-7a6baeb8e024", "value": 129792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177336, "uuid": "cd5456bb-af6d-4c38-866e-2845178d8120", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f25a47d-f865-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769177418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177418, "uuid": "69370223-2a9f-4995-b8a1-1924edc2e774", "comment": "Malware payload", "value": "74921ec2c09bfaa94d956cff369767d4", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177418, "uuid": "203152fc-1c71-406f-9465-be748c918b91", "comment": "Malware payload", "value": "aa18ac5a584567af16c0443b949e5c4c51bec4fd6d41a6df99d35652a6956e6d", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177418, "uuid": "201084a7-5713-4f6b-8768-2ed2c5581bc7", "value": "T1A203A519D17B029E3407D4B53B956B8732D0212FE749E82DBFECE1104F46EA9D6D2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177418, "uuid": "ed017cc5-7ae8-4b82-bbd4-8319fd964b3c", "value": "768:ofrFlF3ZJFEF3WMo22h3Swp9YuACc+Ia8Vt2:Q3N2k7xp9YuJIa8Vt2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769177418, "uuid": "22a42c39-9a05-48e8-bd3c-64424728610e", "value": 39599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177418, "uuid": "00f82d05-f6ee-49b8-bbbd-669d26461c87", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ca5e9c3-f865-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769177440, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177440, "uuid": "800a4cfb-618e-4b9c-9995-a19e7f14b40d", "comment": "Malware payload (Mirai)", "value": "5d1a1ccf5373a652e821491c750dd510", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177440, "uuid": "563a73ac-3559-4edc-a46d-306e7b8a1fba", "comment": "Malware payload (Mirai)", "value": "77f90ed6bb0bbc678d01a5140bb4444880425d7667cbdfc6061b1b064dc7ed24", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177440, "uuid": "f9c1d396-80b6-4ca5-b731-dc92f953bd34", "value": "T19963F996B991DB11C6D162BAFE0E518D7307077CE2EF73129E246B246B8B46B0F3B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177440, "uuid": "f98921d4-ed00-4e82-9d3f-176a75f83e6f", "value": "1536:z9n2nAUXZ4cwZq+5sBJj34AE7ABZXmd4xUObfMmiXLwK7HWQx7wsYY/bVJ:QAUXZ4cZ+5c4AE7ABZXmdpLwK7HWQx0y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769177440, "uuid": "b6c9839a-4e41-4490-a2f4-84efa6ca3516", "value": 66764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177440, "uuid": "4dd4d9a1-293a-4de3-828b-7070cf35f86d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5cf2c57-f865-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769177590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177590, "uuid": "2bf3b3bc-25c6-4bb1-9bf6-3bbb0a0a0097", "comment": "Malware payload (Mirai)", "value": "8e20e5d6e1bf4a10c8d37208838dedec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177590, "uuid": "0b1b79d7-7ef6-44ee-a5c4-975a72ec5d8b", "comment": "Malware payload (Mirai)", "value": "f60d8b3f4c405578711c3328ad8d985f7c6f449f5883c68c76e508ee8802f57a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177590, "uuid": "4855d299-bb45-4c8a-a201-6cd588b2b204", "value": "T131935A4273690547F3A74DB1283FBBF157AED5A120A0A2C5685FDB0F8135A322586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177590, "uuid": "d429c68b-c5b1-4528-b859-789e6759bf13", "value": "1536:31vBfxHPOevoRiVo0krLYIHiv2pICdP9Fz5gDNPw4HS9MBIsRSzonLzf/J/b1P:31fOegvaCdPfz5O7S9tfQ/RP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769177590, "uuid": "c3b72163-c3ed-46db-a6e4-9bf4c9725207", "value": 95544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177590, "uuid": "196fe6e3-bdcf-429f-b23f-2c7a7ee75aba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6833ee8-f865-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769177645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177645, "uuid": "c38f7906-eb74-40df-8da3-71dc5997ea40", "comment": "Malware payload (Mirai)", "value": "f597726d1e2e85c5533b1dadd5aac382", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177645, "uuid": "fd1016b0-67b4-4921-9b70-fad85b991ae9", "comment": "Malware payload (Mirai)", "value": "20da866de8d074b879bfdd2cf360d2252992ab5a5c877fb398bcdf16147a76a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177645, "uuid": "1def4e3a-a966-4fbb-bf06-ce1c964ad1d7", "value": "T17CE30A56F8819B12D5C111BAFE1E124E37131B78E2DE7202AD246F747B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177645, "uuid": "c6cd8567-f434-4d91-8dce-1807e24bee22", "value": "3072:ZUIK7maU/0VjLoXUg+3woauXB2jITCW395Rpw:ZUrHU2oXV+3Bae7P395Rq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769177645, "uuid": "b489fd39-a8c8-4def-a16e-ade64aa059c9", "value": 143292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177645, "uuid": "5a6e8836-d888-4769-bef6-36a4aeb249f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2c45a68-f861-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769177688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177688, "uuid": "3d5e96de-a635-4014-9c2d-eb911a27e935", "comment": "Malware payload (Mirai)", "value": "2e784b225c1b6a5376d2a7e5fac863de", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177688, "uuid": "843dd00d-6474-46e0-8deb-96de479f3246", "comment": "Malware payload (Mirai)", "value": "1d91da10b25bf1911904e6e82216bb33cba9e8b23bbc52d4df494f113cb2ea42", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177688, "uuid": "18d59223-4e78-48e7-aba1-315c69f4d31c", "value": "T12893088ABCC5C712C6E071B2BB1F51CE335643B8E3E6B1438D19AB29675B8570E3B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177688, "uuid": "bef7731b-650d-4a3a-9ded-c7eb71d40f6c", "value": "1536:yMwGIHgptGkQq9cPZNc4v2IqvtRQsWI0rBiQYO938wBI/b:y/lHYtpCPheIqvtu/I0kQJ93zBI/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769177688, "uuid": "bc901270-8283-4da5-9901-c1db94656073", "value": 95444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177688, "uuid": "1ea62e1b-c938-4d80-8a4a-e6f9a61efda7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6029ee69-f866-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769177903, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177903, "uuid": "5c259473-5bde-4a79-962d-a3a54effbb6a", "comment": "Malware payload (Mirai)", "value": "a48d285205dbed369bc8571145de51bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177903, "uuid": "9cb7af11-3061-4fe2-a13b-980d8c69b118", "comment": "Malware payload (Mirai)", "value": "bcf99cd96eb169c78d7826a86279d780f7141c5ea0f4fe35d1c62d4f53c6b140", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177903, "uuid": "b3130379-3c00-41b0-8eca-5824d7fb22b7", "value": "T1D773A74A6E619FBDF668833147F74E30A75933D233E1C685E66CE5000E6034E686FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177903, "uuid": "c8ce05b9-7420-4741-987a-84a4331094ab", "value": "1536:cem1emVzmgp1LDmYbf88VtNc2Kni2YvgodTHZB/bx:m1HmYL1tNc2KYvLHZB/1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769177903, "uuid": "3422e3cc-2a1a-4424-90b7-a872d0045242", "value": 76500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177903, "uuid": "fd4f9000-5c2c-483c-8900-31b2ac58be9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "726f5bb1-f866-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769177933, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177933, "uuid": "e24a1da2-d333-4163-9a79-9e6ece7186ae", "comment": "Malware payload (Mirai)", "value": "fc59e3ac40e178be84aa0d887c83e445", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177933, "uuid": "8f716dea-e188-450e-bcfd-5c03ea0e938d", "comment": "Malware payload (Mirai)", "value": "ae8d44dd25beaf5b5d8ff89de3d7c95ed977644e38215e9a38ace1ffae8fec39", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177933, "uuid": "2dcd7298-07ee-4e68-853d-dd56a098b31b", "value": "T1C773078AFD819B11D6D565BAFE0F518933534B6CE3FA72029E245B2427CB92B0F3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177933, "uuid": "45536ed7-7603-4eeb-a6ac-b471ef0b1d6e", "value": "1536:OJnGxzU4JtwImGswjPot3UH8/qBeoPmdFX7O9w8rERXqlr3ijzxVMsZXYmiv/bD4:TzU4Jt9mGMUH8iBeoPcFX7O9wTR+Czxv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769177933, "uuid": "4c79fbb2-bdec-468f-8fd9-b0375b8cdc8a", "value": 79580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177933, "uuid": "f7dcd242-192e-4552-92dd-e158b6f793ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83ef5daa-f866-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769177963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177963, "uuid": "e307e76b-8ffe-4f01-b771-b84d1dff8818", "comment": "Malware payload (Mirai)", "value": "a4359d7b9c4658a8538203987047eeb8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177963, "uuid": "55e3569a-4944-43a3-bbf5-7fd0a91a0a2e", "comment": "Malware payload (Mirai)", "value": "6e65db2c29617e5a3285dfffcc098c1129c19d009ca8f7a9407568ee35dd9327", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177963, "uuid": "ad31548c-6b22-4c3a-8fe2-7f768e80cbb5", "value": "T1CB63198ABCC5C202C5F060B2BB1F618E375643B8E3E6B157CC1DAB29675F8970A372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177963, "uuid": "e7e1e140-7922-412a-aa57-2cd250915c48", "value": "1536:5yrLAjRlZ2TLwikKifel4zgY6G2qz7M5:5GLW127lid8Yr2qz7M5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769177963, "uuid": "df997a13-3d97-4d79-9de5-cf4227c22c74", "value": 68408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769177963, "uuid": "898a534a-f25c-4988-8e9e-961c20a0e595", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b563e4d7-f866-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769178046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769178046, "uuid": "4bd64e7f-9869-4007-8f91-315b3e730979", "comment": "Malware payload", "value": "bd80b4c9b60bdace42769dff0db36140", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769178046, "uuid": "2ccd92c2-da82-4fc1-a5e9-791c839b558a", "comment": "Malware payload", "value": "57439ae4c63579d9995ed4a1e54ecb2b510c1afa5864f1188acebe6660da62c7", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769178046, "uuid": "ec65fdee-77ee-4013-9309-067842a5838f", "value": "T19EA423D3843502ECDD7380C7BF33AB67DADE70D99A6480CA63690ED51F21A11AB16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769178046, "uuid": "fef03a70-4914-438a-923b-efa0f0bc6f47", "value": "12288:4OJ6zG3NPWivBZ3zr5Llhr/T4fqSWM+VHekGm6JB:veiJZ3zThrL4ff+VHOZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769178046, "uuid": "6fce561f-9bd7-434e-bbf9-6ff3c184b9f4", "value": 480843, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769178046, "uuid": "415d2b6f-f7d0-4348-98d6-f02fa016e59c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5a54184-f866-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769178073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769178073, "uuid": "7965bfc6-fc8d-4df5-b23a-d3ac796bcc29", "comment": "Malware payload", "value": "b6aafe672269ad01097bc37904e13e7f", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769178073, "uuid": "3a89be92-4ec7-43c7-9a90-08504f48ceff", "comment": "Malware payload", "value": "f395ec6028f625752447a242e11fce48900905675859b893675caf4bed34e133", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769178073, "uuid": "a6b77585-27b8-44d1-868a-4c9096c2a184", "value": "T116F2945AC577029D340BD4B52BA1378732D0312BD789E82CBFDDE1140F46EAAD6E2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769178073, "uuid": "2c6df7da-f107-4661-b7cc-88b543dc9509", "value": "768:olrFlF3ZJFEF3WMwApcPXuvhCcfIa8Vt2:s3N2kScP+vVIa8Vt2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769178073, "uuid": "3e38a003-71f9-4774-8292-dfb6e424f218", "value": 36811, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769178073, "uuid": "e53b4c08-d9dd-4538-8516-59ba1872209d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff1492db-f868-11f0-9446-82aee05be84a", "comment": "Malware payload (ReverseSSH)", "timestamp": 1769179028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179028, "uuid": "f53147a0-31f7-4ddf-9f74-9a20020de9cd", "comment": "Malware payload (ReverseSSH)", "value": "49fbdc400f4058b7e45422c2319b9fa1", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ReverseSSH", "colour": "#032A55", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179028, "uuid": "cf82118f-e3a9-46d6-926c-d2a8a15513c0", "comment": "Malware payload (ReverseSSH)", "value": "9479dd68398c35f878ef03d13390d060883e80c288c157c6d8677ea1da699373", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ReverseSSH", "colour": "#032A55", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179028, "uuid": "c8e217aa-0463-42c5-95d0-04fa38b09775", "value": "T1F7364A07FCA155E9C0A9E2318A669212BB717C842F3123D72B61F7782F767D06E7A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179028, "uuid": "17123867-4245-4c79-a5c1-91b57045674f", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179028, "uuid": "0a368927-47bc-4cc4-abd5-0bbeb0b7c03b", "value": "49152:aUOuop5cQHDo2ht1TnKIkMstblbZlnTn/tJykhj+SQWK+K9KqqCasw14RQJ5EV:a6ybzOBh9JnDMXBrQ4RoEV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769179028, "uuid": "840870ee-dc1f-4dff-a78a-c09b4398a3bb", "value": 4948992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179028, "uuid": "8af97e79-0550-40cb-a363-abe95db55057", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff503bd1-f868-11f0-9446-82aee05be84a", "comment": "Malware payload (ReverseSSH)", "timestamp": 1769179029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179029, "uuid": "b77217ef-600e-4466-a730-2c31eae46ca4", "comment": "Malware payload (ReverseSSH)", "value": "179cea8d8102e02d6dc18b05266bb8a2", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ReverseSSH", "colour": "#032A55", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179029, "uuid": "2078ca76-8ad3-43de-bea7-ebf283634661", "comment": "Malware payload (ReverseSSH)", "value": "a181eacbcae36dbb6aa77174689ce224bacb9208e87a53148f1009f90ab432e4", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ReverseSSH", "colour": "#032A55", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179029, "uuid": "f3ad6563-14bc-4c8c-a167-267188a42b22", "value": "T194062903F89581E5C1AEE234CA66D292BA717C841B3123D33B10FBB92B76BD45E793", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179029, "uuid": "a894b838-154e-48f8-a54a-e2f504b027e1", "value": "9cbefe68f395e67356e2a5d8d1b285c0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179029, "uuid": "d81e2036-4761-4e41-b91c-71d3ff664063", "value": "49152:uIK+w3Btrb/TWvO90dL3BmAFd4A64nsfJTCIKgHBlQJb2UNBL2HTfcqDzcW6If+6:23xG638W/gcKEEAZuA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769179029, "uuid": "ba43492f-332d-42cb-aeae-b9ed4f022200", "value": 3936768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179029, "uuid": "16b366b7-dd54-497d-bced-5b0bd96a0b31", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0082b9ab-f869-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769179031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179031, "uuid": "e064d7f3-b0cf-4ac3-ad50-533b8e85c6f2", "comment": "Malware payload", "value": "713caeebef14c541f5baa048ae212558", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179031, "uuid": "752cefb5-e7a5-4c66-a052-8f98fa5e24b9", "comment": "Malware payload", "value": "10d0114dba15bf9b19b7ef5f03fbbeae236daa78ceae7a362d12c66cb708d4a5", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179031, "uuid": "b0de4d9b-c51a-4fd0-a242-46b32c2f6322", "value": "T18D164903F89081A9C1AED130C666D293BA717C885B3023D72B51FBB92F76BD46E793", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179031, "uuid": "41d1b6be-3311-44e1-a3c6-7b3b043bde31", "value": "9cbefe68f395e67356e2a5d8d1b285c0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179031, "uuid": "2b56777f-c971-4ca5-b0fe-8e045c960016", "value": "49152:CRqRW3Jrrb/TpvO90dL3BmAFd4A64nsfJgwB0g9y8rTyOeqS7EDnFpS5EEgrK1eo:S3ZovycoEaYfto", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769179031, "uuid": "01fd26e0-690f-4576-99e7-9eb0166f4ae0", "value": 4312064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179031, "uuid": "59a1050d-63a0-4b5a-95bc-cb59a2181be8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "793e8e28-f869-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769179233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179233, "uuid": "67a38948-324a-450e-a7c2-22d56c8b1e94", "comment": "Malware payload", "value": "99be443bf52e8f2ab898b8fa3cf2c4a3", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179233, "uuid": "c6774134-93c8-46e8-bac1-556b1113b7c1", "comment": "Malware payload", "value": "20c6898f123a49e4fa88ff5de344d402894ce01a9df5d2e8c38d6e7c659dfdce", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179233, "uuid": "49121739-4edc-4760-acbb-003abffd0c6a", "value": "T18E03955E817B029D340BD4F53BA1678732D0712FE749E82DBFECE1504F4ADA98692B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179233, "uuid": "8ab6036c-0398-4c6e-bc2e-6ebd2f9dd879", "value": "768:oSrFlF3ZJFEF3WMvyfqiE8b5l5YCcfIa8Vt2:t3N2kfK8gIa8Vt2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769179233, "uuid": "23e95179-bd4c-41fe-ae19-3aaee41cd379", "value": 39678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179233, "uuid": "e3e8b768-cb90-4d1c-a370-494150cfafac", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae2e4704-f869-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769179322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179322, "uuid": "61889c5f-c4c0-404b-88dc-353d147d90de", "comment": "Malware payload", "value": "f727213ae0848b2bdf6a09c6e2015c46", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179322, "uuid": "03923f3b-692d-4ad9-909e-497a3f2826fd", "comment": "Malware payload", "value": "e70f5f56d8ffd37f03e73c110a635629c54a0e4ba3701034800b582ee5d18a8d", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179322, "uuid": "051957ee-495b-4cc2-badd-a2226a35f649", "value": "T1A805F6606811817AEC9B51F461FA6FEE99DE0E100B90EDFB51C02FD740B26E235729", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179322, "uuid": "49db0e26-2140-4a84-b883-031a87c37296", "value": "3dba82b9bf867c8cae19b16a3b46d075", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179322, "uuid": "87cc2739-1d25-476a-8b60-e7e105cfc661", "value": "24576:bkUnN5pP4WymTqvX5IV8THVJSSQ6fBegEW5rvxchwHeJuYlTRhCIgVb+7upMGNP:H+V6iMGNP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769179322, "uuid": "df1a724d-4a8e-48e8-a631-2392c61b6e01", "value": 805376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179322, "uuid": "647b464c-5af3-4e44-af84-cf78e76d02ee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f20f9790-f869-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769179436, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179436, "uuid": "8f5c3edf-ece4-431c-bee7-43646df144ba", "comment": "Malware payload (Mirai)", "value": "c2f095c554634a82b1ede990172aac60", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179436, "uuid": "4f20a8e0-aae4-4c01-807b-9ff5c2ca1c55", "comment": "Malware payload (Mirai)", "value": "552d27705576447d9c707abbcd44d6d253d1cf9c5c25e915dc62f228bb7723a8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179436, "uuid": "1721c7b4-d5a6-44f4-b4b8-7f1f20b5ce04", "value": "T108435BC09142E8F6EA190175213AF337B572CEA802B8FCFBF75957764429AA470877", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179436, "uuid": "44fb57fc-c412-46c3-ada4-c1b6072234eb", "value": "1536:YLV0AY0j2dP2tLg8GiKn8whAYv2zbEXjdKsRceBXGlT2ceVvu:YB01eeetLg3vcY+bejHRc2XSTS1u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769179436, "uuid": "9b312ffd-2e84-4ee1-bff0-8cc4182855e8", "value": 59536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179436, "uuid": "f4621320-ef97-423d-bd5d-d3a63dfb7a69", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19a2f7d8-f86a-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769179502, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179502, "uuid": "937617e5-7046-403f-bbc2-3164ada204bd", "comment": "Malware payload", "value": "4c0b707767701923b637386fdd2aab2d", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179502, "uuid": "2c3505ca-bd26-4c22-a9e8-2074d6e9c7c9", "comment": "Malware payload", "value": "2fe162abc20d17b617d5af22b8820d28b10abe3a5e36125d1d4963ee68d21ff5", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179502, "uuid": "10839844-1296-4891-8b44-88f7e8ecb8bf", "value": "T1CEF4E770A8118026D89F12F456FE2FFDA5AE0E501790EEF365C06DEB04712E678B29", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179502, "uuid": "2e614e61-3d22-4c43-84b1-f79487ec301f", "value": "4bd229834078747e818e52da30b244a8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179502, "uuid": "b381bddd-509c-4dfc-be4b-dfb0d060476f", "value": "12288:+3xozUTs/HWUOQeOJVqp4EiLVsmSyb1iyrjlguIi8GFdXYPQ+VNnOvw/ARAjK5Nj:0mQZUOQeOJVqp4EiLVsmSyhiyrjlguIc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769179502, "uuid": "a5d6b81e-1bb4-45ca-aaaa-f2aad0291004", "value": 759296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179502, "uuid": "5ff1dcaf-6a02-417a-8f68-e6cbc8a333b6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "281a8722-f86a-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769179527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179527, "uuid": "fde7bb41-be7b-4075-9102-6b3edb3b0522", "comment": "Malware payload (Mirai)", "value": "a3950321e61e40f4609ee9df917f624f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179527, "uuid": "24f3c88f-2149-4efd-9275-f5b0f54949ab", "comment": "Malware payload (Mirai)", "value": "4954b7fe51ddc54245bda28cf09cfb5d7df6bd4000f250703ad1d97ee7457367", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179527, "uuid": "5fac877e-7002-4e7e-b2e8-9ff575bc1009", "value": "T1ED934A4273690547F3A74DB1283FBBF157AED5A120E0A2C5685F9B0F8135A322586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179527, "uuid": "201a6b5e-fb6b-4e5f-b55e-0274e0cb9b1a", "value": "1536:31vBfxHPOevoRiVo0krLYIHiv2pICdP9Fz5gDNPweHS9MBIsRSzonLzf/J/b1P:31fOegvaCdPfz5OpS9tfQ/RP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769179527, "uuid": "55b17249-fee2-4064-8ccb-c927951eb7d3", "value": 95544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179527, "uuid": "8ec6a1f2-9451-4bd4-92a3-ad0c87da2feb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fb93102-f300-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769179545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179545, "uuid": "954e6326-8eb0-4ef4-b4b4-9a37abb631ad", "comment": "Malware payload (Mirai)", "value": "ee518fb241614b9845c69cf85f04b2bf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179545, "uuid": "a67e89d8-905e-470d-af2d-7e61992971d1", "comment": "Malware payload (Mirai)", "value": "b3785ce6d33809a45a6217d12cd1b2040715617f76afc69a6b92629efbed23f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179545, "uuid": "c37442e3-67e1-46d3-9ca4-f42436d7af6c", "value": "T12D43F060FA605AC3CCB98D7891AE35325F1A612932DF87AC27170E81B31D10FB5B83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179545, "uuid": "86969518-a117-4720-ad7c-49d7e5cbd4a3", "value": "1536:t6rRD0gn1aEVi15uooQJpP8LIYUK5xUSt/3gz:kdUEiOdWF8KK3w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769179545, "uuid": "1b6887c5-b5db-4bd8-86b8-012c0edb8dd8", "value": 59984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179545, "uuid": "f9610e27-ae2f-46ac-b3da-4bfdf3cabd99", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36986ae0-f2ec-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769179568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179568, "uuid": "35561455-6fda-4f82-a202-2ea30360e97b", "comment": "Malware payload (Mirai)", "value": "b966ce1c2faeb955a024028218a7d565", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179568, "uuid": "3028f60b-8125-4faf-abf7-ca30434cbf5a", "comment": "Malware payload (Mirai)", "value": "562d17800122196dab14bea876f58da47db9d7a88abb8c60fd3abba479aa8401", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179568, "uuid": "fa22027f-c3a9-466f-8dc3-e2dab04afbf0", "value": "T1AB430159336399B2C780883ACA5484176F9E3EF6D448350705E067ECF6AFE85C9F1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179568, "uuid": "b1a2bea9-418a-48b6-9d46-89968b3d0d9e", "value": "1536:ZoZVdjMI2ANMTdsJb9e8Q4Y87ejMUe/13Lm:ZoZbb5MTdKxe8Q47ej+VLm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769179568, "uuid": "78c1580c-8bc7-49ce-85fa-69165cbd2b08", "value": 59012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179568, "uuid": "93cccfdf-7cf8-4b0d-a02a-f5fe88f0906b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77b72801-f86a-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769179660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179660, "uuid": "81bd4f6d-abff-4ef0-89e1-0f7429778600", "comment": "Malware payload", "value": "440bb727467a2201ae361bd81e711792", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179660, "uuid": "492490d8-2462-45bf-9235-e77b31a3f482", "comment": "Malware payload", "value": "7576fa1f379c73e242d6e236a1138aac1d8316b9f799c276463c8513d9919050", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179660, "uuid": "58e30258-03f1-4ab7-8c2f-4bd854e7ddb9", "value": "T131F31A72A7B4197A23BB43BCE455F78879689523D74D62E1F8FEC19C42C1BD220627", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179660, "uuid": "e1b212f2-e2c6-4a56-bf61-2796cfa874e9", "value": "3072:EdrK2iu5mGuE/kDkank74vQ+/s4oxY+b3wyAtA+3cpPCWTn5bXZEtUioCkdGas0D:aru8GPd6pLasJ7H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769179660, "uuid": "8ca21cfb-d422-4081-bf4e-a7d8bea75128", "value": 158473, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179660, "uuid": "b581deaa-da44-4fd3-a943-ecb780c2e9e2", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b73cc14b-f86a-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769179767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179767, "uuid": "3ecdc83f-5af1-4f87-b2d0-ce38f5811c58", "comment": "Malware payload (Mirai)", "value": "0a38175408d81f57aa80dca2b6f8b545", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179767, "uuid": "d35dbef4-6609-4421-9ee5-8b5eb92640c3", "comment": "Malware payload (Mirai)", "value": "a3956bc5193f534001d1dc105d8ff4344e2b0c20a143d70083f2ea8077029787", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179767, "uuid": "451a02af-b85d-4d4e-a3e7-db38288daff4", "value": "T18B935B92B400DC7EF81BE2B780530B65B224B7E55F426F277627FD63EB2A1681816D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179767, "uuid": "45b21d38-8e64-43c8-9344-b52258f3f1cb", "value": "1536:g5IfhJ3bcd8pAddavFflBVhkHSvlmtgkeHF9XBmxwYa1OYKX6eZTx0udFkPh7yJQ:g5IfPuMAdQvNpCyDgx18WMtQj4rGuuC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769179767, "uuid": "45d70752-edef-48ee-9824-eb8e52fe5260", "value": 91952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179767, "uuid": "0286190c-80a9-4434-a568-9445de8eba07", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccdc8184-f86a-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769179803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179803, "uuid": "12f2c024-ee8b-48fa-b605-2d583259f793", "comment": "Malware payload (Mirai)", "value": "b637ead73e9268f90b909d5e2d2524aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179803, "uuid": "5841394f-aeaa-436a-9a4a-8a7aa51469ff", "comment": "Malware payload (Mirai)", "value": "3403c58d9ca5472f744a40cf9341624c2345d7d8bf91158d435c9cdfa9888989", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179803, "uuid": "5b21f2c2-7a7a-41d2-b163-1f957f985792", "value": "T172337C23C9AB5E68D51946B43935CFBD07939600A38B2EF6646AC675C003D8CF1AD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179803, "uuid": "e3450cbb-2a59-4d48-8c8e-93aca3ceafad", "value": "768:kYFQ+AKu4KrRToI8JuLpJjzDgs3POGCHLh8Mve4foFDDC40AdpZU00/Z/b:kY++x72JobJuLACPYGptDC4ha00x/b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769179803, "uuid": "26da46d3-e213-4319-b46a-f3527cc013e9", "value": 52164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179803, "uuid": "d687101d-3c25-4898-8b0a-796cec6102f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdcf2bf0-f86a-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769179805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179805, "uuid": "301958b4-c4b6-44b0-ae3f-8b44ff38262a", "comment": "Malware payload", "value": "39b24e568e863e401588747355a908ec", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179805, "uuid": "246b53a1-4b11-4c2b-a08d-4a807a61a87f", "comment": "Malware payload", "value": "658ab3eac807c49542b58634002553116a58c7f2de39900f596020c066ae38c9", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179805, "uuid": "38577c0a-8711-4cfb-a720-8ad45dd51a0c", "value": "T12DF4F970A8118066D89F22F056FE2FFDA59E0E501790EDF3A5C06DEB04712E678B29", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179805, "uuid": "fe551cf7-2858-474e-bfcc-a258597932fc", "value": "4bd229834078747e818e52da30b244a8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179805, "uuid": "9e07b6b4-88af-45c0-b544-4e334674145d", "value": "12288:73KO3A8wsKUkSkz9ROdmRS2dv5Scrgi1vEtaHmCDZP5FSqf3OjCW4O1c3TJOFBg7:73tmUkS+9ROdmRS2dv5ScrgixEtaHmC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769179805, "uuid": "c91b8e58-8ff7-4898-bef6-369af708070a", "value": 758272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179805, "uuid": "93e81f35-36f1-465a-88f4-461117924592", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0787b2d2-f86b-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769179902, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179902, "uuid": "d0c77622-53d8-4c47-b99b-6e636d5ad2f9", "comment": "Malware payload (Mirai)", "value": "c6c366861cf50ccc4b0eb12bd5b72d02", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179902, "uuid": "a3feda29-4cee-4525-bfad-68652d8154df", "comment": "Malware payload (Mirai)", "value": "50e3def86ec846988981966741007deb6f0e17fe2738e3b6b0c98dd5605a840b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179902, "uuid": "2c72b278-01d2-499a-a30e-992746753c9f", "value": "T15FA31CDABC818B11D6C166B6FE0E518D33134B78E3FA7213CE185B2D674A86B0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179902, "uuid": "85aeb533-239c-432a-83e8-997b3ae59421", "value": "3072:7HTrSBxz+r+EeBfM2PbhlK1YICyH4xol8fqNmMz067ant58gR/:I+8PPjK1YICyiolfNme06GnHb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769179902, "uuid": "b6735d80-7588-49b1-ad71-f220680d08ec", "value": 100788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179902, "uuid": "e32e8672-100b-451c-afbb-adfdaf42db12", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e090408f-f86b-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769180266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180266, "uuid": "9245c020-122a-4dac-91fa-393cbfead509", "comment": "Malware payload", "value": "57466b384cf24f81eac0f35abb575823", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180266, "uuid": "7273e3ec-8f88-4782-a587-5d87b3a04ffe", "comment": "Malware payload", "value": "8784f5e32dca24d889a21ebb694b648333b623849e21191a70393009e209125d", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180266, "uuid": "e7eac1fc-b710-47b1-8540-062e36fb699a", "value": "T16805F6606811817AEC9B51F461FA6FEE99DE0E100B90EDFB51C02FD740B26E235729", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180266, "uuid": "a0143ae5-0513-4530-836d-e98a7f5ec66a", "value": "3dba82b9bf867c8cae19b16a3b46d075", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180266, "uuid": "0ace829f-1373-45d7-ab67-9a790926ba59", "value": "24576:QpMyHkwjXy+2+dmdVSu45rMMIBxHA3fFUlFr7TDuGO2LE9xh+TInHwIpai2lSiIa:cHMIpa1SiI7O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769180266, "uuid": "a9f1d358-8416-4eda-94ab-d8a72260e633", "value": 806400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180266, "uuid": "d0cc4a0d-98fa-4281-a486-d5a154bcb4fb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6b1b7e1-f86b-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769180303, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180303, "uuid": "ba0e786e-5f4b-4cba-a45c-255fbc9d243c", "comment": "Malware payload", "value": "51b445719a71777d993391075810bd3c", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180303, "uuid": "68224efb-258b-44a1-8520-a5bc8485215f", "comment": "Malware payload", "value": "d27fadf0c5d3434e3d9cb0a54a421c4b3c02d5190d7bf72573a6f332b277cf97", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180303, "uuid": "30815cf4-d395-4f7c-877e-df4154cf31dd", "value": "T10105F7642811817BEC9B52F461FA2FEE59DE1E100B80EDF791C02F9750726E239729", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180303, "uuid": "ec9d8236-1dc5-4755-bea4-644a0762c6db", "value": "3dba82b9bf867c8cae19b16a3b46d075", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180303, "uuid": "df79b5f5-a6a7-487e-ac71-aca3d1c9c8f6", "value": "24576:Cp7trrPBPG7PTntejO0tNgDsFZsEJnKT8lg8qfgkXDjvkig4XhUTIQTUfLLVrWc:sSbfLZrWc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769180303, "uuid": "5591ab6b-54ed-444f-a979-261ba30002cc", "value": 803840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180303, "uuid": "918ef02b-c9df-47ec-8804-4b2741002030", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36618c23-f2ec-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769180610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180610, "uuid": "2386a4fb-4a8d-44ad-98ce-943b8f3ca2b5", "comment": "Malware payload (Mirai)", "value": "3896cd8e6d8763b58e19a32afd6c4966", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180610, "uuid": "a96d9e8f-a50b-496f-9e53-03a48da2df03", "comment": "Malware payload (Mirai)", "value": "1e6f0a9355dc5db8f99978dccfdc3df5f3b3e8375da860d5b899815ac1917420", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180610, "uuid": "f30459cb-1e56-4f42-b6d1-96c47c656d0f", "value": "T177A2D0A6E3D3D671C6508935EB7C88926DD0CFB8B7FB30B3207181D522C5A965AF91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180610, "uuid": "e20b9b13-3bf3-4e5f-ab75-328d2c914783", "value": "384:MOTec4Qq28dNSrGxwmI+mCsOWbckgtUdyismYi2jv+louhymdGUop5hXB:MOizQq28CrGxKCP/ky68gvs3UozJB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769180610, "uuid": "487ca886-ce9f-4e03-a64b-16c8ac8681f6", "value": 22244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180610, "uuid": "62ff77ee-7f8c-4a00-ad85-e492a7c5ce55", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "298d3278-f86d-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769180818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180818, "uuid": "f133085e-1011-4860-83d3-7b8535e60964", "comment": "Malware payload", "value": "277aaeb43b44d5ea6da7a7cfb56f3ba7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180818, "uuid": "a9bbf333-9fab-470e-9182-31c26c89c3ef", "comment": "Malware payload", "value": "54e224ddd6064b86bc5274e111e7772a4600338267937d928c437e90688f981d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180818, "uuid": "dcfb5560-edbc-4734-852b-535d04ac4937", "value": "T17E93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180818, "uuid": "3812ab0e-0aff-4961-9e86-1130ec2fdfa9", "value": "1536:pap92uEEwH8Qw0DMqpYJKNoE+pTYeGf8BqLv3TliCoRGpNuqYPPXNIH8LutVWw:I6uEEwH8h0v+pHBqv3TliCoRGpNuqYPI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769180818, "uuid": "7a249a70-15b9-4c21-9e33-afe345379248", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180818, "uuid": "6c14f8dd-ef3e-4307-b31e-eee2cb01959a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3314eae6-f86d-11f0-9446-82aee05be84a", "comment": "Malware payload (VShell)", "timestamp": 1769180834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180834, "uuid": "401ebb3f-53b6-4215-8882-09d028ecf98f", "comment": "Malware payload (VShell)", "value": "6df3b17ef3097e64f00ae8406261a5c0", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "vshell", "colour": "#d2c6e9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180834, "uuid": "2941a964-6d1b-47c5-8df1-fa6476c49545", "comment": "Malware payload (VShell)", "value": "f0857c324df14c87841c4b03107858fbd48e92aa0f485ec80f75cca4b74ecd85", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "vshell", "colour": "#d2c6e9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180834, "uuid": "8d1a1d6b-42d5-40c0-bd9b-5d9c364f8f7c", "value": "T137C533B449D45942F37AFB97FBFB41DD2812D7C16FA09F82A01BD0C899E11E68B4A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180834, "uuid": "b15736f3-9352-4606-89fd-1ffe6d4e6cd6", "value": "49152:2Cr/6sMf15e/JidHDcCKA1w+jGFyqHjFDsOnIgUNtpAIbdW+RnK726CjmdrCAFId:Br/6sw5Kgpj6FpjKAIbwUKijmdeCNQl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769180834, "uuid": "5004ee6a-4525-4dc8-ae37-ed190f744b01", "value": 2562844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180834, "uuid": "81c1bc86-7fd6-4b67-af0c-6852abf26339", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cac480f3-f86d-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769181088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181088, "uuid": "333b2084-1f5c-4ba1-a6e0-a44e61fb7ec1", "comment": "Malware payload (Mirai)", "value": "5d0c7d6906ad5956b88a7bce15f86797", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181088, "uuid": "26d63f0a-bc56-4edc-84dc-75d57836ef9e", "comment": "Malware payload (Mirai)", "value": "a1bb2a66ee3cea8a67837b69739b28b29053e46c48b0511ea437b0ae4fd8f40a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181088, "uuid": "bb697be3-4c89-4e0f-bb1f-196d6ff4fac7", "value": "T1FA042A45EA404B13C0D627B5FADF42453333ABA497EB73069528ABF43F8679E4F229", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181088, "uuid": "8d08d644-de19-4dd2-b2d8-133cb4e14263", "value": "3072:jr/ds0izlfERak4abYFyiskN2vXCUBpxY/hJjogM/RIWqiF:jr/alf894abYFybk4NBTY/XMgM/RIWqO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769181088, "uuid": "deddad54-d4e2-44ca-ba44-9670c9d4403f", "value": 179813, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181088, "uuid": "e94438f8-ec90-4c33-949d-9f20ca6ea067", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dac53fb1-f86d-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769181115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181115, "uuid": "9a68d494-1e6c-4612-92ff-77397c8940e5", "comment": "Malware payload", "value": "4d369d0bc4a9d5420a1ce232c48d3c2a", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181115, "uuid": "b641bd36-9ce2-4f8e-a3fc-2e2eb30e6a31", "comment": "Malware payload", "value": "7ac86841adc9fb6f94316993d688be3fe66ff06899b849dc8e5a5364c5502a5c", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181115, "uuid": "14440409-ee97-4373-b7e9-c4aeb5b44ae7", "value": "T115F4E770A8118026D89F22F456FE2FFDA5AE0E501790EDF365C06DEB04712E678B29", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181115, "uuid": "4c410aaf-28cb-45cc-8612-e4fa54565261", "value": "4bd229834078747e818e52da30b244a8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181115, "uuid": "5ae36afd-6066-4a4a-bbe6-b166928992cb", "value": "12288:KI2dGAa6pmpvgvOrVD8LMpMHkyKJ4PcCjzszm1VP2Mqy2pboygva6m+vZpt5Mg8u:KI2dKvgvOrVD8LMpMHkyKJ4PcC/szm1B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769181115, "uuid": "39a08a4b-91b7-4bab-8c5f-161a0ae77960", "value": 758784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181115, "uuid": "adfe31ac-07de-4d99-9a58-e59311d624b6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05ab96c5-f86e-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769181187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181187, "uuid": "cc670f5e-186f-468a-a7b8-829420e1e38b", "comment": "Malware payload", "value": "6be9afbad9bb5e79b21fdc76b4d6f102", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181187, "uuid": "7da10a5d-824a-4d3e-90ff-3681a4f37333", "comment": "Malware payload", "value": "239dbba1171bc2185488506e955814c3e5826a9c037f7241a3a186472f7eee41", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181187, "uuid": "2dc019d8-1824-4dbf-ba23-d909d20fd50c", "value": "T12DE3F86F83F7313572138359F5A6772896ADC133EB410EE2F9B2969C8FC11A201762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181187, "uuid": "a12be130-7859-454c-bcb5-84ae9788d069", "value": "768:EZdapEbrTXlGRNjcXscJGcz74k/tHcTwArmpp+sfifRfiVIrePfHKIYJoFSnUh+R:EapArrl4k2wwmpooIrbA4Y1hJg1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769181187, "uuid": "6362d4d0-9999-4ec4-9b23-7695ff8a32d4", "value": 149453, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181187, "uuid": "368cd553-3979-4205-9bb2-9bd1a6d9cfd0", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "369b6c8f-f2ec-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769181430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181430, "uuid": "256b056e-f01d-422a-9984-b4d6b2c9666a", "comment": "Malware payload (Mirai)", "value": "e3a45abd0c1f54c416f0848b4de743fd", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181430, "uuid": "d1681dbc-920d-4a3b-a8ad-cbc1c14bf63f", "comment": "Malware payload (Mirai)", "value": "72682692e6fe8efd5bd7bbcbfb6b7e252b975aae6829462c7ca269d63dbffca8", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181430, "uuid": "417801df-d25b-4e74-9ed5-cda3f5ea6f10", "value": "T1047301052499D220FF1107728CA958894841A8D5D4EEB1EF322A5F39D9CF8A32DBFD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181430, "uuid": "debcaccf-c675-45d2-bc11-e32ada0e2896", "value": "1536:V8IHq+kgs7VI83wgrzlEFSPO/hcoiisjuq5Z14fvLtBcGXUqh9+sadEO3dzzUCRW:SIHq+kOQwgrBEEO/h7iF6q5v43L05DR6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769181430, "uuid": "93624b40-18f3-454d-871a-d07c06de291d", "value": 77216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181430, "uuid": "8da6720c-747a-47f5-b997-4b148be9aec3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3699907d-f2ec-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769181451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181451, "uuid": "71b37358-236a-4258-8b63-e0738f4876eb", "comment": "Malware payload (Mirai)", "value": "f396755cdae6519df65310cbe0e1daa1", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181451, "uuid": "3a68310f-f365-468f-ba45-713982a019f9", "comment": "Malware payload (Mirai)", "value": "056fb753639e1fe84a3509173309815320bb35d52356664d7acce7c23bd05b1a", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181451, "uuid": "93e38b4c-65f4-457a-a36f-571d0ef0ab29", "value": "T1E533F1B99502A9D0EFB3FA634C8FDFA477210691E36B87824246AF0065BB5B43159F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181451, "uuid": "84ec25a8-6f7a-4a67-9a77-0d3a9390a7b3", "value": "1536:SVaoF8CDX+KpdO7URfCYerKAa5UKFu/AjINnIC4u+qgw09l:kaovZsIRfoPaaKYaYR4u+qgwM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769181451, "uuid": "e6c2faf1-a078-4cf7-b7b7-dc44ffadc0eb", "value": 53124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181451, "uuid": "97b21d9e-dbed-4bfb-a949-183ee06c2c65", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a74af0b5-f86e-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769181458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181458, "uuid": "bcaf14fe-1632-46e6-8bde-64b0da7ff8c0", "comment": "Malware payload", "value": "bb881c198e608d940cc18977e4f312d9", "object_relation": "md5", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181458, "uuid": "fe27bd15-f539-4a99-ac8a-a82b0c73d855", "comment": "Malware payload", "value": "650e691d9136ac3896dcbb3b414a6ea327e1fa2de9ce01cba966481d49ffb99f", "object_relation": "sha256", "Tag": [ { "name": "mentah", "colour": "#332daa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181458, "uuid": "2a35e556-8589-4274-8be7-b2ec22709223", "value": "T148F4E7A064108127E95B61F861BA7FFEA99E2E501790EDF751C02ED704B12F234B2D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181458, "uuid": "4be8ea3d-73da-4c64-8326-e6d3b82d4a57", "value": "6884702b1788f6cdb01eb438d7f402bf", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181458, "uuid": "49ed3cf9-e386-42ab-8cc9-0e4d190ca592", "value": "12288:NHhUE9vlNtUe5QUZcPumc8+6lfTTort4SuYJ6TsGujNfkMXJccuxrSzj6ulSKvi+:NHhUE99NOUaPumc8+wfTTorCSuYJ6TsT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769181458, "uuid": "7b56cd08-b855-45f9-80f2-b9bc70b50977", "value": 767488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181458, "uuid": "29e2da07-02d8-4de8-9818-28f681d02af7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d02f32bb-f2d6-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769181472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181472, "uuid": "691cadac-3592-4aa7-9bc6-b203ac494109", "comment": "Malware payload (Mirai)", "value": "4456a9ef058e727a2da9333372f22ab7", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181472, "uuid": "70eb8f74-2c1b-40ae-990e-5f7cdac8be70", "comment": "Malware payload (Mirai)", "value": "fbbbb78af0b286efb5c9d0bc0ec1cee87b1ad3b6ba9f36f7e7e70495129bb3fa", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181472, "uuid": "b5b4f0ee-786b-4a85-8217-f28456dfefb6", "value": "T15823F10BC2B67584FA37A0764F7FB9CC1080E85D63E14CA27AE419B4D659A78BC347", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181472, "uuid": "63259100-3eab-4e56-81bc-4df611836c1a", "value": "768:BessG0aMqhb7/lv+AJPhPglPzEAJIJY+iiBxiCnbcuyD7UoQRj/:BessL+5vt2zJIJHtTnouy8oyT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769181472, "uuid": "4baaf729-fbdb-4660-af6d-66639a5fe370", "value": 46732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181472, "uuid": "c0177eab-9510-4622-ae87-f2594283f06e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8da2abd-f86e-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769181487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181487, "uuid": "e81a7e8c-480d-4ec3-aa72-1c03870372ef", "comment": "Malware payload (Mirai)", "value": "3caed552d24ce37c57784e5159a909f9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181487, "uuid": "460dbc63-246a-4e7c-8739-1fdf6810a490", "comment": "Malware payload (Mirai)", "value": "570e146408f5f30e3079c2b570b5a6f1c3627116fffdd3e9eec91fa04ece6931", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181487, "uuid": "0ba08f37-965c-4224-99fa-0833cd4b513b", "value": "T126B35A77C8696F68C259D1B0B0B09FB92F63A58182871FBA55B2C3754083DCDF605B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181487, "uuid": "76c12af3-0877-41eb-bdbe-bcc798301ed2", "value": "1536:Sa97/a/qUAmKGJHMNGDCRlKZKs7LvqPz5dvzpO0WAMGNdtFC/zC:SyanK6HcGDMsZ/OPz59Y0WvGNZCbC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769181487, "uuid": "541316d7-481b-4305-a06f-9bba2d8ec174", "value": 116576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769181487, "uuid": "f95afafb-4d5c-49d0-8f68-4f93a334b306", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d54173f-f874-11f0-9446-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769183911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769183911, "uuid": "a419622c-b5ee-4874-ab31-8d73d9d5521c", "comment": "Malware payload (Mirai)", "value": "f267e82603f8d10a3af408fbca8d34de", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769183911, "uuid": "af736c85-2888-4a16-abc0-b9d88751aea1", "comment": "Malware payload (Mirai)", "value": "4788d630ef841509bb7e7621a13501d5dae99b261347890db7d81ba8c3b0e5ae", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769183911, "uuid": "8d6f19b3-2e21-4e6f-90bd-7cbade8ce7dc", "value": "T140533952BD829602C5D412B7FB4E428D772B43A8E1EE32039D29AF2137CB95B0F7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769183911, "uuid": "3db3b119-6987-4f14-aa26-ac3500e13545", "value": "1536:ZIPWw0l5Uxpjsm0JVjjAXO6VzlROwz6FJGXOiL:+PWXyvtERjAXOEiJGn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769183911, "uuid": "d68a06a6-9886-464c-8a9c-2a9265d7f03c", "value": 63388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769183911, "uuid": "b764fc63-80a1-4079-a250-a8ceb4b0eecd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1769185747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185747, "uuid": "84313854-4079-4890-8078-a49d689e84af", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185747, "uuid": "6848f5e8-9add-481e-8838-b021c7fd1463", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185747, "uuid": "c65277a6-5165-44af-8a78-c7ce600aaa6a", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185747, "uuid": "6c9747bd-0a09-43fe-9367-f7653ab12666", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769185747, "uuid": "426c6133-1996-4e31-a634-71034cb75c3e", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185747, "uuid": "26114ec0-7264-4b8e-8be5-5840f99c9afc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185747, "uuid": "bbe8429a-4a3d-422f-a3f1-87a0ee3c13b7", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1769185747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185747, "uuid": "905cb15b-8757-4613-830d-ac18ade530b7", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185747, "uuid": "f860240a-8af2-4f79-b5dd-e0df8e75287b", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185747, "uuid": "0847a917-b1c9-4a74-946a-60b9324752a9", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185747, "uuid": "7502ece1-47c6-4c2c-9d33-35ccf47a9ae6", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769185747, "uuid": "baecc647-aae7-457d-8792-e68c7eb0948a", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185747, "uuid": "ac4a3950-012d-4324-a84e-c31e9d58df94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185747, "uuid": "0835ef9a-0d6f-4328-b668-363588147361", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6b53292-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1769185751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185751, "uuid": "69e0bb9d-7a4c-4552-a87e-88741d472686", "comment": "Malware payload", "value": "ba5d73d924d8f25a7d7aeee4bf7fe6be", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185751, "uuid": "948df404-5292-420f-ba55-1062ee5ec3ae", "comment": "Malware payload", "value": "7ccd748e7cd3cc2cb747b87bdbdac4c23ad118837b496a19e7f69596dc256ed8", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185751, "uuid": "61c45892-d25a-4963-88f4-da00bddee3d2", "value": "T1A205E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185751, "uuid": "f763a7be-23e3-467a-8025-11355263d911", "value": "12288:lZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:lHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769185751, "uuid": "954191f4-a184-4699-a5ea-aa756582e9f8", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185751, "uuid": "1f67b088-69db-4b25-a121-75f4d81de28e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185751, "uuid": "70545a72-e57f-474e-8dea-a8cbe8227cc3", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1769185822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185822, "uuid": "19589d97-60cd-4ef8-ac4f-aa17df4fd440", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185822, "uuid": "f2479587-1e52-4c14-8fb9-aeb3ead49857", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185822, "uuid": "9104cfd3-5ce3-4fc2-a81e-05b5f1ace366", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185822, "uuid": "7c9c7067-2719-4e5d-9701-414d31818488", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769185822, "uuid": "bd369cf3-fbb9-4c07-ba32-64d668a86170", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb39bef5-f878-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769185867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185867, "uuid": "880b9132-7d05-4b2a-8bed-c565513b332f", "comment": "Malware payload", "value": "a6df6b6e590c956848e49a59e0fe78c2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185867, "uuid": "62645397-e9d4-4551-8f35-1b80668d7107", "comment": "Malware payload", "value": "b7914a2217f5b19b98fafb384d9eaaaaaccf187d143c6baf047a9f50efab2762", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185867, "uuid": "8b220091-c656-4846-a0de-ba9d9cb045a0", "value": "T1B734F1FFC075540CB8CF251E6C6EB136EA6E6504B027ECEA68985D07B4A96C31CF56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185867, "uuid": "31c1669d-2d74-4f3a-af5d-267412a6f6fd", "value": "6144:HFM6yH07o3s+DqprLmi4ntec+KXfvvPjjvPjjPfQDOl+EY:H3yH6o8UqT8HBvvPjjvPjjPfQDOhY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769185867, "uuid": "58c77143-da26-44d7-8a48-7c9878dfe696", "value": 247889, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185867, "uuid": "1d300565-d57a-44da-a373-152c956d0e11", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb4ffa59-f878-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769185867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185867, "uuid": "aa0f8188-af86-44f9-9081-1ff7665aa1f6", "comment": "Malware payload", "value": "bcd251ec096d0a957b1cd2980c824ec4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185867, "uuid": "6073429f-6333-48fb-9928-c18fe368d838", "comment": "Malware payload", "value": "d89352cb1b326deb4991a455197b0799fa618c138d540288281c6a41fec9e68a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185867, "uuid": "e45eeb87-a08a-426c-813c-5a9c41b11a38", "value": "T12D34F01E54F7BA6BD8D8443FB23E121EFAF19491EFF25035E66B8993D00942B1A302", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185867, "uuid": "30d7a581-f6f7-42cd-a150-0ed8861c6324", "value": "6144:nRzhRY5jC+M2B42sOpRkhBME72ByO9qU5KV:nREC+MW4ZHfJ72ByO9qIs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769185867, "uuid": "3edbdff9-af82-4919-8466-cf684ac110ad", "value": 247870, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185867, "uuid": "69445e84-2118-4fa4-a26a-6107afceb0f8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb76f58f-f878-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1769185867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185867, "uuid": "5aba9ec5-ad9a-4d57-baf8-6cd6798d4c4d", "comment": "Malware payload", "value": "e9abe6ef49c3af6e7bc9665de1b61146", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185867, "uuid": "31808c05-d60c-4ef8-9b35-35dc876e6208", "comment": "Malware payload", "value": "4d76963be244d3a779d2a5eaca64076a4de52a48568c5aab27f769a2d4e8ee3b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185867, "uuid": "c8a943c2-68f5-4cca-8f0d-bbe668ff4815", "value": "T18134E0CB633122BE6C730E180ADBED8E94F0A4E0396412DA2DE7D1447765A37BC375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185867, "uuid": "ec5c86b1-0022-4529-8023-6ade3dcac732", "value": "6144:HfU089OOvfxEVezTJeraduzrnpA/88qPBe:/U089dvfCoZ5uPpA/8JPE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769185867, "uuid": "ccf7aea9-1e02-486f-8e4e-1eb68020f574", "value": 247893, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185867, "uuid": "eefd00ef-daa6-4aa1-9a57-3c5060f713e1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c3055f7-074c-11ee-8817-82aee05be84a", "comment": "Malware payload", "timestamp": 1769186478, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769186478, "uuid": "b121b387-f1a9-4978-be29-d081d770c678", "comment": "Malware payload", "value": "5dbb6f5c4c524a5d6ca602569bbca0a4", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769186478, "uuid": "3d947044-3d47-45d8-8c79-17f5f24d5593", "comment": "Malware payload", "value": "9f436ef653c76f6ba28138010083981e519d329121498ce18dae02d5d6eca0cc", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769186478, "uuid": "2452bbf8-27cb-4ac4-afe7-474149ba6a49", "value": "T11564F18BFB21AC2FC9000B7115DB0759B3BCDA5A82C7D181F394C95F39BA285B7A11", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769186478, "uuid": "78a8e157-1e83-413c-90e2-4e552f043ab4", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xiojPOdOQ33Q:p3lOYoaja8xzx/0wsxzSiGPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769186478, "uuid": "39e3349c-df70-4c36-bf25-c0a79b2fb182", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769186478, "uuid": "a00ec450-2d26-4f3b-880d-22613eb7f86d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41870e0b-f883-11f0-8b2a-82aee05be84a", "comment": "Malware payload (TinyNuke)", "timestamp": 1769190307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769190307, "uuid": "5773543d-161d-4469-81b2-c5b72bb3c0ec", "comment": "Malware payload (TinyNuke)", "value": "7ca2e5f229fcbfe99ae59c0ea55e95c3", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "e3db0b", "colour": "#c7deaf", "exportable": true, "hide_tag": false }, { "name": "tinynuke", "colour": "#6e0287", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769190307, "uuid": "663bec3f-b88d-4890-97ad-c6addfd86845", "comment": "Malware payload (TinyNuke)", "value": "d22d60c754eb0bd1625d28dd7efaf4ca85fc034132831e9ece586f6c67bb5989", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "e3db0b", "colour": "#c7deaf", "exportable": true, "hide_tag": false }, { "name": "tinynuke", "colour": "#6e0287", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769190307, "uuid": "4457cf37-b4f8-4eb7-af5c-ef1c949bae4b", "value": "T172E2385F5DD0D8A9C8C346F96D0C672CDF9AAA7725D0932B8F6012A4E365266EC1C0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769190307, "uuid": "fb907f87-2d45-48a9-9d2a-2ea9cf16a099", "value": "16dd26b41c61918a10215696235d9e9f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769190307, "uuid": "a781aef9-4e9d-4a90-94b1-04b5e9130543", "value": "384:a8Uv1sfdj0W0Cy471+GWxktv+DqrKMp0i5u/Gkr8iH7gUutz7jBus6QosqSwGiD1:a8CCBTMvdUzu/GkYikT5lp0SwZ/tOZg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769190307, "uuid": "26399546-9fd6-4469-b033-858da3f79d88", "value": 32768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769190307, "uuid": "05c23d82-d0a9-4036-bd77-db198b298c80", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a99d0a7-f2f8-11f0-9446-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1769195346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769195346, "uuid": "33f0825c-7f09-417c-baab-dbd1087949e0", "comment": "Malware payload (DDoSAgent)", "value": "a25455618bc6a19b91aed30c64e2afa2", "object_relation": "md5", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769195346, "uuid": "772d965b-3153-4298-814e-a4304f941d34", "comment": "Malware payload (DDoSAgent)", "value": "ec12b5ee023ece253d4dbb0fd7fb45f8f5b21918ec7a550a203300265d3adfe1", "object_relation": "sha256", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769195346, "uuid": "995611c3-1fa8-4245-8314-916dd49e9291", "value": "T134F3380779C1CAFBC897D1F44BEBA521D931F82E1935715E27E0BE961B4CEE02A5D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769195346, "uuid": "57e2b5c6-a30a-47a4-9ac3-4f4d0cba7762", "value": "3072:2DNpZ6taj9mUU4Ywd1C1NxfnEte9oKMPIr5woSjb5Nm5BMOOOOOOOOOOOOOOOkOY:TB9AMHfE77PIu45BMOOOOOOOOOOOOOOx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769195346, "uuid": "5f55b383-77fe-4dfa-b980-928762d555b3", "value": 172008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769195346, "uuid": "399bc26b-9f90-4e02-9e28-a2688f72a6eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "579ce083-f892-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769196786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769196786, "uuid": "a75a7084-c08d-45be-a559-a0d34fcb813f", "comment": "Malware payload", "value": "c97280b8fb2f3282b76decb182798c6c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769196786, "uuid": "aa67de38-daf4-4d2d-8324-1118ec40afee", "comment": "Malware payload", "value": "4bb9d244d15f10af1978504725c46c393305edd294022f11581762883d674655", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769196786, "uuid": "a1ebcfea-91a8-4d65-9f19-516804ae4eec", "value": "T1B7246D7FF2912CD7C43285B65C3895701E0CA8E00356DA91B5ECB774DE626CB7B0A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769196786, "uuid": "0d76f4e4-c038-482b-8493-2e079321f8bd", "value": "3072:8swd+Lw96MKrpld6Fd2fVCWI74F6QsJH5CKil2PUm1+P1uJeTjdwnjq:8Iw0LK6skNsrCK1eXdh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769196786, "uuid": "99adf499-20ce-464d-b731-a76303e99693", "value": 218095, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769196786, "uuid": "7b32027e-9bc8-4e8d-a041-4aaad84136c9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55e0b469-f896-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769198501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769198501, "uuid": "1f4e4e60-64a5-4651-9615-afff65d2c7ba", "comment": "Malware payload (Mirai)", "value": "9da22840270a2356982501c37b1c5aa5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769198501, "uuid": "93d491fe-d587-4592-846a-04ef95dc7b33", "comment": "Malware payload (Mirai)", "value": "6e5318a39ab4a950c0b2876d204f889ad1f01bf7acd33a9385b58b7b7dd96626", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769198501, "uuid": "7ebbcb96-8310-4085-8ab9-69e779f89b61", "value": "T1769302479C8A8F70CF8B277C33957758ACD85A1B901930794BA5DE6FE7A3041A53C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769198501, "uuid": "23879def-4994-44b4-a0d6-375e421175f3", "value": "1536:IwjuSHSI8PNIrCLz1MK3iOSCIb3MniNJp1pBCt/+NSaSCSB1+dk63JhTRSZSp:I+uCSXNhLz1M2iOlIb3BpBCoSaLS7vK1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769198501, "uuid": "1daf1917-6012-4ccb-adea-743822d5446a", "value": 92748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769198501, "uuid": "7443d10b-fb27-4d5f-b6af-54375cd872ab", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "076f8853-f899-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769199658, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769199658, "uuid": "695a489d-59f3-461a-8462-88290b7708dc", "comment": "Malware payload", "value": "c77f567cb7b3133e7d0945b09f1c846b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769199658, "uuid": "0afceb23-eee9-4bbf-82f7-799a19fa5562", "comment": "Malware payload", "value": "bef7d8c28a41a36428d5993135650d308de4dc0bdd6189cec306c57bc7fe4a08", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769199658, "uuid": "d8eb1b37-7c95-44a5-858b-cb33add9f2e6", "value": "T1AF034B2B21AB20210523D05D77877BA931351167FB42CAE63DAC8071AFE7D92EB735", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769199658, "uuid": "993c9ee8-af7e-45a2-999d-f9eb80a4b9c2", "value": "768:wDSlf60pY9JKkGWkkg1kVpA3EHkV7kV3kVr3pkVskVA2kVRkV4kVPkV9QmVGIEGS:WUf60pYbKkGWkkg1YpA3EHY7Y3YbpYsM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769199658, "uuid": "dadf0733-52e5-4102-ae62-c37822c21379", "value": 40402, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769199658, "uuid": "8afe5bd6-20ba-4613-a974-b6cd1dbb0334", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0befa33b-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769201813, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769201813, "uuid": "e741bca0-6b17-4bfe-9ed6-08d6d9f4efb2", "comment": "Malware payload (Mirai)", "value": "fa3158200e7640ba34fa9daada1d963a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769201813, "uuid": "d8db5c32-000e-4b30-b043-682dc2c3e7db", "comment": "Malware payload (Mirai)", "value": "3ae1dbbf7c0c9f733c7d3344c5783902041c8c859185a8977d8ca29feeb4680f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769201813, "uuid": "07ff301d-ebe8-4c60-a1a9-19b63fbc5515", "value": "T1BCA3120063A59CE9FB100D7715ABB0B6571DF559503B778FE104A7880F8C37A927EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769201813, "uuid": "edb2ac95-4285-4571-8c0a-154034af064b", "value": "3072:O5zPSZRN6RKkZtcyrPv8e1LaXvSbSh3/AD4D:+z4K3BUR/WW3/u4D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769201813, "uuid": "0e75cfbc-20c2-46a2-bfdb-b632a0497996", "value": 103740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769201813, "uuid": "05c7be98-ba91-40cf-924d-342683b439f9", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75fc9105-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769201991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769201991, "uuid": "6dfa031b-2f09-43eb-9e87-8cae00b551b1", "comment": "Malware payload", "value": "205f5937af9a8f9c9ef6b854f87794a3", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769201991, "uuid": "6832c6b2-6d38-4aed-b71f-5777ccbfb673", "comment": "Malware payload", "value": "5a2497891794ec53eecd4976bec92dbed1be55180abc269b230ef20e8faa3245", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769201991, "uuid": "492cadab-2a57-46cf-bdf5-6d06329a198e", "value": "T113A62316C36FAD0DDCB2027528484073D730AA565B96B716BF946E3FACC3EA687843", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769201991, "uuid": "9c9e548d-333b-4ac6-8af6-3ea1f8171d07", "value": "196608:uSXKNZVwWDQ8JprnogXamYnOiiNeh4VmWAk4+thtL8CobR/HlATEwkZv8:uRNZV/QoJogGOiiMOVmcZtXohC4wkB8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769201991, "uuid": "5c0f2699-7dcd-4c1c-b948-9895696b645d", "value": 9678285, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769201991, "uuid": "fc828428-5149-435a-bb4f-5ff3efe3f745", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6e720e8-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1769202242, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202242, "uuid": "0770d5bd-2876-4f00-8f28-23d7321357b8", "comment": "Malware payload (CoinMiner)", "value": "a20727b81b50a20483ba59ae65443dfe", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202242, "uuid": "d57a875c-f93c-45ab-a4eb-3ab231ad1e1c", "comment": "Malware payload (CoinMiner)", "value": "af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4c", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769202242, "uuid": "63e18e0f-dbaa-4e21-91be-b6a4f37343a4", "value": "T167563362F440E436E038203925F684A6B17DFD7347254A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769202242, "uuid": "c8368ec2-3cd8-4a6f-af32-24e57bf8d687", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769202242, "uuid": "c83f7e0b-5ca3-44f8-8639-ad02c22adeed", "value": "98304:RLGSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+Y2naq8le+:YBfTCiUswVSLOJgyBG/aW+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769202242, "uuid": "2a5f57c9-1142-4e76-900c-12f25c2c2842", "value": 6271259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769202242, "uuid": "50b90c16-a50e-4617-ab98-c5143ef1c0d2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769126659, "uuid": "1045d91b-f7ef-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.160.225:53600/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769126896, "uuid": "9df5a36a-f7ef-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.123.120:52264/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769127310, "uuid": "945fc13c-f7f0-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.7.70:33708/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769127434, "uuid": "de4506e3-f7f0-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.48.162:50350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769128149, "uuid": "88d1bd09-f7f2-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.190:49979/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769128275, "uuid": "d3cd89ab-f7f2-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.252.217:59604/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769128996, "uuid": "814cbee1-f7f4-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.210.121:35859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769129414, "uuid": "7a6f0476-f7f5-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.190:49979/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769130071, "uuid": "020e9c2a-f7f7-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.225.233:57312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769130372, "uuid": "b5a5caaf-f7f7-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.179.92:38749/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769130619, "uuid": "48bf2531-f7f8-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.195.143:39297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769130674, "uuid": "69de9042-f7f8-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.174.220:35660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769130815, "uuid": "bda323b8-f7f8-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.105.215:45320/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769130968, "uuid": "18bb45ab-f7f9-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.12.224:43530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769131579, "uuid": "8537ff3a-f7fa-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.225.233:57312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769132052, "uuid": "9f3fd2fb-f7fb-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.185.221.169:50220/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769132422, "uuid": "7b50f433-f7fc-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.214.218:34742/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769132605, "uuid": "e8cf9d5e-f7fc-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.195.143:39297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769132843, "uuid": "76919a4b-f7fd-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.217.238:39554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769132902, "uuid": "995c48f1-f7fd-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.214.74:41044/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769132904, "uuid": "9af44d8c-f7fd-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.201.200:56179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769133143, "uuid": "29118356-f7fe-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.12.224:43530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769133675, "uuid": "6672f5d9-f7ff-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.243.94:42303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769133678, "uuid": "67f73e5b-f7ff-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.177.32.125:33213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769133731, "uuid": "87a93437-f7ff-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.174.220:35660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769134697, "uuid": "c7abfa8f-f801-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.9.180:33814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769135171, "uuid": "e23c0c5e-f802-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.136.85:53446/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769135359, "uuid": "5250cb14-f803-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.168.61:44062/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769135373, "uuid": "5a8e29ee-f803-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.190.172:38391/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769136080, "uuid": "ffea7a4b-f804-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.50.58:38549/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769136678, "uuid": "644177ba-f806-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.9.180:33814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769136733, "uuid": "8509bdb6-f806-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.136.85:53446/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769137221, "uuid": "a7f40e85-f807-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.77.127:43707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769137278, "uuid": "c9dc3fea-f807-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.36.133:57573/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769137278, "uuid": "ca3daef5-f807-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.36.133:57573/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769137337, "uuid": "ece33549-f807-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.30.53:55581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769137337, "uuid": "ed5f0563-f807-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.190.172:38391/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769137398, "uuid": "117b58d8-f808-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.230.86:45185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769137399, "uuid": "1233e4bb-f808-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.11.105:55990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769137511, "uuid": "54db675f-f808-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.0.245:55934/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769137511, "uuid": "550c3e26-f808-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.110.52:49322/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769137760, "uuid": "e8f5b29c-f808-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.216.248:59549/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769137871, "uuid": "2b1fb06c-f809-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.127.22:35566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769138120, "uuid": "bfd9dfad-f809-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.50.58:38549/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769138357, "uuid": "4d48607e-f80a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.254.95:42292/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769138649, "uuid": "fb237a4d-f80a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.211.50:33021/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769138774, "uuid": "45a81589-f80b-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.0.196:35269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769138774, "uuid": "45c9b8b1-f80b-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.77.127:43707/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769139607, "uuid": "364a8ea9-f80d-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.42.118:36843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769139969, "uuid": "0e1869a9-f80e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.123.120:52264/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769140096, "uuid": "5990416c-f80e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.0.196:35269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769140579, "uuid": "796a99bc-f80f-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.247.195:34324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769140580, "uuid": "7a3fa3fa-f80f-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.215.187:52861/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769140885, "uuid": "2fda8d48-f810-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.193.229:53441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769141059, "uuid": "97683326-f810-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.99.62.82:50478/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769141296, "uuid": "24d424cd-f811-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.36.247:37273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769141477, "uuid": "90ddb863-f811-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.187.0:34063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769142018, "uuid": "d3195aef-f812-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.99.62.82:50478/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769142080, "uuid": "f8442b92-f812-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.220.195:49242/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769142128, "uuid": "148f4b40-f813-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.236.70.50:45012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769142198, "uuid": "3e7cfcbe-f813-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.31.6:51010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769142366, "uuid": "a2be53ea-f813-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.215.187:52861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769142861, "uuid": "c9ea416c-f814-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.149.199:53485/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769143518, "uuid": "510fdc29-f816-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.149.199:53485/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769143701, "uuid": "be44dd93-f816-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.51.133:54197/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769143818, "uuid": "045d3e4e-f817-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.220.195:49242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769143986, "uuid": "682ab465-f817-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.20:36695/pwn.xml", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769144353, "uuid": "42ecea9f-f818-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.31.6:51010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769144829, "uuid": "5ed14177-f819-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.59.246:56466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769144893, "uuid": "848f5ffe-f819-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.51.133:54197/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769145377, "uuid": "a56907d1-f81a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.204:43343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769145377, "uuid": "a5951f06-f81a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.184.52:40382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769145377, "uuid": "a5993c8b-f81a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:47673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769145739, "uuid": "7d4a25d9-f81b-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.184.52:40382/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769145858, "uuid": "c3be094a-f81b-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.243.196:38537/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769146037, "uuid": "2e898ddc-f81c-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.253.128:39232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769146291, "uuid": "c600c2ec-f81c-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.60.173:35219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769146397, "uuid": "058763c1-f81d-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.109.219:35008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769146576, "uuid": "6fee6aa7-f81d-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.211.148:43245/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769146945, "uuid": "4c1d54c7-f81e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.201.34:56388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769147239, "uuid": "fb32f5bf-f81e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.132.107:58974/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769147307, "uuid": "23e1de40-f81f-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.149.161:48530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769147407, "uuid": "5f722eec-f81f-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.113.97:44175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769147409, "uuid": "60320c22-f81f-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.141.9:35746/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769147659, "uuid": "f534cb47-f81f-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.176.17.70:48429/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769147721, "uuid": "1a94a98a-f820-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.30.44:46001/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769147836, "uuid": "5f3416fb-f820-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.155.243.196:38537/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769147837, "uuid": "5fceebf4-f820-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.109.219:35008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769147956, "uuid": "a6b00e73-f820-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.230.141.123:44701/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769148249, "uuid": "54fd791c-f821-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7958327382/TVStKQL.exe", "Tag": [ { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769148259, "uuid": "5b06deff-f821-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.204:43343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769148499, "uuid": "ea0cdda5-f821-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.176.17.70:48429/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769148678, "uuid": "54b2c49d-f822-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.141.9:35746/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769148850, "uuid": "bb55457b-f822-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.132.107:58974/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769149518, "uuid": "4989cebd-f824-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.190:52003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769149691, "uuid": "b0974adf-f824-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.154.84.222:43765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769149813, "uuid": "f9609313-f824-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.201.205:58179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769150469, "uuid": "802405e9-f826-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.1.64:37538/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769150773, "uuid": "35b86de6-f827-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.114.199.203:52253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769150895, "uuid": "7e2cd3b7-f827-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.157.160:32887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151248, "uuid": "50798281-f828-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.190:52003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151248, "uuid": "5092b992-f828-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.201.205:58179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151312, "uuid": "77163928-f828-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.165.236:35038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151608, "uuid": "273cf80c-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.24/nuts/bolts", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151609, "uuid": "27b72ff5-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.24/nuts/poop", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151665, "uuid": "49544dce-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/2.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151665, "uuid": "49567349-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/9.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151665, "uuid": "49851c14-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/8.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151666, "uuid": "49e92f14-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/7.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151667, "uuid": "4a6b3716-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/3.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151676, "uuid": "50057c24-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.9:43113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151726, "uuid": "6dd6627d-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/10.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151726, "uuid": "6dd6ca37-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/17.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151726, "uuid": "6dd7e283-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/14.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151726, "uuid": "6ddb324e-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/16.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151727, "uuid": "6dfa92d7-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/13.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151727, "uuid": "6dfa9b06-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/4.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151728, "uuid": "6ea57bb5-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/15.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151728, "uuid": "6ea77228-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/18.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151728, "uuid": "6ea8b062-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/12.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151728, "uuid": "6ec97ec3-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/11.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "91b67f3c-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/19.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "91bad6bc-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/28.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "91bb1eeb-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/5.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "91cfddb0-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/25.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "91e616b0-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/20.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "91efd4fe-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/24.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "9204da7d-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/1.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "920759d8-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/6.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "9221453d-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/27.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "9221b422-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/22.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "923106dc-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/23.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "9235ce3a-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/21.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151787, "uuid": "923b16d2-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/26.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151796, "uuid": "97135123-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.143.180:50302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151846, "uuid": "b56ae49f-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/34.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "b5a6cdc7-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/37.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "b5a96cea-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/38.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "b5a96e57-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/30.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "b5a96fca-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/29.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "b5c00204-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/31.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "b5c0045a-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/35.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "b5c2e755-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/33.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151847, "uuid": "b6068a63-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/39.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151848, "uuid": "b612c549-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/36.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151908, "uuid": "d9eb8754-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/40.exe", "Tag": [ { "name": "BlackMatter", "colour": "#36558E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769151916, "uuid": "ded831e7-f829-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.41.169:40827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769152151, "uuid": "6ab2a48c-f82a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.220.84:39131/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769152215, "uuid": "9157f5d7-f82a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.36.247:37273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769152336, "uuid": "d972cc82-f82a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.41.169:40827/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769152457, "uuid": "213342e1-f82b-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.114.199.203:52253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769152457, "uuid": "219dfffb-f82b-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.201.34:56388/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769152517, "uuid": "45477a22-f82b-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.157.160:32887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769152573, "uuid": "663ecbd1-f82b-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.127.195:42065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153063, "uuid": "8ab72b47-f82c-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.230.141.123:44701/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153115, "uuid": "a9aef662-f82c-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.9:43113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153117, "uuid": "aad26a52-f82c-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.102.180:53297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153239, "uuid": "f3aa4cde-f82c-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.28.11:56595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153296, "uuid": "15b402a2-f82d-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.46.20:32991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153729, "uuid": "17697fe1-f82e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.197.22:46402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153838, "uuid": "587f1cda-f82e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.143.180:50302/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769153839, "uuid": "58e7659f-f82e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.213.198:39206/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154334, "uuid": "800b5871-f82f-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.220.84:39131/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154501, "uuid": "e3a61699-f82f-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.51.109:35953/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154548, "uuid": "ffa2bf2a-f82f-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7435145147/KZA247N.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06d6bc70-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.88.164.167/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06e35ecd-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.88.164.167/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06e38c5a-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.151.194/bot.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06e3c91b-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.88.164.167/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06e44a49-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.88.164.167/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06e4d325-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.198.234.181/armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06e4f5e6-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.151.194/bot.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06e4f772-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.88.164.167/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06e8023a-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.88.164.167/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06e95b8b-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.151.194/bot.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06e9a616-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.88.164.167/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06ea6e03-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.88.164.167/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06eaf3e6-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.151.194/bot.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06ed1a31-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.88.164.167/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06eecc31-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.151.194/bot.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06eed971-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.88.164.167/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06ef70b6-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.88.164.167/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06ef7349-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.151.194/bot.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06ef7b81-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.198.234.181/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06ef8320-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.151.194/bot.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06efaabf-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.198.234.181/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06efb8d7-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.198.234.181/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154560, "uuid": "06f99249-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.198.234.181/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154561, "uuid": "074dd7e4-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.151.194/bot.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154571, "uuid": "0d4d4d65-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.151.194/bot.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154573, "uuid": "0e806dc8-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.151.194/bot.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154573, "uuid": "0e83f626-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.151.194/bot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154683, "uuid": "5030b787-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.46.20:32991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769154866, "uuid": "bd552405-f830-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.28.11:56595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155268, "uuid": "ac8d964e-f831-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "https://maxbet-88.com/ProjectApplication.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155268, "uuid": "acfa7f96-f831-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.12/public_files/yYZNrD0.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155268, "uuid": "ad112025-f831-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.84.211:8000/52.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155269, "uuid": "adabf24d-f831-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.12/public_files/9nGprmg.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155270, "uuid": "ae198a74-f831-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "https://api.robquiz.com/luemi/SaintMario.ps1", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155330, "uuid": "d1b40ebf-f831-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.46.173.4/sampp/ConvertacacacedFile.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155330, "uuid": "d1b647cd-f831-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.46.173.4/sampp/wetpussy.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155330, "uuid": "d1b72f82-f831-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.46.173.4/sampp/lime.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155330, "uuid": "d1b7323e-f831-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.46.173.4/sampp/dkar.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155330, "uuid": "d1b9f215-f831-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.46.173.4/sampp/kante.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155330, "uuid": "d1bcc418-f831-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.46.173.4/sampp/wzaq.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155330, "uuid": "d1be988b-f831-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.46.173.4/sampp/stock2.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155330, "uuid": "d1beb969-f831-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.46.173.4/sampp/ConvertallllledFile.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155330, "uuid": "d1d0c6b6-f831-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.46.173.4/sampp/ConverasiaaaaatedFile.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155450, "uuid": "197b586c-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.239.92:45714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155464, "uuid": "217f4157-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.197.22:46402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155510, "uuid": "3cdc04ed-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.9/oDYyebDqpkjUj/titanjr.", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155510, "uuid": "3ce69320-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.234.99.70/huhu/titanjr.", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155510, "uuid": "3d0283a6-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.115.193/huhu/titanjr.", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155510, "uuid": "3d09e7d0-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.215.40/huhu/titanjr.", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155512, "uuid": "3e8ba26b-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://bigbins.rebirth.st/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155519, "uuid": "428475d3-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://bigbins.rebirth.st/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155522, "uuid": "44237d39-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://bigbins.rebirth.st/mipss", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155525, "uuid": "46445bee-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.223.9.29/huhu/titanjr.", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155533, "uuid": "4a9c5271-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://bigbins.rebirth.st/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155533, "uuid": "4a9c52b0-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://bigbins.rebirth.st/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155533, "uuid": "4a9c81cf-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://bigbins.rebirth.st/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155651, "uuid": "91594974-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.51.109:35953/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155657, "uuid": "94ee5d3c-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.69.109:55228/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155707, "uuid": "b2aa4cdd-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.201.186:42988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155820, "uuid": "f5cac44f-f832-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.91.224:56848/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769155939, "uuid": "3ce83c80-f833-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.91.224:56848/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769156420, "uuid": "5b8c997c-f834-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.69.109:55228/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769156550, "uuid": "a8cb7212-f834-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.68.41:33613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769156873, "uuid": "69a6a2bb-f835-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.239.92:45714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769156873, "uuid": "69b1d63c-f835-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.201.186:42988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769157252, "uuid": "4b43f17d-f836-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.206.235:55353/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769157739, "uuid": "6de0c7b6-f837-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.223.195:37665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769158400, "uuid": "f7aabd98-f838-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.196.164:38144/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769158640, "uuid": "868b6a7c-f839-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.13.232:50870/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769158829, "uuid": "f778d882-f839-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.57.49:42804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769158882, "uuid": "16f482a6-f83a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.66.28:43992/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769158986, "uuid": "54bb1a03-f83a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "https://alikaraw.com/bot.txt", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769159006, "uuid": "60c45dcf-f83a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.252.200:42626/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769159009, "uuid": "62c30f1c-f83a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.148.227:43252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769159059, "uuid": "804164b3-f83a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.223.195:37665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769159131, "uuid": "ab2ccc88-f83a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.189.212:56823/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769159254, "uuid": "f4f080c2-f83a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.107.177:34351/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769159673, "uuid": "ee7f8ba1-f83b-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.206.235:55353/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769159682, "uuid": "f39c84f9-f83b-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.62.45:58051/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769160104, "uuid": "ef96f48c-f83c-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.68.41:33613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769160189, "uuid": "22147cf4-f83d-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.57.49:42804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769160322, "uuid": "71668667-f83d-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.236:49595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769160369, "uuid": "8d743f7c-f83d-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.62.45:58051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769160554, "uuid": "fba5687a-f83d-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.56.147:52101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769160906, "uuid": "cd2d54f4-f83e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.178.136.19/32.exe", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769161275, "uuid": "a935d7a2-f83f-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.44.19:34132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769161407, "uuid": "f7ad3e3f-f83f-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.78.43:52115/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769161820, "uuid": "ee63a559-f840-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.236:49595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769161929, "uuid": "2edc1680-f841-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.56.147:52101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769161986, "uuid": "50c9d5cc-f841-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5748594824/6qvQZq7.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769161993, "uuid": "55617b25-f841-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.208.153:60301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769161993, "uuid": "55651a14-f841-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.13.232:50870/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769162585, "uuid": "b64f1c51-f842-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7024015129/zrcKMfi.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769162709, "uuid": "003dfdfc-f843-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.107.166:53687/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769162777, "uuid": "28ca63a3-f843-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.44.19:34132/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769163247, "uuid": "40ee0478-f844-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.14.227:51140/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769163969, "uuid": "ef3ae1a0-f845-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.127.195:42065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769164095, "uuid": "39fe1830-f846-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.212.72:52528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769164930, "uuid": "2bd4b9ec-f848-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.184.210:49494/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769164930, "uuid": "2bd962c5-f848-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.217.108.77:35941/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165000, "uuid": "55cdcce8-f848-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.184.210:49494/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165178, "uuid": "bf714c24-f848-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.30.44:46001/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165410, "uuid": "49d8f8f0-f849-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://delwayne.alwaysdata.net/Windowsetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165532, "uuid": "92d55144-f849-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.212.72:52528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165648, "uuid": "d7a5f420-f849-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.236:44665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165970, "uuid": "97ed62fe-f84a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.111.55.202/docker", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "997053b6-f84a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.111.55.202/SupplySrvm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "99720d42-f84a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.111.55.202/SupplySrvspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "997456c3-f84a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.111.55.202/SupplySrvx64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "99777e09-f84a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.111.55.202/SupplySrvx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "997da85e-f84a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.111.55.202/SupplySrvppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "99831005-f84a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.111.55.202/SupplySrvmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "99840b50-f84a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.111.55.202/SupplySrvmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "9986792a-f84a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.111.55.202/SupplySrvsh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165973, "uuid": "9989128f-f84a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.111.55.202/SupplySrvarm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769165974, "uuid": "99da60c6-f84a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.111.55.202/SupplySrvarm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769167045, "uuid": "189a505d-f84d-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.97.78:56559/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769167209, "uuid": "7a146037-f84d-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.236:44665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769167458, "uuid": "0e971585-f84e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.150.69:55622/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769167589, "uuid": "5ca0b564-f84e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.35.78.2:55827/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769167748, "uuid": "bb84284d-f84e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.228.95.68:10081/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769168299, "uuid": "03deac8c-f850-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.150.69:55622/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769168411, "uuid": "46eaaf68-f850-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.97.78:56559/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769169208, "uuid": "216941aa-f852-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.78:44228/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769169557, "uuid": "f1c967d6-f852-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.189.212:56823/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769169557, "uuid": "f1df71b5-f852-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.201.127:49120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769169670, "uuid": "34fd4ccf-f853-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.106.11:55742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769170337, "uuid": "c2e196b0-f854-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.52.11:48565/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769170387, "uuid": "e0bbdf08-f854-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.143.96:43906/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769170812, "uuid": "ddc23341-f855-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.78:44228/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769172018, "uuid": "ac845b47-f858-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.52.11:48565/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769172136, "uuid": "f3361cfc-f858-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.252.200:39862/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769172189, "uuid": "1293c0ce-f859-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.221.167:50908/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769173221, "uuid": "79c624eb-f85b-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.85.58:50142/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769173328, "uuid": "b92838fb-f85b-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "https://duhsv690.cinderpouch.ru/?=check&&actmn=eReMhziqrPGQJVHO", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769173630, "uuid": "6d28e024-f85c-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.85.58:50142/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769174239, "uuid": "d8367a38-f85d-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.185.42:47327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769174239, "uuid": "d85cd0fe-f85d-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.225.240:44409/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769174380, "uuid": "2ca97416-f85e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.196.136:57547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769174410, "uuid": "3e2b1722-f85e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.252.200:39862/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769174661, "uuid": "d3d077a3-f85e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.164.74.141:48242/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175028, "uuid": "aebb7d2d-f85f-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.199.6:37611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175445, "uuid": "a76e4061-f860-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.196.136:57547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175623, "uuid": "115cf959-f861-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.118.119:54569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175623, "uuid": "118ba4eb-f861-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.164.74.141:48242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175672, "uuid": "2eb4346c-f861-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.225.240:44409/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769175673, "uuid": "2f54f677-f861-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.153.118:34352/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769176221, "uuid": "75ad1096-f862-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.199.6:37611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769177178, "uuid": "afec4f71-f864-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.153.118:34352/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769178485, "uuid": "bb6a4dc0-f867-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5279938618/McZEgNt.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769178486, "uuid": "bc03c44a-f867-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/c9r7n6.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769178687, "uuid": "3387420b-f868-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.144.165:56085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769178862, "uuid": "9bb2e211-f868-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.66.230:57355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179029, "uuid": "ff557765-f868-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.165.60.60:9090/ssh2.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ReverseSSH", "colour": "#032A55", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179029, "uuid": "ff58c861-f868-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.165.60.60:9090/ssh.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ReverseSSH", "colour": "#032A55", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179031, "uuid": "008b13e9-f869-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.165.60.60:9090/yandex.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179091, "uuid": "2470369c-f869-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.66.230:57355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179407, "uuid": "e08dfe68-f869-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.144.165:56085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179587, "uuid": "4be29ae5-f86a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.114:60226/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769179820, "uuid": "d6e11487-f86a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.149.133:43192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180002, "uuid": "43a0346f-f86b-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.65.176:37910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180478, "uuid": "5f0eaea7-f86c-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.56.236:41814/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180541, "uuid": "8477f869-f86c-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.27.224.88:57604/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180610, "uuid": "adb4e3e8-f86c-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.123.148:34633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180661, "uuid": "cc457b92-f86c-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.238.113:40324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180715, "uuid": "ec6d30d5-f86c-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.51.48:59593/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180782, "uuid": "14444e7f-f86d-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.163:54335/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769180834, "uuid": "335a9d1a-f86d-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.147.13.105:10002/down/arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "vshell", "colour": "#d2c6e9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181202, "uuid": "0ed700cb-f86e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.65.176:37910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181440, "uuid": "9c6f5008-f86e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.13.104:56254/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181493, "uuid": "bbf96b88-f86e-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.149.133:43192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769181853, "uuid": "92dcdd77-f86f-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.118.119:54569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769182156, "uuid": "47992166-f870-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.163:54335/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769182157, "uuid": "47fbb582-f870-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.51.48:59593/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769182997, "uuid": "3c6cb46d-f872-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.13.104:56254/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769183056, "uuid": "5fba69da-f872-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.189.162:57159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769183180, "uuid": "a97021b3-f872-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.243.187.129:58008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769183590, "uuid": "9dd54525-f873-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.22.30.124:48401/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769184008, "uuid": "97556ada-f874-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://sharecodepro.com/uploads/e93d371c8a19cb07.msi", "Tag": [ { "name": "9c4517", "colour": "#74a5be", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769184433, "uuid": "94a99e5e-f875-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.111.55.202/bash", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Tsunami", "colour": "#cb6771", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769184677, "uuid": "261701fd-f876-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.111.55.202/ok", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "Tsunami", "colour": "#cb6771", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769184677, "uuid": "2629f38e-f876-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.111.55.202/ovh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769184846, "uuid": "8abfe9c9-f876-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.200.169:54083/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185395, "uuid": "d222802a-f877-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.200.169:54083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185747, "uuid": "a3bba683-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.181.240.244:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185747, "uuid": "a3f6a803-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.18.155.134:91/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185748, "uuid": "a4137d76-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.140.251/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185748, "uuid": "a4751e7a-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.24.74.0:10072/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185749, "uuid": "a530b51d-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.119.154.173:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185750, "uuid": "a556d259-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.246.149:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185751, "uuid": "a5fcc4f1-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.23.89.5:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185752, "uuid": "a6742f6a-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.166.130/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185752, "uuid": "a6a39e14-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.233.148.188/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185821, "uuid": "cf9e1b74-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.163.117.220:38340/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185821, "uuid": "cf9e2bd5-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.113.38.99:33617/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185821, "uuid": "cff40c72-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.251.254.221:24472/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185822, "uuid": "d0a995ce-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.222.147.66:49502/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185867, "uuid": "eb7e08ad-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.120.32.72:8075/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185867, "uuid": "eb89cdac-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.210.125.140/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769185868, "uuid": "eb96f208-f878-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.55.154.4:443/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769186479, "uuid": "57e65c6f-f87a-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.190.66:34699/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769186773, "uuid": "0741e38f-f87b-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.21.167:46938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769187009, "uuid": "93d0f0b6-f87b-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.247.113:42107/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769187196, "uuid": "031c10b6-f87c-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.213.198:39206/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769187983, "uuid": "d84f2a38-f87d-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.24.54:58160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769188651, "uuid": "6678f321-f87f-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/822916975/28MZ5hx.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769189175, "uuid": "9ee88cae-f880-11f0-9446-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.99.215:38324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769190259, "uuid": "2502fa68-f883-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.154.210:58052/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769190307, "uuid": "41dbd1ea-f883-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.151/Bot.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "e3db0b", "colour": "#c7deaf", "exportable": true, "hide_tag": false }, { "name": "tinynuke", "colour": "#6e0287", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769190308, "uuid": "424808e2-f883-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/1660276343/xpUmjwb.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769190371, "uuid": "681e1012-f883-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.210.173:48090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769190376, "uuid": "6aadbbd6-f883-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.210.173:48090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769190486, "uuid": "ac5f4fe5-f883-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7730186811/C7OvZBU.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769191038, "uuid": "f55e20c4-f884-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.130.105:50811/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769191038, "uuid": "f568ad2e-f884-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.251.130:34174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769191448, "uuid": "e9cf0f07-f885-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.232.96:49255/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769191696, "uuid": "7dc89d06-f886-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.81.131:55872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769191747, "uuid": "9be078c7-f886-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.251.130:34174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769192348, "uuid": "0222a58b-f888-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.2.243:48634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769192710, "uuid": "da36e265-f888-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.154.210:58052/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769192776, "uuid": "017f55de-f889-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.232.96:49255/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769193256, "uuid": "1f6aff21-f88a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.2.243:48634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769193675, "uuid": "192db18b-f88b-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.140.147:34258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769194455, "uuid": "e9ffca06-f88c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.1.64:37538/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769194526, "uuid": "1430784b-f88d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.149.180:44539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769195120, "uuid": "76c0a123-f88e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.186.32:35709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769195174, "uuid": "96b4cae2-f88e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.84.141:45498/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769195347, "uuid": "fd794b92-f88e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.98.61.207/x86_64", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769195477, "uuid": "4b3d103e-f88f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.5.163:40515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769195717, "uuid": "da34041b-f88f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.59.246:56466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769195769, "uuid": "f9400165-f88f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.13.57:55320/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769195829, "uuid": "1d537c4f-f890-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.32.142:56894/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769196259, "uuid": "1d38cc92-f891-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.149.180:44539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769196911, "uuid": "a2114869-f892-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7149178118/YTNlVXq.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769197403, "uuid": "c74b0e6c-f893-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.13.57:55320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769197448, "uuid": "e1eeab0b-f893-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.76/avx", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769197632, "uuid": "4fa523cd-f894-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.1.217/nuts/poop", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769197642, "uuid": "55bca41f-f894-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.32.142:56894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769197689, "uuid": "7191e29a-f894-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.1.217/nuts/bolts", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769199846, "uuid": "779728af-f899-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.176/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769199846, "uuid": "7797293e-f899-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.176/payload.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769199846, "uuid": "77972c99-f899-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.176/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769199846, "uuid": "779736a0-f899-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.176/arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769199846, "uuid": "779736bc-f899-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.176/arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769199848, "uuid": "78c9c000-f899-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.176/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769199848, "uuid": "78d248bf-f899-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.176/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769199848, "uuid": "78dba713-f899-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.176/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769199849, "uuid": "78e13542-f899-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.176/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769199849, "uuid": "78e1af10-f899-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.176/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769199855, "uuid": "7c836bda-f899-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.64.176/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769199864, "uuid": "81e94c6f-f899-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.241.217:46613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200167, "uuid": "3695b6e7-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.243.124.199/johenlastgen/johen.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200167, "uuid": "36ac965f-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.243.124.199/johenlastgen/johen.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200167, "uuid": "36c394e3-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.243.124.199/johenlastgen/johen.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200167, "uuid": "36e0369a-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.243.124.199/johenlastgen/johen.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200168, "uuid": "370c96f5-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.243.124.199/johenlastgen/johen.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200168, "uuid": "3722178e-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.243.124.199/johenlastgen/johen.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200168, "uuid": "373942a3-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.243.124.199/johenlastgen/johen.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200168, "uuid": "374f3537-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.243.124.199/johenlastgen/johen.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200168, "uuid": "37670882-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.243.124.199/johenlastgen/johen.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200168, "uuid": "3789cc40-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.243.124.199/johenlastgen/johen.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200169, "uuid": "37a4521e-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.243.124.199/johenlastgen/johen.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200169, "uuid": "37c33bd0-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.243.124.199/johenlastgen/johen.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200169, "uuid": "37e2f4ba-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.243.124.199/johenlastgen/johen.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200169, "uuid": "37fbfa8f-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.243.124.199/johenlastgen/johen.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200169, "uuid": "381156da-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.243.124.199/johenlastgen/johen.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200211, "uuid": "50de6b4d-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.191.214:54372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200211, "uuid": "511d7c81-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.183.190:48925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200333, "uuid": "997cdbb8-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.116.51:32856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769200446, "uuid": "dd18617e-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.151/rkcvo.exe", "Tag": [ { "name": "b80777", "colour": "#b438a5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769201235, "uuid": "b38ed474-f89c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.116.51:32856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769201299, "uuid": "d9b20a99-f89c-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.18.241:43244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769201534, "uuid": "6594c8c3-f89d-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.183.190:48925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202064, "uuid": "a1987ec3-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.68:46820/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202081, "uuid": "ab4587a2-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.61.32:34549/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202081, "uuid": "ab4f195c-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.73.162:57348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202081, "uuid": "ab5896eb-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.81.83:55404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202081, "uuid": "abb04d63-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.94.220.166:57924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202081, "uuid": "abbe6fbd-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.133.184:56969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202142, "uuid": "cfa8ffcf-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.155.154:60826/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202142, "uuid": "cfa90077-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.79.85.69:9426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202142, "uuid": "cfa904d6-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:47673/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202142, "uuid": "d00dc3ec-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.21.127:57730/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202186, "uuid": "ea594ef5-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://elimnasir.com/private/profile-ajax.js", "Tag": [ { "name": "SmartApeSG", "colour": "#959527", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202187, "uuid": "ea95fc21-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://elimnasir.com/private/callback-fetch.js", "Tag": [ { "name": "SmartApeSG", "colour": "#959527", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202198, "uuid": "f184c63e-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.228.194:53516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202380, "uuid": "5db82beb-f89f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.191.14:37375/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202555, "uuid": "c5fde464-f89f-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.191.214:54372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769202920, "uuid": "9f7fac17-f8a0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.230.193:57709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769203187, "uuid": "3ebc88c9-f8a1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.76/f33.png", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769203940, "uuid": "ff98b4c6-f8a2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.169.41:32978/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769204429, "uuid": "234f0276-f8a4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.120.109:34418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769204530, "uuid": "5f3962ea-f8a4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.74:38260/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769204951, "uuid": "59f62e0b-f8a5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.230.193:57709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769206871, "uuid": "d26afd71-f8a9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.74.96:34316/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769206933, "uuid": "f75a92f9-f8a9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.120.109:34418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769206995, "uuid": "1c703664-f8aa-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.84.219:41305/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769207109, "uuid": "607e121e-f8aa-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8460986495/Rw2DC91.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769207357, "uuid": "f491752e-f8aa-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7149178118/0WGZcWD.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769207586, "uuid": "7ccca6d6-f8ab-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.117.6/bins/m1ps", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769207656, "uuid": "a64036d9-f8ab-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.0.245:55934/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769208726, "uuid": "244c46fb-f8ae-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.151:50787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769208805, "uuid": "534919e3-f8ae-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.68.221:39432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769208922, "uuid": "991fa565-f8ae-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.84.219:41305/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769209327, "uuid": "8a6e0d9c-f8af-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.93.20.151/Installer.exe", "Tag": [ { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "zobpx", "colour": "#c91779", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769209331, "uuid": "8ca2a517-f8af-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.74.239:49974/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769209807, "uuid": "a8c335af-f8b0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7377994722/pwx8Qhg.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769209994, "uuid": "17cc7185-f8b1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.4.81:37024/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769210414, "uuid": "1278c36a-f8b2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.68.221:39432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769210427, "uuid": "19eee23b-f8b2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.212.209:60103/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769210834, "uuid": "0ce50a33-f8b3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.139:46685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769211135, "uuid": "c05071d4-f8b3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.47:46427/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769211137, "uuid": "c113187c-f8b3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://189.165.213.116:4307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769211494, "uuid": "96437d28-f8b4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.94.225:57408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769211555, "uuid": "baa834bf-f8b4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.21.127:57730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769211671, "uuid": "ffa5c22a-f8b4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.39.195:51440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769212033, "uuid": "d732f415-f8b5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.151:50787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769212508, "uuid": "f29578be-f8b6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:48341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769212573, "uuid": "193cb467-f8b7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.182.172:43557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185864, "uuid": "e96b36b3-f878-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.55.154.4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165968, "uuid": "96878bec-f84a-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.111.55.202", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "Tsunami", "colour": "#cb6771", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769204524, "uuid": "5bac49d7-f8a4-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.29.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165645, "uuid": "d60fc3a9-f849-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.53.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769211483, "uuid": "8fbfccae-f8b4-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.94.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180584, "uuid": "9e82fcd9-f86c-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.123.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769159225, "uuid": "e3a6ce4d-f83a-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.107.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769174344, "uuid": "173b3545-f85e-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.252.196.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769183584, "uuid": "9a69fb5b-f873-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.22.30.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769169664, "uuid": "319cef50-f853-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.106.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769164924, "uuid": "2810ab2e-f848-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.184.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769135344, "uuid": "49492333-f803-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.190.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769189165, "uuid": "993f141a-f880-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.99.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769137506, "uuid": "518eeb38-f808-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.110.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769167745, "uuid": "b9757a08-f84e-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.228.95.68", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769202905, "uuid": "96e09a69-f8a0-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.230.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175664, "uuid": "29e2d514-f861-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.153.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769202364, "uuid": "54443996-f89f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.191.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769152144, "uuid": "6707966e-f82a-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.220.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769143684, "uuid": "b4234fa3-f816-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.51.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180465, "uuid": "5721aa2b-f86c-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.56.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153824, "uuid": "5014b8eb-f82e-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.213.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769134683, "uuid": "bf7856fa-f801-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.9.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769200324, "uuid": "9444868e-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.116.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769175605, "uuid": "06cd0f6c-f861-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.118.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769202064, "uuid": "a159879e-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.133.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769167446, "uuid": "073f5763-f84e-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.150.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769190244, "uuid": "1c03f592-f883-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.154.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769194505, "uuid": "07bf96c8-f88d-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.149.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769137384, "uuid": "0904ecbe-f808-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.11.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769158985, "uuid": "544ec968-f83a-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.148.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769132884, "uuid": "8eb3d1ec-f7fd-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.201.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155805, "uuid": "ed2abbfc-f832-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.91.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769208783, "uuid": "4671f71d-f8ae-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.68.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769204405, "uuid": "15075f40-f8a4-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.120.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769159645, "uuid": "dda23fa2-f83b-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.62.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769130784, "uuid": "ab10c7b0-f7f8-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.105.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769151784, "uuid": "90403515-f829-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.143.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769158985, "uuid": "544eccd5-f83a-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.252.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769135344, "uuid": "49492e44-f803-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.168.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769174645, "uuid": "ca8623b8-f85e-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.164.74.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769157244, "uuid": "46e1be12-f836-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.186.206.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769190364, "uuid": "639572d9-f883-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.186.210.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185744, "uuid": "a1b4c7ec-f878-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.246.149", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769161384, "uuid": "ea6e475c-f83f-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.78.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769127425, "uuid": "d8fcbcb2-f7f0-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.48.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769202125, "uuid": "c57c8473-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.21.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769130064, "uuid": "fe33d60d-f7f6-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.225.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769195823, "uuid": "19c16366-f890-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.32.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179805, "uuid": "ce0c61a7-f86a-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.149.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769145365, "uuid": "9e2958de-f81a-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.184.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769159107, "uuid": "9ce45c00-f83a-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.189.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769147405, "uuid": "5e235b59-f81f-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.141.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769192343, "uuid": "ff7ed65b-f887-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.2.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185744, "uuid": "a1b4e1ee-f878-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.233.148.188", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155265, "uuid": "aae88c91-f831-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.31.84.211", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769133663, "uuid": "5f2790aa-f7ff-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "160.177.32.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769200144, "uuid": "2932d58e-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "162.243.124.199", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154545, "uuid": "fda116b5-f82f-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "167.88.164.167", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769137864, "uuid": "272a7e4d-f809-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.127.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769195164, "uuid": "90c0c0a4-f88e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.84.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769150465, "uuid": "7e3037e7-f826-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.166.1.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180706, "uuid": "e6ecff62-f86c-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.166.51.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769130665, "uuid": "64241627-f7f8-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.174.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769140864, "uuid": "23936c1d-f810-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.168.193.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769144824, "uuid": "5bcaf700-f819-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.59.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185807, "uuid": "c779dbac-f878-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.251.254.221", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154545, "uuid": "fda0640f-f82f-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.151.194", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769149685, "uuid": "acda5183-f824-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "177.154.84.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185807, "uuid": "c779eec9-f878-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "177.222.147.66", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769183165, "uuid": "a080e8af-f872-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.243.187.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769141044, "uuid": "8e7d314b-f810-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "181.99.62.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769173206, "uuid": "70dfb8bc-f85b-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.85.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154485, "uuid": "da39b8a7-f82f-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.51.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769126884, "uuid": "96c5249a-f7ef-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.123.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769195763, "uuid": "f5bf39c8-f88f-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.13.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769156526, "uuid": "9a6502f8-f834-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.68.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769195105, "uuid": "6d50a2b9-f88e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.186.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769136064, "uuid": "f64b5bf1-f804-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.50.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769130605, "uuid": "406675b3-f7f8-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.195.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769142185, "uuid": "36fbdae2-f813-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.31.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769137206, "uuid": "9ee616d9-f807-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.77.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769154545, "uuid": "fda04600-f82f-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.198.234.181", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769211124, "uuid": "b9898666-f8b3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "189.165.213.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155325, "uuid": "ceed295b-f831-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "198.46.173.4", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769195344, "uuid": "fbd07abb-f88e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "198.98.61.207", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769179025, "uuid": "fd14e467-f868-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.165.60.60", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ReverseSSH", "colour": "#032A55", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769197624, "uuid": "4b1812e0-f894-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.60.1.217", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769138344, "uuid": "458d3326-f80a-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.60.254.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769172184, "uuid": "0fb9db6e-f859-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.221.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769191024, "uuid": "ed4fb7bc-f884-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.251.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769160545, "uuid": "f62cd542-f83d-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.56.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769132405, "uuid": "7184cf45-f7fc-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.214.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769161264, "uuid": "a2bff548-f83f-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.44.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769147223, "uuid": "f1ad7a1f-f81e-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.132.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769167025, "uuid": "0c816f7e-f84d-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.97.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769186464, "uuid": "4f54bdfa-f87a-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.190.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769174224, "uuid": "cf91e20c-f85d-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.225.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153284, "uuid": "0e520027-f82d-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.46.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769158865, "uuid": "0cb0bc94-f83a-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.66.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769164924, "uuid": "2810b0d7-f848-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.217.108.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769158624, "uuid": "7d574058-f839-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.220.13.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185744, "uuid": "a1b3e70e-f878-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.119.154.173", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769158385, "uuid": "ee8512b9-f838-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.196.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769187006, "uuid": "9217050b-f87b-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.247.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769200204, "uuid": "4d027cdf-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.191.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769187965, "uuid": "cd9cb658-f87d-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.24.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769170384, "uuid": "dedc11af-f854-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.143.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769146923, "uuid": "3f15f910-f81e-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.201.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769191024, "uuid": "ed4fc0c7-f884-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.130.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769137264, "uuid": "c1e4818d-f807-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.36.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153224, "uuid": "ea8abed8-f82c-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.28.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769201284, "uuid": "d068b7a5-f89c-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.18.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769203924, "uuid": "f6126597-f8a2-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.169.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155684, "uuid": "a5026321-f832-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.201.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769199845, "uuid": "769727e3-f899-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.241.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155444, "uuid": "15ab5d70-f832-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.239.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769146264, "uuid": "b621e6f9-f81c-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.60.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769193663, "uuid": "12498971-f88b-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.140.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769207584, "uuid": "7b703a31-f8ab-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.141.117.6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769190305, "uuid": "40b51850-f883-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.93.20.151", "Tag": [ { "name": "b80777", "colour": "#b438a5", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "e3db0b", "colour": "#c7deaf", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "tinynuke", "colour": "#6e0287", "exportable": true, "hide_tag": false }, { "name": "zobpx", "colour": "#c91779", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180525, "uuid": "7b3028c1-f86c-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.27.224.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769147644, "uuid": "ec90532a-f81f-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.176.17.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155626, "uuid": "82001c22-f832-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.69.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769135164, "uuid": "ddccd851-f802-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.136.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769212564, "uuid": "13f26fbe-f8b7-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.182.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769200204, "uuid": "4d025d4b-f89a-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.183.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769152565, "uuid": "61843dfb-f82b-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.127.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769137744, "uuid": "dff2cd19-f808-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.216.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769178664, "uuid": "25e1c685-f868-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.144.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769142064, "uuid": "ee926493-f812-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.220.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769153706, "uuid": "09eb3d86-f82e-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.197.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769146384, "uuid": "fd6fe148-f81c-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.109.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769142844, "uuid": "bf756000-f814-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.149.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185744, "uuid": "a1b45070-f878-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.181.240.244", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769197444, "uuid": "dfdcf78b-f893-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.90.185.76", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185864, "uuid": "e96b4502-f878-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "8.210.125.140", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769180824, "uuid": "2d5e8a68-f86d-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.147.13.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "vshell", "colour": "#d2c6e9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185744, "uuid": "a1b44ef5-f878-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.166.130", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185744, "uuid": "a1b3ea03-f878-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.18.155.134", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185744, "uuid": "a1b43364-f878-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.24.74.0", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769185744, "uuid": "a1b4dd2a-f878-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.140.251", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769158925, "uuid": "305c3500-f83a-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "alikaraw.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769165405, "uuid": "472f33d8-f849-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "delwayne.alwaysdata.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769173325, "uuid": "b76b8ae3-f85b-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "duhsv690.cinderpouch.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769202184, "uuid": "e8dcaf66-f89e-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "elimnasir.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155265, "uuid": "aafa2938-f831-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "maxbet-88.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769184005, "uuid": "959b8e57-f874-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "sharecodepro.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1769155265, "uuid": "aaf34bb9-f831-11f0-9446-82aee05be84a", "comment": "Malware payload delivery host", "value": "xernox.b-cdn.net" } ] } }