{ "Event": { "published": true, "date": "2026-04-06", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-06", "timestamp": 1775520927, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "dcf2900b-2ec9-4cbd-9b5b-daf91a1c1e4b", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775435536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775435536, "uuid": "b8fee210-eccf-4f40-8fa7-f2852eee2cc6", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775435536, "uuid": "23c85e29-4479-4226-86d6-bd5db4e2570c", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775435536, "uuid": "07ded741-0cb1-4fc6-92ab-f6f28e52c40b", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775435536, "uuid": "7b12437d-94f4-4e95-b1d6-c141605864ce", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775435536, "uuid": "3f0c8e3a-6e23-48dc-80d4-3c99794de20b", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1775439501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775439501, "uuid": "c6f52194-6021-40e1-8782-54b014dd8129", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775439501, "uuid": "2098f8f5-9fa5-4745-a79d-9cdd58686071", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775439501, "uuid": "94dff40a-39ba-48f5-9fb8-c392ab59d504", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775439501, "uuid": "28b7eaf4-14f7-4d30-8db3-8d9cbf626396", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775439501, "uuid": "e01a7b98-7650-473b-8ca8-57d689972807", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcb8627a-315e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1775441946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775441946, "uuid": "71fbe9c8-440c-475c-943c-147f329c2c25", "comment": "Malware payload (Phorpiex)", "value": "845175747282358f208acab3faf8a6ff", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775441946, "uuid": "0f243660-6ac2-4330-9b23-6bf7702ef9f9", "comment": "Malware payload (Phorpiex)", "value": "81049439863f9d4166385718d23ad2e0a82ded1a4ffd351a33b6cc741d3760ae", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775441946, "uuid": "965a3e8e-425f-429b-86fc-086fe16721c1", "value": "T139823A0FB9424216D0D100B4A672867BC9B9A8B637C864EBF7D44AED1A686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775441946, "uuid": "2e1cb73f-ede8-4041-9d4d-7a103bd366e7", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775441946, "uuid": "3190ec50-f149-4f6e-a899-c8c75f17de56", "value": "384:wI78VGwSRFqwDlsx0xu9NHRgdav8U9cu:RX9sx0U9Ea0UB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775441946, "uuid": "ee43a57a-8a5d-4a5f-bf51-77f77f7108cb", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775441946, "uuid": "5a8ed8b2-3e91-45b9-b5f4-9ad99f788966", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82d42f3c-315f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775442171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442171, "uuid": "0d265b31-30f8-4c7c-9d17-0238de9f6a2c", "comment": "Malware payload", "value": "2cc1b66aa58a7c0192ea1c1ed87abf91", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442171, "uuid": "52f2feff-3893-443b-8cc6-000ec8fd6abe", "comment": "Malware payload", "value": "f492324f1e3fbce71145d12cb6c0debf50622fadddbbb8eb4b56293f5da89a53", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442171, "uuid": "90cd766d-f228-4e51-b443-c8c635dd2c23", "value": "T1948601277D86CE2AD9AB61B351C281D7642A12DDA80BF02F07A04D855F71DCE2352F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442171, "uuid": "e4553b06-c8c2-4c6f-8441-152365d90515", "value": "196608:YC+9M2MQqM1xuTh6ehfr3FXX/wQAyJWJ+iV:YBy2MhMjuTpdtfAN+u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775442171, "uuid": "348c2e05-e9ed-440b-b17a-4e599b83e5db", "value": 8095208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442171, "uuid": "62c0f8e2-9475-40e3-a720-61626dbe9f2b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00b99e59-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775442382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "202a668d-63cb-4232-ba67-3955ebaa0e3e", "comment": "Malware payload (Mirai)", "value": "3cded8ecbcd0ffc3d71465f6b823bc5b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "728b99ab-c582-456b-a2f2-e923bb5b0af8", "comment": "Malware payload (Mirai)", "value": "eca5a78c6bb93d61b98ce180f1b3877bb640ff13310ee8ecbca7cc2121aa0f0a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "ec10b43e-880e-4f8a-8185-5ef934aa40ec", "value": "T188F2E139C5FDE9BCC03EBA750D0E5742B6C1F8122A65375F0529A26ADEF7C853E121", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "123cd6f5-586c-4b7a-999b-e52fd8df4613", "value": "768:JwS0nQr9tpJEu0annIBqVqVHmwIHWUFtGtzXKTIsdvEUx0nZt:gOX80VqVi2otGtzXv49MZt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775442382, "uuid": "2d949ba5-cbc9-4ce8-abae-20a5d5363a56", "value": 36924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "7954e914-32a7-4bc9-850f-4155ad711587", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00c3bb5f-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775442382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "f0adfc37-8599-456c-82e3-c80300f463a0", "comment": "Malware payload (Mirai)", "value": "145e6e709ceb8e5e41c49645bc3859ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "c481f33d-13bc-4624-8b18-4dbca1ecc05f", "comment": "Malware payload (Mirai)", "value": "cc8df5f8f99f5865b450fea2c99bf99ba741dfab9e41fc31850404cf0caeb9c8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "81b781ea-4535-4f9f-941e-9fa2a02754e6", "value": "T18F03E056E491702BC82E1C3F638A11AA0590E1DA71463B37A36DCCC4BE36C5F989D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "66883dde-68ad-458e-a035-cf3e921876e2", "value": "768:CF4o5gt3IEG6Ks1mqDUKf+8hr89kxcEDV/SLXQlov0zBZLvad4mwu0Z8XrRCFzWH:El5JnsrXvrKy9QjyBZLvDmR0Z84Fy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775442382, "uuid": "79bd2350-01d6-4dc1-9a40-36b2a58162c9", "value": 38640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "023a848c-ad49-4531-9031-8e4878797b01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00c9073a-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775442382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "ce0f3bb3-701c-46aa-a4b6-0e3d4a7d1f13", "comment": "Malware payload (Mirai)", "value": "e3a6e4df5be62e6477e50920eddf28dd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "1c83c855-0efe-481e-b665-c3de3052fdd2", "comment": "Malware payload (Mirai)", "value": "e350e406565a49d5fcc84f2edd04691396ba359ee731843868e08e532ed0d290", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "63b0a22d-ef6c-4634-aada-25fa94aa34c7", "value": "T13F53122299037874DB133EBB76F04EC3F60D4B3675D9A438215A6168E6E95222C713", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "a1a75d3e-8b22-40e4-9859-eb9541fa58f0", "value": "1536:O7XduYshWhq/HIEy6Og3Nwz9hAymeLSM5Tfv83KJGTb6R4M:QdpssMPR9w4y1LXTX83K0Tb6Rr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775442382, "uuid": "0b11012a-bceb-4a3e-827f-c1e8f208b595", "value": 61848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "6b741aea-8faa-4825-be00-95e2537ca03d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00d267e6-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775442382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "496a56b6-3486-4d5d-9516-0f8f062ca722", "comment": "Malware payload (Mirai)", "value": "41ebee7fd34dcce6d98311ed2672319e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "59f296fb-47f5-430d-9d92-3c710aebd83e", "comment": "Malware payload (Mirai)", "value": "23cc5f9fa2720461d6ecd23855ca60d64c9882d847eadb543df8d23be44c1cb5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "44672498-712a-4979-8a27-90f84e908aad", "value": "T1E403024BD45A6CC1E95840F2D56780813EA15BE0F4F5B2E37740CAE5ACA6CE734F8E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "cedf0734-c9e6-4c56-bd77-b0142f4ac44c", "value": "768:KWVVasPGxpBnekBYlk8i0fPkD+bk4nwx/RWUiQ5HW2c9q3UELy4:KWXasPGxplekBgTP654QwGptLf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775442382, "uuid": "15c94347-385c-4a39-a40a-e01be7ff5ab6", "value": 40348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "4dd4e457-8535-49cd-946c-7918d322755f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00d99ec4-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775442382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "e3b315a7-6760-4a5f-8713-826c31c9fdc9", "comment": "Malware payload (Mirai)", "value": "d417390793de8a066002814e2908da9a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "c2495c00-2714-4520-a3a3-ea0e145a13f3", "comment": "Malware payload (Mirai)", "value": "15bb2f7858c0e948f64fd1eaef59c7cd8bd01d7ee7e7781620926df674c648f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "4defc15f-2284-4cd4-a0c7-4ba51f00e598", "value": "T1A4F2E2661288707382F49D73D9B187F12E2B00B5D1E533D06FE9838CE15671299B7E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "9b9c6396-0da4-421c-bc2c-cfb67a16931b", "value": "768:7rFs5me135wp1C+s9vbM5YNMygu+OR1juP3ACqtqNLIzLtZ6GliBRs3Uoz6:7/eRSnQjMgVuP7qtqxgtAN8z6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775442382, "uuid": "175ea028-9e0d-41c4-b1ef-18fc4c4b4d81", "value": 36840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "15d004b3-b9b9-4da5-b019-053660e77dda", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00e0e2c7-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775442382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "ce697454-8568-4250-88f5-0a56edeb60ab", "comment": "Malware payload (Mirai)", "value": "0f6500be39ea0ffd80371913a873dd6b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "5584553e-414d-4751-9e51-fc7e0a88960f", "comment": "Malware payload (Mirai)", "value": "c8a68b9efad18b1d40445ccb470f894ad954daee0ed642daa9bb2bb3037d8d62", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "2d91646e-7cdd-4987-b9aa-07758b009fe2", "value": "T178F2E174D1DD4FE2EE99CEB427D153DABAEC0F4B1715CC9331028F918B05811899AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "5614f324-0eb2-48e8-8809-f7c9c064723b", "value": "768:seDRJ7WcwHDB40LYBm1A/PWyi7yWr/iu23oD8wg4uVcqgw09z:sCRocD0Lu/PWUWr/iuMobg4u+qgw09z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775442382, "uuid": "ec27b427-8e53-4e7d-8937-998c0528c8ae", "value": 35140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "bb54199b-bcd9-4900-992e-3d66c601c22e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00e516b0-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775442382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "cac24210-db63-46eb-8bb6-e0a77584dd28", "comment": "Malware payload (Mirai)", "value": "5a0449e724b50ac7b94f3d14e199f1c6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "cb14a809-8b56-434c-9bb9-5d498a105c5d", "comment": "Malware payload (Mirai)", "value": "4b53e656c982a0e09b919895e3f69fdc63738b76c7860f24e807ec4a0f03e9ab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "85402a96-013f-4d27-88e4-ae65dd6fb924", "value": "T1F8F202F1C122CA18D73D427D85EE2E4D2C45A8589D04E0B9EE84BD734712F5CE9B4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "98ca0447-28fb-4470-b402-e55cde47fcf5", "value": "768:BW/zEpEYEgHE+Tc70R1cVC9owNnTAz9okf5GUuV27nbcuyD7UHQRjS:E4B1E+TcAYC9owuisCM7nouy8Hye", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775442382, "uuid": "043802fc-fec5-4467-bf55-fe01d2d06e9d", "value": 35948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "8ce6db69-304b-4fa5-9f8a-3fbd082cf54f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00e74885-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775442382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "c334e7a6-01e1-43f5-bddf-a64a76300e19", "comment": "Malware payload (Mirai)", "value": "d8cdc0703ad827fd0da7d3affaab376a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "480f9642-0199-4264-82d4-cb78eb68192c", "comment": "Malware payload (Mirai)", "value": "de5c3e8a758c6c7535e5f11a0593b2a34267b7124e64cdb09112d8b676fab8f2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "71817674-b988-4ba7-8027-a98a2cbd740b", "value": "T115734B21F9391927C0D5A17A21F74B23B5F683CE20A8861F3E710F9DBF615403A57A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "b4fd0b07-aaa6-48ef-85fb-c5266dc2067e", "value": "1536:0km4j59k6XTXypv4u4YF7tR7SYm5BHxS1H1tT9fT:7PQbrL7SYOBR29fT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775442382, "uuid": "0ab7fac8-fb8c-489d-9852-5037d5b01017", "value": 80032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "438ff1bf-76af-47d3-990f-d86b3cb44b36", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00ecb6c9-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775442382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "1b4278e6-5196-4026-b489-d03df3fcc0de", "comment": "Malware payload (Mirai)", "value": "f0f59e83dfa8c8c958c7734ddc8b5e00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "1740e587-3abb-4c6d-96f3-78bbdd78b33c", "comment": "Malware payload (Mirai)", "value": "a92812dad629fb082859d63c44fb08eaa1193801371caf4c44ecbe935259798b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "30293730-db6c-41e8-a6f4-c7735f46a6fc", "value": "T1A792C0310127BCF2C7512832E63F86029E1A13FEC5F6317B235459B8DA9554F1EB55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "8be3b7fe-57c4-4839-a9c5-bce5fed8d8a2", "value": "384:k93CFDMsFGg7EMUTmli2KvZw93KmQxPitrsnIns0t2dfNH8vrxhymdGUop5htU:QCyEPgoKRwZGx04nIns0t2y9s3UozLU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775442382, "uuid": "0727be8d-1195-4094-a2cf-7ce717d90e99", "value": 20540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "2687c06d-ccba-4235-93ca-23bf8d665847", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00edf015-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775442382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "a11d7a9b-fc27-47f7-8209-70e3cc4bdc13", "comment": "Malware payload (Mirai)", "value": "8672d0692beab36161bbbeef4be55e2d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "d75d0fd3-188c-473a-bf96-e9f1f898e9ee", "comment": "Malware payload (Mirai)", "value": "b25777dcf041513123bf96d9b44650e21f06f9ce869400437527ddc50fbbcdbb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "b48df947-f0a6-433e-84b1-34a598de41b3", "value": "T160F2E19318784108D06E11790C77FD8E84B0CF69C5A985F64BA4B523C95BFEC39587", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "76e9ae1f-3a97-4d48-bf98-4191c42e2342", "value": "768:WCkGi0D/4BfI7dZnRh7/IN0BIesyoXKot5V4oEAIph9ornbcuyD7UHQRj0:WBGbyqhXrTBrQX4oExYnouy8HyA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775442382, "uuid": "dd4f4b8b-5a94-4906-ba35-0c62a093088a", "value": 34912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "cde9e116-8d9c-47d7-88ce-79c2ab7d5b83", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00effa5c-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775442382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "3c7d4426-8a52-4409-8d5b-edd8044846b1", "comment": "Malware payload (Mirai)", "value": "52775f119f927d0822384415391a0d1c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "fdbf03d3-e643-40de-9ce4-2bd68f7282e3", "comment": "Malware payload (Mirai)", "value": "15844e4f618a1d0adbf241b110b2bdd19bfb2f35f08eadc0c5abad3d751b1e17", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "438aae3c-a3ed-49eb-b529-70d42ad4741e", "value": "T153B3AEEBF64715A2C85243F013C79F8E3E232290AE57E4E76D1E167B19760DB1D0AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "5cdc93ef-5bb0-4d80-9fc5-e106a447752c", "value": "1536:pcdlYSuiBMW3zC8aRGGTtJM/qrlpmxJ6nDgD5/LWW:8YSZ3e8ZE3MYlphDgD5q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775442382, "uuid": "07d49834-15d8-4f59-8b3a-ad07cb36663e", "value": 115992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "5b03251a-9fc4-4443-98c3-969627c1dffe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00f60fac-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775442382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "ab9681f1-6a74-4b12-8153-36668feb2114", "comment": "Malware payload (Mirai)", "value": "b73b27debbd34b67bb3c68154da89ee1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "8f63b3dc-c17d-4a2b-ba90-c1c6a333ea57", "comment": "Malware payload (Mirai)", "value": "fd6336d1c95edb8afe2dc9166a10d8fd0d3ffb4dd6ab627bc93c806bf9c121c0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "5a0d43c0-78c2-4bc4-82d5-24d4f4e30f51", "value": "T12603E03C4A0904F5D57EC17FE2AC83A0663607D96945CE522210F6A7A70E8BC74E2A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "3605f3d4-f613-431b-96db-bbb052cfc08c", "value": "768:cgN29x3ZpzZ5VjNuvtE54Fe7GbxBDbYsPs4P5sT4UZqtHJgGlzDpbuR1JY:q9xJZZNKNFjBfRUMGkUZqHVJum", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775442382, "uuid": "f4a5bde8-ad97-4083-b652-9557d3aaa3a7", "value": 38076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "45a0a2a6-b686-4f88-8b34-baf853e49f34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00f8782b-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775442382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "bd328d8c-278e-40c3-8ccf-0608ae34138d", "comment": "Malware payload (Mirai)", "value": "9e740bd0769278466e482824a1040148", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "a2620341-4ff8-4ab5-89ce-246c3b6452d0", "comment": "Malware payload (Mirai)", "value": "04cb65f2f154595965f75cde6e09de500666c86be46ff0eb690ea724c4103fa4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "3b3661ce-9922-420d-a7e4-a24f1e665b85", "value": "T1DD639E16D82509A9C286C5B471EC8E3A1B13E5C063837EF71A7AC375A067D9CF849F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "d59b6d83-0d2c-4999-9484-631941d1590e", "value": "1536:D/rMkOtfaR0glv2ZKsT5Z7BPxznCI0sCp8udc:DYkwfCFlugsz9xznsxrdc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775442382, "uuid": "786205a5-b6a8-45e9-851b-a0c04eb0959e", "value": 67252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442382, "uuid": "728f7a3a-37d9-47d2-a0bb-ba2b56ee7769", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c049fee-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775442428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442428, "uuid": "2c322023-2685-42c6-9a6f-bc740913ec54", "comment": "Malware payload (Mirai)", "value": "1e2a55803ef443dfc3d7964d692b4c1f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442428, "uuid": "a6c3fbef-5cf8-42e1-9f08-8bab682fd42d", "comment": "Malware payload (Mirai)", "value": "ab55d67aea381760a8ed39559695cec3e0a8d80ab12fc15fd02df0a01880e09c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442428, "uuid": "f856ab95-f045-49d2-b506-49022965274a", "value": "T12B83199AF800DDBDF80FDAB74463490EB931E3910A931A377767BD53AC721A14826E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442428, "uuid": "d446cd40-6349-4c93-8bdb-ef5f4f6dffff", "value": "1536:4v7sC9KZbx5uW8eLoPSdAYA9lJPc89s8br0hpsBq1HHbqFiQpsrH7IZn:4G5hLsd9lJP4npeqp+psrbIZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775442428, "uuid": "e88f4eee-390a-4ca5-a518-a76c9f1959fa", "value": 84960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442428, "uuid": "5d51896c-aced-4e82-85e3-a7dd26a06194", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcd8cc2f-316a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1775447100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775447100, "uuid": "3d70824e-affc-4dc7-8920-fa3e0bdfbefb", "comment": "Malware payload (Phorpiex)", "value": "1b457c819311a45e3b450cf300530210", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775447100, "uuid": "4c004848-1399-482b-a027-d318a184f9a2", "comment": "Malware payload (Phorpiex)", "value": "288793e163822a17c1ca66ff6f5c2f944e854fd7e70e4be686b444f036aeecec", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775447100, "uuid": "da73812a-170a-4f2e-a8ea-9a9ab5a71cb0", "value": "T18A823A0FB9424216D0D100B4A672867BD9B9A87637C864EBF7D48AED0B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775447100, "uuid": "671c2e7a-8901-42ef-ba44-d1eb02983260", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775447100, "uuid": "0cf4bad3-65cd-47dd-927d-fffc1dba5a47", "value": "384:3I78VGwSRFqw/lsx0xu9NHRgdav8U9cr:kXhsx0U9Ea0Uw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775447100, "uuid": "dc1937f7-642a-4398-a5a2-1f007ff58d00", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775447100, "uuid": "90286a06-fa07-43a7-ad47-761bf9c02dac", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbf1e6c2-316b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775447528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775447528, "uuid": "163f71cf-528b-4f0f-bacc-ad5f97d0a89d", "comment": "Malware payload", "value": "59d71a14bbf0df6f371608e2c3586a00", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775447528, "uuid": "695a5158-0895-4cd9-a6ef-b8006987134c", "comment": "Malware payload", "value": "4291412d1826b8b3fde98cbbb369be9d13ae7ad3b83fd63035ba8ccdd1559870", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775447528, "uuid": "2b206a5f-8529-4e19-a81a-452fcfddf306", "value": "T1E1931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775447528, "uuid": "341a0757-07c5-4f91-84ad-094780f59d8f", "value": "1536:0Byp1tF/uwMmAIa14oXx+I7epeV7tb73WdxCrCitkb5fv2v05xsprCKJ1sPyKQt8:08jI00GitkbFv2v05xsprv1sPy3t3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775447528, "uuid": "44cf827c-4c4b-49cb-b2a1-260a46f73621", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775447528, "uuid": "eaebb18b-d1b9-485a-8442-499a0ee4e398", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e89a3634-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775447856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775447856, "uuid": "897b99d0-19c0-46c6-824a-411ac3077c56", "comment": "Malware payload", "value": "70af65a13a14e5deb73c31c8829dd998", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775447856, "uuid": "8ab3ec3e-9b84-4375-bc6d-fc260025ec78", "comment": "Malware payload", "value": "feacba94918d32a51ff751ae4b98e9ec5823aedd525ad283ed99653b3f23545a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775447856, "uuid": "a3b79682-a802-4fa3-94ff-feeed7f225ab", "value": "5923028623A63F72D52148F5D7FCEF85A14A7E94AFE5180E7C113698B07035C28C8C1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775447856, "uuid": "80bd70b9-b5af-4018-8f53-592401947667", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1Xo0Wh:yYI0ARqw1qAEW67UIWi7M8gmfmJo0Wh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775447856, "uuid": "7cce6d4e-9b44-4890-b6df-0331903c0e3d", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbfcf129-316d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775448280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775448280, "uuid": "5cffd45e-38fa-4f45-80d4-a2198390dc6e", "comment": "Malware payload", "value": "5d43623736ff23cbb05e6cfceabd99fa", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775448280, "uuid": "bbc940ca-fd7b-4139-a615-47eb53b9de9a", "comment": "Malware payload", "value": "270ad4b6a295046e9ebae87c28c7d45f7e42ad1c7d75c5f34fb9f271e5864f5f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775448280, "uuid": "88196f41-5f42-4d63-97fd-54aa505a7279", "value": "T1DD32BF4DBCD5F025CD13CE08A6568C094F95B1782AEC5AFB1393485F9E2B0A5E738E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775448280, "uuid": "765b3b1d-04cd-42c8-b1ff-243614b39258", "value": "192:ZELDmJE+jA3VniS++0LH0n+AeG9OvUVdbvE/QsTCnC6sXPtiQ0dEAXSzqe5ppwVP:0DmJwn0e+HvUvE/Q6xPtie6ne58vZ4E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775448280, "uuid": "a81b8eea-05f8-498c-ac71-5b8110b6de19", "value": 11520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775448280, "uuid": "af6be801-763b-4ffb-a80f-7fc5209f3dfe", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ce3f82c-3171-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1775449704, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775449704, "uuid": "740ec5f1-43b7-4e0c-8383-133abe31d51f", "comment": "Malware payload (Phorpiex)", "value": "1a1f47e1f32e8cc048d75aaada3e9c4e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775449704, "uuid": "3d700a20-f528-418e-914d-f61220c7e69a", "comment": "Malware payload (Phorpiex)", "value": "54116d0ee4028ab6c8d5fb2e2bc99c0c563ec68ab03519d07394e21cf11c7275", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775449704, "uuid": "ad0c1641-87c8-4904-a2ab-f9bd3ed89570", "value": "T159823A0FB9424216D0D100B4A672867BC9B9A87637C864EBF7D44AED1A686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775449704, "uuid": "23f1926b-b89e-4dbe-83b5-b95371f0cc3d", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775449704, "uuid": "71347663-343d-4937-8f9e-0965488db3f5", "value": "384:CI78VGwSRFqwDlsx0xu9NHRgdav8U9ci:3X9sx0U9Ea0Uh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775449704, "uuid": "383c89ad-eb58-4d60-8f37-bd41f2a18c59", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775449704, "uuid": "d6b0ec3d-1b8d-47cb-85ad-e3a87ef75652", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6e720e8-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1775450237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775450237, "uuid": "6ca2ca20-003c-488e-ac55-3b8c48645951", "comment": "Malware payload (CoinMiner)", "value": "a20727b81b50a20483ba59ae65443dfe", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775450237, "uuid": "4e44d92e-f416-47a1-b0bf-d4823d3ba903", "comment": "Malware payload (CoinMiner)", "value": "af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4c", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775450237, "uuid": "453d159c-a157-4189-9de4-08be165ede19", "value": "T167563362F440E436E038203925F684A6B17DFD7347254A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775450237, "uuid": "c953e5aa-cd5b-4f82-98ed-16b602e7d588", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775450237, "uuid": "e6b3a3a3-3491-4cff-b3ab-f34454df1c69", "value": "98304:RLGSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+Y2naq8le+:YBfTCiUswVSLOJgyBG/aW+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775450237, "uuid": "b79ca2de-2c40-40bb-8db0-ea2c4c69e186", "value": 6271259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775450237, "uuid": "ea33dcb4-a22a-4890-9925-77be0865d52f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d29310d4-3172-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1775450465, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775450465, "uuid": "c791ef28-164b-480e-bbdc-411f3b89b121", "comment": "Malware payload (Phorpiex)", "value": "a6ba822be61410fb3a5abb3832c9f68d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775450465, "uuid": "48788aab-2f54-464d-93dc-51f66c7b5cec", "comment": "Malware payload (Phorpiex)", "value": "39c064b7e80aed53c6dd9eb06207b9cbd334a63b83e2fd5ead7727005a12a3b6", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775450465, "uuid": "bd50f7bc-510f-4570-9e73-d2a3d9f5535b", "value": "T12E823A0FB9424216D0D100B4A672867BD9B9A87637C864EBF7D48AED0B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775450465, "uuid": "21ee422f-c8e6-4d81-ae8a-59ff2d9accad", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775450465, "uuid": "931ed761-5e8a-4529-bde5-ed38b377cada", "value": "384:UI78VGwSRFqw/lsx0xu9NHRgdav8U9cc:VXhsx0U9Ea0Un", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775450465, "uuid": "e82f9d05-4e23-44bc-b280-c8f16df8b452", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775450465, "uuid": "8a31c91e-48b8-48fc-89a4-efdfeb7b5b0d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a1b2ad8-3173-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775450665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775450665, "uuid": "fbb7cb85-2152-423f-8430-2eda4a5f9acf", "comment": "Malware payload", "value": "872e7b197a366707f316f499ee29e99e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775450665, "uuid": "fa2b671d-336a-491b-84fa-016d701e8aac", "comment": "Malware payload", "value": "33f72290e7f2aafa0be9aacd2473416637c53571c22e662651716c26559a07ac", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775450665, "uuid": "5215f743-f2ff-49b1-a5ae-25f46c329415", "value": "T10993E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775450665, "uuid": "6399f70d-62ac-4c34-85d3-7ca97571903b", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXtIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775450665, "uuid": "b4ee348c-b1f8-4fd6-9eb8-bd2f9d0119e1", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775450665, "uuid": "425d34dc-f3b8-4860-ad43-1d62fbd18678", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df99e56d-3175-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1775451775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775451775, "uuid": "a7450e15-7602-4ddb-bff2-3c4e65b0de34", "comment": "Malware payload (Phorpiex)", "value": "f013bc38de730a1715f714279bdcadbe", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775451775, "uuid": "e643032b-3eae-44f5-ac49-8584109376f4", "comment": "Malware payload (Phorpiex)", "value": "716eeed4288a841e5be39da871136976c731d2aa67b3b9c0a4679b3e4834685b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775451775, "uuid": "9e6f9a2a-3569-4a15-a7a3-4f2ad71249c5", "value": "T145823A0FB9434216D0D100B4A672867BD9B9A876378864EBF7D48AED0A686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775451775, "uuid": "0b2031b1-3c70-4b3b-82da-1aab87362214", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775451775, "uuid": "e17d9031-af6d-45b1-a708-984c00ee9518", "value": "384:UI78VGwSRFqw/lsx0xu9NHRgdav8U9ce:VXhsx0U9Ea0Ut", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775451775, "uuid": "b09a545b-2c65-44d4-a47b-7210dec025cd", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775451775, "uuid": "70f6adb7-f0ba-4fc7-94c5-a4611700fccd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23a0b776-3176-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1775451889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775451889, "uuid": "c5558c82-65a7-4399-9666-ba81e2046878", "comment": "Malware payload (Phorpiex)", "value": "8dc359215d61af5fb89b2de1aab20b0d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775451889, "uuid": "b5222f12-d460-47b9-a16d-7b58a79703b4", "comment": "Malware payload (Phorpiex)", "value": "0e934989907f2598cd5745ad5a1530dd63161263d2b1f9e142df4d5e635dd349", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775451889, "uuid": "240a4c4c-6019-4cb5-8810-9e44ea4a464a", "value": "T14C823A0FB9424216D0D100B4A672867BC9B9A87637C864EBF7D44AED0B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775451889, "uuid": "a03f75bb-3d12-4961-8203-58dd8867afb3", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775451889, "uuid": "b423f2d3-a2e6-47f8-abd7-046aec75ee5e", "value": "384:TI78VGwSRFqwDlsx0xu9NHRgdav8U9cd:wX9sx0U9Ea0Um", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775451889, "uuid": "eb34a188-4676-43d3-9f29-4b1985c1790b", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775451889, "uuid": "97560b12-7e3f-4b8f-8ff1-5cb376f26757", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48c4931c-3176-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1775451952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775451952, "uuid": "b60519c8-8020-44f5-a59d-03f147701ee3", "comment": "Malware payload (Phorpiex)", "value": "60e830dca70636a17da3d3d5b740b000", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775451952, "uuid": "8d7c5d35-a6c7-450a-9671-4ae850f7c2c5", "comment": "Malware payload (Phorpiex)", "value": "0a5a72cc1d69e1f0c6113c84e634e9b9c82b8e7bc9d05b6732da3a4f5d81761d", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775451952, "uuid": "fe752120-d05f-422d-80ec-e23769a89410", "value": "T1D3823A0FB9424216D0D100B4A672867BD9B9A87637C864EBF7D48AED0A686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775451952, "uuid": "c20c2122-f967-4a88-b526-b048d87b4de6", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775451952, "uuid": "08f6e1aa-72ab-4e26-9cfa-03e6167bd6dc", "value": "384:2I78VGwSRFqw/lsx0xu9NHRgdav8U9cJ:rXhsx0U9Ea0UC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775451952, "uuid": "e37b5491-bab1-4794-a891-f2fd0b08badf", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775451952, "uuid": "01a687d9-8f3b-4490-aa66-d9c95a63ab4b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90ee9c90-3176-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775452073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775452073, "uuid": "f8031e35-cf4d-4fb4-837d-9f9fdbbc3ef5", "comment": "Malware payload", "value": "fd5a85b35f5ad0028d5bfd1fc6da7b2f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775452073, "uuid": "bfb025e2-2d74-4740-b18d-a40d690b8490", "comment": "Malware payload", "value": "12f984feae48508af59ba19bf8e20ab7a38a97fa563e30463953530e961e154e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775452073, "uuid": "64028787-eeb4-4f63-ae8b-9209931453aa", "value": "T1388308327589582A210B028FD263336C70EFD8E2D611E5B6F6F922344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775452073, "uuid": "e58f9305-1ea0-442b-b000-1fe249e15242", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnjWagVN/:XEKltp9t2SX/yr2pbjW1VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775452073, "uuid": "2db40e1c-e686-4945-ac1b-6d30052f219c", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775452073, "uuid": "80b5d7db-82ab-4fac-aec7-e2f1e66edf3a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775455754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775455754, "uuid": "ddb95c69-8d6e-454a-9984-4c20eef0d284", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775455754, "uuid": "2a65dfa8-c681-461b-b054-09b3d54f7330", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775455754, "uuid": "6d402ae3-002f-4f7c-b128-322ffee058eb", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775455754, "uuid": "30d82cbb-8552-4307-972d-1f5aaeee38cf", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775455754, "uuid": "3c26da51-a97f-41ad-afa2-349297765f66", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb597c0d-317f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775456117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775456117, "uuid": "f5a9477f-c155-4f46-b6d1-1f342cb1b1d3", "comment": "Malware payload", "value": "2bb2b82efcd488a70a864bc505419ae1", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775456117, "uuid": "d27a0da0-2149-492b-a812-02cd8e6a1f50", "comment": "Malware payload", "value": "67a6f9ff075baa4f589d626e430ba052ffd2c736a62d4de9492f646c3d0f4625", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775456117, "uuid": "c5c892cf-1744-43b6-afad-4c5322b01c0b", "value": "T183F0A74FB44BF03AD04419E8AB65FB6AAC70786B6263CE5C78417A50FFD653478626", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775456117, "uuid": "101379c2-b5f2-4913-8daf-85c61ae7612d", "value": "6:hLgjJ5Ja/+YcLN7+Y3JMF/+Ye0IdyJ44LIXLoO4eGLw+v+YdF/vNnQz2JMIykwFy:lSjkOLZpqjW3bo/8pqF82Q/NiT+XHQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775456117, "uuid": "69d2bfab-9613-4e6d-a12d-27b667aa178d", "value": 508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775456117, "uuid": "0d4097b9-1437-44c5-b6cc-aa8da5f45e51", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1775458035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775458035, "uuid": "6b315086-be7b-46cd-9e49-ca049be2a403", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775458035, "uuid": "0eefb7e0-bb41-4219-b293-e80676d55b70", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775458035, "uuid": "dd3cd973-eed7-4f11-bacf-a23e679c1107", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775458035, "uuid": "1c6ec761-df75-4e6d-b5dd-6d2194b69eb8", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775458035, "uuid": "45e6ff43-49c7-415f-ba71-78e06fdc2810", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "498c91da-2ff6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775459140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775459140, "uuid": "bd73461b-8506-4258-ad3e-8f426b870a10", "comment": "Malware payload (Mirai)", "value": "b53be31bc55d4567e81190acefb6e15a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775459140, "uuid": "9c067db4-93bc-485c-bfe5-7941c5cb25b9", "comment": "Malware payload (Mirai)", "value": "56010e2ec81eb4a48a318cbc70289d998eec394f9dfa66baef369a56979f5800", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775459140, "uuid": "bc4adfb7-3601-48b5-8982-5aa6bc197bff", "value": "T16AC2F1582902898BC4372D7A754BEC59BDD3174E189F891822FAC1258BF372C67F13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775459140, "uuid": "ed74bb60-f921-4f3d-a07c-b038387c22fc", "value": "384:TeV0foxTKXtuvwdtTX9KSyaBSBjeYTfo9mmQPgta8bN4Y75f3M+2ffVCBOi7+ngT:TDoQtBTX941eYFDgNbl5PatCbYUmQAa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775459140, "uuid": "146d0744-b48c-44fd-8782-692fbccbc87f", "value": 27740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775459140, "uuid": "ecbb5e65-dc1d-4f76-a944-2d8e90e840f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5174eb1d-3189-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775460127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460127, "uuid": "84305df7-2aba-4c56-b909-f68b2a0ea825", "comment": "Malware payload", "value": "c6efac8f93bba7eac2755be56b55c961", "object_relation": "md5", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460127, "uuid": "6ac0ac58-5135-4e67-b980-0c6326e395d7", "comment": "Malware payload", "value": "453e447b02ce8165545e12df574bd2a50ef86e9d89e4f3acb756101a80d4bb59", "object_relation": "sha256", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775460127, "uuid": "87e53896-c848-41ad-bfd9-66aed1674062", "value": "T16D94127A1643FD8B3F391C80A6A02C615C87784B83E6D625BDC0099EA5FF154DF2A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775460127, "uuid": "5851d3db-dd18-4eb9-a16c-92963a75a79a", "value": "12288:gFRd8QknvFYp+lWWQN2aSFchZE5mqnpjkfNVZkBJdyz9:gbdWvFzONvSF0YnuVke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775460127, "uuid": "df0923bd-0585-48fe-a65b-b29b24f8ed53", "value": 446849, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775460127, "uuid": "03fdb2bb-4b1d-41cb-b7f8-ce69e622967a", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52c93de5-3189-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775460129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460129, "uuid": "a094ab74-9653-43ae-a0c9-6e941ebc0b67", "comment": "Malware payload", "value": "fab9f6a388f0936d63ba3a539f29eeb2", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460129, "uuid": "c26ac318-4396-4008-83c2-7c31ed9cd75a", "comment": "Malware payload", "value": "8bf533a12841f52137f8ca79f1b8ba9a2017fb5281b3b9896e58940bfb921ef7", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775460129, "uuid": "3537382c-51d5-42ea-a00b-cf6714be011d", "value": "T147154AF5B71BB22599FB8F10C4051B8ECEBC66C7E2510AA4BEC5E961587E10F40BC7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775460129, "uuid": "b9646efe-3d45-45a6-915f-5cc4ef3b5083", "value": "24576:Suk1d4b4STrL4SYskS1hZUmNtp06ExQ6jXnEzFSSSSSSSSSSSSSSSSSrSSSSSSSx:0d4JrLpEmhJx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775460129, "uuid": "13c7cbe7-63d8-41ea-a35d-4b9489f40b5a", "value": 959360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775460129, "uuid": "35079d6c-7a7a-4b18-9276-35a8ab8ffaee", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "533918a8-3189-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775460130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460130, "uuid": "f7778720-7977-4d2e-879a-a691a6c77cd5", "comment": "Malware payload", "value": "127d9ea4aae0d360a441930c17d85faa", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460130, "uuid": "063b8919-e4f2-41ed-b7c2-1480662f4ffc", "comment": "Malware payload", "value": "749e98c2e29cce73aad26779c5e481fa4f796b4189feaef0b6237b07302645fa", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775460130, "uuid": "2cf4415a-fa4f-4195-a39f-f8d759d3e11e", "value": "T189154AF5B71BB265E9FB8F10C4091B8ECEBC61C7E2410AA47EC5F965586E10F40BC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775460130, "uuid": "e5e03752-1e1b-4f96-be0b-a113d1290937", "value": "24576:AZMrg6Micp9eUco2A4sjh3XRV9G4YLnSSSSSSSSSSSSSS2SSSSSSSSSSSSSSSSST:SLiLGQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775460130, "uuid": "515f9c1b-4141-4000-a103-fe362c0a3b29", "value": 945428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775460130, "uuid": "e74c06ac-feaa-4274-a93f-2315a9d1fb20", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c59fdf1-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775462346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462346, "uuid": "ab826367-97ae-45a6-9b9e-02822458e29e", "comment": "Malware payload (Gafgyt)", "value": "79705c9ab0b03aae6462944fcf224d53", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462346, "uuid": "7a1b5fdb-0e08-44bb-8047-7e2624956334", "comment": "Malware payload (Gafgyt)", "value": "ef2f28b8f20aab6c56ab8bcde6a7e1a0b0ab17c2ec8cee02f3bf369140e8a700", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462346, "uuid": "d48b8cf9-6b05-4847-8eb8-9be8159bc82e", "value": "T1274183C760E10770ECB5AA3772669801B9D9D0E626DD5F96DCFC38E9408CEC4389E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462346, "uuid": "7c3f5e07-758d-4e6c-bb6a-3e009b0de9b6", "value": "48:1zttYLqnTPj/owXqCGa/zr3b66rserPqVo8:1zHnTPj/owXqCf/zzb66rsqPqV5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462346, "uuid": "7548b20a-a28c-4654-bd4b-7edcac90d52e", "value": 2115, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462346, "uuid": "e8c2ca79-1333-48f6-b200-d2cb1d3df383", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d7c6abd-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775462348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462348, "uuid": "c16295d2-8d4b-42d0-ae8a-734ccfb11dcb", "comment": "Malware payload", "value": "8c7ba5c6876166ac1f933a8cac6c2f66", "object_relation": "md5", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462348, "uuid": "368c3efa-8a70-4b27-a44e-e33f8ebfd606", "comment": "Malware payload", "value": "976a38067300dea584b48a1972f7187ff9fffff115eb716a1d38f105884eac38", "object_relation": "sha256", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462348, "uuid": "76f4e93b-2e4f-496f-9f56-c208d5bb253f", "value": "T11313D11C3B9CAC59EC03573350865704DE3856D82512B4AF984D360EE4AE38F2BBBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462348, "uuid": "4fbd5aa2-cfef-4c9a-8a1c-fb5397f20728", "value": "768:BF0GOvO5qOKdoW40e9xeM6I5P6S3IWxsD1xS4YUGBcl55l5lwoVcX:kGLOo+K7Z5P6S3IZLhVwcvXTJVcX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462348, "uuid": "c2d49f1c-a2a1-4e0d-b474-3720ba278e85", "value": 43263, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462348, "uuid": "2b26d5ca-e4da-4ce5-bd44-13cb51b516f6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d885695-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775462348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462348, "uuid": "f7063462-3642-4086-ae51-1234815c11cb", "comment": "Malware payload", "value": "c41d05c26c8058ba6186fe039173ad3f", "object_relation": "md5", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462348, "uuid": "ec32cde1-b56e-40de-92c5-6244bfc1710b", "comment": "Malware payload", "value": "b87364b250d126d12b72dc09ca0d649bdd405b3c9c15a5586a700026147effe0", "object_relation": "sha256", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462348, "uuid": "e3626f9c-1405-43b2-9155-370bd914978e", "value": "T19EB2C03BC51DA901C58356B390853CA51E3E47E199CFF0ABF4F11A1F0D16A5F852F6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462348, "uuid": "570d029d-36ae-4718-b259-1f10761dd47a", "value": "768:e9nTcaFBgcOrhXrRQQ+YA1BExXHc7MhO5RvE:7DtXVQQJA1yN87H5Rs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462348, "uuid": "1c1c518b-0309-4702-8649-3f5cbb196a5b", "value": 25669, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462348, "uuid": "d34792e1-5ad2-4fe2-bca7-8de00c1b2976", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dc8cdd6-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775462349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462349, "uuid": "a65e87f6-4faa-4e4d-ba6c-680396f478d0", "comment": "Malware payload", "value": "562f170b25b3a113d20be2c05f729448", "object_relation": "md5", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462349, "uuid": "94949a66-9b36-4399-bf08-f735ab3f607f", "comment": "Malware payload", "value": "a776e32fd7650f1f94a1d9971f7af56eed33ca63b6accaea4eeda7e2c0cf17cb", "object_relation": "sha256", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462349, "uuid": "d9529496-2434-46f3-9352-d42993933dc4", "value": "T17784180BFAA511F1D1BAD038C952651AFDB138AA837067CBA7944A571F23BF4AD3D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462349, "uuid": "94aeaddf-568c-4243-9d16-14685dc7636e", "value": "1de72f0a1f8069911acd21d91edc46b6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462349, "uuid": "88fb537a-dc20-41c5-b8f1-2e6ee1333c24", "value": "6144:fKU4q27Cdce8C1rAlWRioSoinkbyQhSrxJh1E:iUzqa8C1rlTZ2Ph", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462349, "uuid": "b10b7ca9-f4a0-4673-ae56-698edd302875", "value": 378368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462349, "uuid": "61506e02-7229-46a3-9c88-87b9b1267e15", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e5f1f19-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775462350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462350, "uuid": "c8d41e5f-78d4-4ffb-90b7-f2211775bd9a", "comment": "Malware payload", "value": "12edbeeb8fc48ea9bc3fd9b7bfa786ef", "object_relation": "md5", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462350, "uuid": "069d0d86-abd8-4a53-bcbd-288b8aee868a", "comment": "Malware payload", "value": "fba215fd1f1c1f8cbddd4ba5977c3f2caddbd57d216c8d26f217f528d1a84a78", "object_relation": "sha256", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462350, "uuid": "75240ada-7b8f-4130-ba06-78580bf1b29f", "value": "T1ADA5F1DD3DF6F5ADD66BC07680958496B8354388C801981F07B025AE84EBDAB071BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462350, "uuid": "9845a11f-292e-4427-bd69-f392a700eaf2", "value": "49152:9JS9RYZTsGGieem5hn+JIlGNBI2ziNr4oGDYpw:2fE49zDihNB1tx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462350, "uuid": "a89121ef-6ea2-490e-a2c1-7965ae3d39b6", "value": 2115244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462350, "uuid": "fef199af-37a5-4fce-9931-fafc8e36cbd0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81698dec-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload (BlankGrabber)", "timestamp": 1775462355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462355, "uuid": "97b8a19d-c3cd-491f-a1aa-2e32ffd16982", "comment": "Malware payload (BlankGrabber)", "value": "89dc71934b3584b273a1dfe75e4abdd6", "object_relation": "md5", "Tag": [ { "name": "BlankGrabber", "colour": "#f1c814", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462355, "uuid": "88ef5fee-613c-430a-bcdb-cbb920f03db4", "comment": "Malware payload (BlankGrabber)", "value": "bf005f326baa7f98e367058f8834613a9bb5def9484b8a5fe27172d70a81ab7c", "object_relation": "sha256", "Tag": [ { "name": "BlankGrabber", "colour": "#f1c814", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462355, "uuid": "2066a613-82f8-4fa7-8318-e8934353e389", "value": "T12BB633A5679500F2FC9381BECAA7D82AE777B9151B91C6CF073416242E179D20E3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462355, "uuid": "b3dac859-0114-43b0-bc8c-61ee3819b6ac", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462355, "uuid": "417486fe-1ff0-4921-8206-f8ac5a0c018c", "value": "196608:YqubqpeZwmW165S/e5cAyPEI5xFoXYS06pyp4ZAM9qx1/gcrbMyDn5boB:YqubSqJ5cnPELY/6pyp4Z/wwcrbBboB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462355, "uuid": "f50bb456-53c7-4118-8ae5-4b0a33e954ab", "value": 10644482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462355, "uuid": "9998d9ad-d06f-49d3-b0c2-ab4cf08a0c78", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86fc455f-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775462364, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462364, "uuid": "4ebbe2fe-de18-4b1b-89eb-9b460f9b658d", "comment": "Malware payload", "value": "fbb8a6b16ce87669e06d049e3f8fef69", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: dx2026", "colour": "#48f582", "exportable": true, "hide_tag": false }, { "name": "pw-dx2026", "colour": "#d631c5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462364, "uuid": "26d6678f-11a3-4957-97af-0462b6cbb505", "comment": "Malware payload", "value": "a828a5a956353a6cd600126d4c61a424b4c52d620fcc0c0934b0ea1eee60287f", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: dx2026", "colour": "#48f582", "exportable": true, "hide_tag": false }, { "name": "pw-dx2026", "colour": "#d631c5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462364, "uuid": "fb588491-2f9d-403f-ac76-53b7e3d349af", "value": "T13208339D2D3BA126E582F93964FAF1006E0CFFE32C578283B2854B34543DD5F9196A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462364, "uuid": "71eec15a-f54e-498c-af1a-52c33ca8fcc0", "value": "1572864:FkoQa9OHK2vHL89ENzBR7enlFw/P/AdZGAFprb9zCvLQJC3wzfemANWpNJ:FDQpq2vHB7eQ/3yZbrdC0AENJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462364, "uuid": "86b45937-4086-43e6-a59a-8c72e61df5f6", "value": 78095825, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462364, "uuid": "a215a68b-b55e-4d6a-a340-bb4d64b59b8a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1c78e69-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775462409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462409, "uuid": "06c1d102-8844-49d6-83d8-8a29b2c31a07", "comment": "Malware payload (Mirai)", "value": "dca40f08cc93bc2fba8e3f5fec18593f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462409, "uuid": "accda263-db41-4ea7-98d3-b52c228d5de9", "comment": "Malware payload (Mirai)", "value": "008061f90f26a3462294a1d5b02424fab50a32fc0aadc0a7b05dfc70cce4e023", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462409, "uuid": "f343889e-87e2-4de7-b2db-3fa03abacf46", "value": "T15341F19EA0F412D1CB8BCE0070E549C463CBB69976980772DF9D2D6AC08EE947C1DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462409, "uuid": "eb1ef96b-e907-4f99-9367-d1656da0c203", "value": "48:WgkG0rPouY1Jr4Fn/4yM+UvoK6o7Gl3oIQ3MCD:iu1uz0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462409, "uuid": "735e2ab1-c7b8-4e3c-a0a1-00de06ea9630", "value": 1901, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462409, "uuid": "4d6b4eae-4a6a-42b2-95f9-4420595f4d27", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1c90145-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775462409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462409, "uuid": "b92c6828-a49f-4d4b-b1be-d19646acadea", "comment": "Malware payload (Mirai)", "value": "f2d5837da4ebe93a67ec5b0a8a8507c7", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462409, "uuid": "dce602ee-02f3-447d-b87b-4f22df38dbcf", "comment": "Malware payload (Mirai)", "value": "5c8b5af28a09f79f4d8c4050b4462624ff6cf35effd57e553e74c6c85531264a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462409, "uuid": "d429726f-9c56-4148-9ecb-6199ae8a454c", "value": "T19E31238AA070D0418589DE00B5F789D47326F6B071B6E632ECD10FF694ABE64701DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462409, "uuid": "26b4428f-f9c0-4831-8396-4c98db7a6952", "value": "24:fDdR1iyBM/huB1b5J2wW6f8o7ygKbJ54rHJ:b1ILo7yG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462409, "uuid": "978584aa-85d6-4754-92de-44942f76d80c", "value": 1862, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462409, "uuid": "142c9154-4962-42a5-965c-aefa37ad36dd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a213e6b0-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775462409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462409, "uuid": "216656fd-e72d-40f8-aabf-520960955bdd", "comment": "Malware payload", "value": "00fd3a88e673afb024a06e13474d51a9", "object_relation": "md5", "Tag": [ { "name": "AdamRAT", "colour": "#7bc235", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462409, "uuid": "22e7b021-a5cb-4a47-a3d9-ae3679eeaddd", "comment": "Malware payload", "value": "e04a9b7e6f5655da045d44c1898a701f60c574ff029caac0d81d9a0e18804c34", "object_relation": "sha256", "Tag": [ { "name": "AdamRAT", "colour": "#7bc235", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462409, "uuid": "ad72af5d-454c-4369-8ecd-d3f3a6f08760", "value": "T16CB5333CC4BA4FC8E4A3C9B25680BDDE753958D7F09962E97961EE86D17088FB0713", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462409, "uuid": "1b4b5842-46ba-4dfd-b9d2-e75920daf16f", "value": "49152:vEimfCGo4rqkzBKawVjFg8jShY+UAXcTIyeewyPAzCP2MXU:vEiACGo4ekYawVjFriYXTIfeR1XU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462409, "uuid": "ae5b4b9e-94eb-4681-a714-16108759490e", "value": 2452869, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462409, "uuid": "0fe54c8e-cf84-42c9-b7a7-8c7fb418f9d0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a222cf5e-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775462410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462410, "uuid": "82d68e60-ae9f-46ea-8dac-10d87355693c", "comment": "Malware payload", "value": "f90eb431e9050b6455d36161fcc8fe96", "object_relation": "md5", "Tag": [ { "name": "AdamRAT", "colour": "#7bc235", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462410, "uuid": "76bad023-0e2a-4437-a146-bbc5737e34ab", "comment": "Malware payload", "value": "f2ddbcca6683eed8112b6213e330674f31d167794d627ff65fa144043ca645c8", "object_relation": "sha256", "Tag": [ { "name": "AdamRAT", "colour": "#7bc235", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462410, "uuid": "d295ce39-a84a-4bf1-9584-cb50635b2518", "value": "T1A1B4335334B78E21F9F1E6F10BB7485B808F89E5E45A3C6A90134270FEA5B60DE55D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462410, "uuid": "88289aec-e535-4eef-bfa3-fe5f52dab448", "value": "12288:DYEfvBGKEgKL+vxnxH5ZcXX1A2O39g0HZic6lfro/KZABK:0KvBGTgg+ZnxH5Zt2yFMcm4KqU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462410, "uuid": "48982b95-16f7-4fee-bef7-fcf0d1b78082", "value": 515861, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462410, "uuid": "c8c6ef08-87c5-47e8-9137-fddb6b25fd78", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a569534e-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload (WeedHack)", "timestamp": 1775462415, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462415, "uuid": "503b11f1-9801-4aa3-94aa-06deb6e1ad62", "comment": "Malware payload (WeedHack)", "value": "8cdc27f1b1111c8a29324b857b77f1fe", "object_relation": "md5", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462415, "uuid": "d7d152de-8684-4489-9923-0d8660ccc659", "comment": "Malware payload (WeedHack)", "value": "4c7ab766875cbaa5c8ab9bb3547b7d000dc793765825c35c6db01f5c73db9ab6", "object_relation": "sha256", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462415, "uuid": "aef6e1d9-f172-4f5c-891a-83c858e07b17", "value": "T195251273F0AC0E9EF57FC9FB4400656378ADA4EED44B70292670458694B388ED7263", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462415, "uuid": "57f0d122-526c-4bdf-a60f-aff05ad81a18", "value": "24576:RDtxJ+pSreB+QTgXyrSH+wM1vPSlYyjVQ3YglTyD:R5XGTIyeewyPSldhENMD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462415, "uuid": "936447e6-2c1f-4292-95b8-5635ce223c92", "value": 1041426, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462415, "uuid": "f64c8c88-7587-4584-8f5f-c4a5dc9e99aa", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6334069-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775462416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462416, "uuid": "f60e4545-3fb1-4582-a44e-b183b48ad118", "comment": "Malware payload", "value": "e1c86353aa283b69b12879e9e568f6f1", "object_relation": "md5", "Tag": [ { "name": "AdamRAT", "colour": "#7bc235", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462416, "uuid": "064e67b7-6a83-482f-b0e0-7dac98d32fed", "comment": "Malware payload", "value": "a84a3b209750f92141d9e9b6d472b654e20b80501251e1a4434d1b992d5ad1ed", "object_relation": "sha256", "Tag": [ { "name": "AdamRAT", "colour": "#7bc235", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462416, "uuid": "a9b080cb-9148-49e2-be35-d4bf6160af71", "value": "T1B775332910BC0650EDB7DAF3791436A2E82B19A3B67D67905C12E8D2EC375CF301F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462416, "uuid": "be9c6d88-a436-4ea6-884b-7545d0fc8e4d", "value": "49152:pXxTIyeewyPpLbRtEEmKnfG+HhAJ0O5dcTZy:HTIfeRpXI3KfG+Bg0OIdy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462416, "uuid": "f8a61c83-420b-4037-b8b7-22e8d24133a7", "value": 1589421, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462416, "uuid": "478c3ece-b680-4eb2-9dd0-629abdc83f90", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad740a9d-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775462429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462429, "uuid": "cf048956-60a0-4bd2-9a4a-2f4ad097ba27", "comment": "Malware payload", "value": "322220b83fe8f62b8cece09bc571d082", "object_relation": "md5", "Tag": [ { "name": "Cybercrime", "colour": "#6b27d1", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462429, "uuid": "ae0e8679-97c4-4c24-b875-337cc278f1b3", "comment": "Malware payload", "value": "660e32363909888181577e197bdc177acdceba9f59fd0189ef3dcd1af2e000cc", "object_relation": "sha256", "Tag": [ { "name": "Cybercrime", "colour": "#6b27d1", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462429, "uuid": "59571561-51e3-4e23-8b8e-30dc6f0b4fea", "value": "T1432833F04243E9972F764E767142BAF018785314635F190A82C9A0E370E9ADFF57AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462429, "uuid": "21e361c2-5267-49c0-990b-3da5418ab8a7", "value": "1572864:Sf6E6WH+PoppPHWJ2GS3AqLvHG1TBAHvy7yJMLmFEQ6JTEfMN+53lLYg2BtIqqz1:SfV6vyfWJjjAHm16a7yOqiQ6JzN+f82R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462429, "uuid": "ac7a1171-d5eb-435d-a743-5fc88a846653", "value": 96768127, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462429, "uuid": "392dc418-b455-477e-9861-9eb103d08f65", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be3a0c4c-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775462457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462457, "uuid": "89260001-8a3c-4370-ba84-ebc17207de67", "comment": "Malware payload", "value": "fed131b247afd78796944a2511ec8d8f", "object_relation": "md5", "Tag": [ { "name": "agent", "colour": "#cb166c", "exportable": true, "hide_tag": false }, { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "GenKryptik", "colour": "#561d31", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462457, "uuid": "f4c540ab-b39e-49bb-adff-a6aac23a8d2f", "comment": "Malware payload", "value": "53b5977834995ca38024dd72cc64272308bc199e245c4111ab9650bc127a56a3", "object_relation": "sha256", "Tag": [ { "name": "agent", "colour": "#cb166c", "exportable": true, "hide_tag": false }, { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "GenKryptik", "colour": "#561d31", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462457, "uuid": "6befda6f-7c12-4224-809a-1e08949ca2ef", "value": "T194683338BFE6E4FD6415444F91B148405392774A32A8B319C768BCF6126E83EDD2CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462457, "uuid": "cc39c432-5223-4f89-8de3-63a436347062", "value": "3145728:WO46Vql8gKsO6ALwIA4og7E4XOfMC1qvcSk4wqhjBV7MWX+:C6VqtzeLwIB97E4XOfN1Ucb4wqhjBVJ+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462457, "uuid": "bd37759f-e04a-472b-bef0-0f3e6393ac32", "value": 142150478, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462457, "uuid": "d1294849-3ee0-4ad6-b7fe-6149f88baa44", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2296c76-3071-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775462527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462527, "uuid": "0c9e3dc6-085d-4d28-b374-13446aaa6413", "comment": "Malware payload (Mirai)", "value": "65dc183c145c89570277277c6a05d5cb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462527, "uuid": "555b1462-3705-4ee4-9a37-b419cd1627b1", "comment": "Malware payload (Mirai)", "value": "46211322cdf55293bfc9b34f1db8f9fd947ff1d3a0aa9123d15432920ab001fe", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462527, "uuid": "93c74a1b-7ba3-4815-9ae9-3e0691db0292", "value": "T1F7732983FC81AA17DAD01376BA1E51DD33217399E2DE7203AD126F107ACAD1B0D7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462527, "uuid": "e17e132b-e972-4696-a1db-f7e426d6acca", "value": "1536:N9t1lc8QUWL85kfN1i8l3E4vQBOye3ae2ZA6WBFIQ:N9tbcKyD3Q0ye3ae1F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462527, "uuid": "0e443c3b-35e3-45f7-ae4b-f3687245104f", "value": 75272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462527, "uuid": "2e5fbf87-b6fb-41be-b61e-ffc5786cbc5b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3a55a2c-3077-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775462527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462527, "uuid": "5e6f2513-ad11-43bf-beb3-7c25d470f603", "comment": "Malware payload (Mirai)", "value": "e1defbf08ad104908ba872531870e879", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462527, "uuid": "06e8b542-8e26-4918-a6a2-e7b9b4b541d5", "comment": "Malware payload (Mirai)", "value": "abcbc71b75b492709a97b750acd1558d8a6b5e43c8e22fbe04630f5ce0c2676b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462527, "uuid": "d2db13dd-c9bf-46e4-9daf-708ed0cf30d5", "value": "T10893734D7E329F7CFAAD823483B74B659349379572D1C588D2ACE6011E7024E702FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462527, "uuid": "6d2a7e7e-39be-41db-be9d-9005a25908d5", "value": "1536:JCHlT3U88uOGcPI+6LnArqV+Gq9JOW8Hjz8dtUMsOphUHwQwiZwPps8kYCIY3ZAs:Jy3U88HOW6jz8HQwiZwPps8kYC3HFFRd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462527, "uuid": "4faaa8c5-47ea-45bf-b15f-ea9db08fc3e3", "value": 97520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462527, "uuid": "015895d8-53c2-46c1-a499-07c1edbd366a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "968922ec-306f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775462527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462527, "uuid": "c814b8d6-da77-458a-95dd-8ecbc8599581", "comment": "Malware payload (Mirai)", "value": "501c9b19e1ece528a8dffb8901d983fc", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462527, "uuid": "1b839fb5-cb94-4ab6-801c-9a30f9081e9e", "comment": "Malware payload (Mirai)", "value": "14df0a8f6e7b6f53be0abec8f4b094498476b548d0530748194b8cfb4471eff1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462527, "uuid": "2803725f-cf27-4575-878a-bb797acaecca", "value": "T1D2832982FC819E11D5D8137AFA1E118E33136369F2DEB253DE106F206B8A92F0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462527, "uuid": "2b1bcd78-02f3-4b6a-bb0a-4bfb3b7a9369", "value": "1536:/Mnn0ghx3Czlc9dff7fSbMpK+AHRcTnv1pobM2ilyc/hQceZA6W9Fxrd:Nux34AfG3VWTnvyc/hQcZF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462527, "uuid": "046b08df-aff3-4364-a1e2-1f0d117eb014", "value": 83456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462527, "uuid": "be6f3af4-bc66-4861-9eaf-3dab9d3c19b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58af4266-3073-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775462533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462533, "uuid": "89914163-d99a-45bd-a8c8-15f063af083b", "comment": "Malware payload (Mirai)", "value": "777118aabfc6acb47841edf2bf55d1b7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462533, "uuid": "c035a37a-3c1f-4761-912c-f64d0482792b", "comment": "Malware payload (Mirai)", "value": "65c071651912721813fb80153a9a662de6212aedb6a120d8a2275d2092347aa1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462533, "uuid": "9944165f-7b06-43bc-82f5-79da8649b1e5", "value": "T1D6A3A509BFA01EB3DCAFCC3709A91B4524DD692B20693FB5B930D824B14B64F65D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462533, "uuid": "7b3380c3-a659-4e47-83c9-ec753d90d424", "value": "1536:tFJqNVmQaMwpnErfEbif38U+WwCmAZ27EF7QuIZA6WEF37Mi:tFM/alnMGAnZKF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462533, "uuid": "68da988c-5c3b-4032-87a3-f4ed20710b74", "value": 99168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462533, "uuid": "1fd3bc09-f51a-4b15-a6c3-afb6037f3aa1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "742466b3-3072-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775462594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462594, "uuid": "6a56297e-0af5-4bfc-bb17-5e6f488295c9", "comment": "Malware payload (Mirai)", "value": "19ca871226c317abe37aefaedabc3979", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462594, "uuid": "d1ff8ad1-7467-489a-b5cf-22ce2d6d7c79", "comment": "Malware payload (Mirai)", "value": "38c20c35dbb057ce3b8b0f7d05af60d37176158339ca31caae044e0723ac0fe5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462594, "uuid": "259b8844-4a82-4a1c-bf66-7adc1df093d6", "value": "T18E631A89F58B81F5C91B887050E7F33FCB70E56981709A5DEF495F36DA73A02A2122", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462594, "uuid": "8d177d2f-0935-47c0-a242-57943785bdbf", "value": "1536:asIXb8GZ25qH5iLqNuPam7keEqng9At7Z+lYPSCu687B:a3XwGZCqH5iLqIPfTEqfH+lYqz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775462594, "uuid": "3d4266d9-6833-4200-ba40-7eacaf0a88d4", "value": 73108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462594, "uuid": "9834c18b-3601-4aef-9189-54daf08dd1a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74d0c66c-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775463193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463193, "uuid": "17cead7b-8750-4f91-af2d-e6a583770b07", "comment": "Malware payload (Gafgyt)", "value": "bb1d089a992350d4d45aef7a2f5190f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463193, "uuid": "24b50ca7-7681-40e1-ab2f-e7aa56ff1a79", "comment": "Malware payload (Gafgyt)", "value": "0dbe04e2373342275ff1e25963440c56b07ab056a23927cfaf94a1d7ece8c596", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463193, "uuid": "7523c7fd-f852-4b6a-8854-eea1a9f864ec", "value": "T170B2E1B610B69B57CCC0B074122F15BAF0949E2B85CB0D3B71AF7FDC58B807B591A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463193, "uuid": "c8e63596-60e7-4eb8-b95c-98f21d171906", "value": "384:MEdPMEMOLxI5KNbLSLnIolgdZwob1uRmqsHSFFn9YmmER5so1V3Igq/ZJmJHSg1F:HM7mIENOnxqJuRmpo1VI7bcJN5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463193, "uuid": "a4901468-6865-490c-9643-887921de2096", "value": 24500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463193, "uuid": "0c0359d4-6ae5-4ab6-b13e-7f228b130717", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74d30ee7-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775463193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463193, "uuid": "3b0eb996-18d4-44c2-8cf4-091f4bb18b6f", "comment": "Malware payload (Gafgyt)", "value": "24ac1344f7bd343040fd97c385605a38", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463193, "uuid": "4f30f692-592b-4927-ab60-30dcd08a03d7", "comment": "Malware payload (Gafgyt)", "value": "b135ccb9dadede605fd0d2f9269d455419ca5fd6e01df71ed011ea157fc5d857", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463193, "uuid": "eebd9237-a5d3-4bac-ab3f-8f3aeb31fbb7", "value": "T1C6B2D051E1988DD8D5FF78B86E5B92C113F04ECC69F25EC2B9834F4346E1E23A6198", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463193, "uuid": "a72c7f78-969a-44db-9c4a-7c5f07c1de32", "value": "384:FhEr4cdaMwwmgFAIsvGtBOwDNfCrBHt32e5KcWM4uVcqgw0Og724kmWs93eSgPUi:FSr4co9VWaGXWHV2e5Kcl4uVcqgw0X7A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463193, "uuid": "aac07d6c-998e-47c4-abb2-817cd884f417", "value": 23688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463193, "uuid": "494d1ff9-791f-4ae2-bb06-e382438be37c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74da029c-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463193, "uuid": "153fd328-49fe-4ba7-8466-1731342476f0", "comment": "Malware payload (Mirai)", "value": "cc891173d246730107fe24534697661d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463193, "uuid": "9d624e93-8199-48fb-8009-fc12d72d6e6e", "comment": "Malware payload (Mirai)", "value": "179c981f19c19c2a0d1cad2ca7e8e26893a0e68e0d50f422e4246173e8f3b7a2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463193, "uuid": "b0655443-6d91-4f8a-83d8-ad676b760fb0", "value": "T1F8E3885A6E228FAEF67C873147F74A20976D23D623E1D684D2ACC1141F6038E545FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463193, "uuid": "7e7f9396-263e-438c-a77c-aabc1716a141", "value": "1536:p+FTcKot8sp2MKypYz8ZOfGQ+v3eB/hub8mXRCTUGk4onuftL4Vx4dbK:pmlybKpzEOfGQ+vEubTt4ouftL40dO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463193, "uuid": "547b97f0-ba45-471c-9e15-0442c2d61cb1", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463193, "uuid": "5bf2b2be-1210-441e-9c9e-bc230b11f176", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79d6cfc3-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "bbc66f61-61a8-4fe1-b173-a9afbfc90521", "comment": "Malware payload (Mirai)", "value": "1cbc1df92c543a197f2fb8b6cc7893e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "85f64ee6-5bca-4716-9677-d8ee42b0de96", "comment": "Malware payload (Mirai)", "value": "8ad69988d52a0d48237113d0cf3ac5b7eab92af3d98f59a761e3c8732f02abd9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "cc721382-b571-46b8-953e-08dc1c00b6ae", "value": "T144333C4DF783E0F0DD4B0531115BF77E96349E025124DE7EEB98BE62AE32A02B11B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "2516470c-1039-4fd4-a3f6-0f198c9080f5", "value": "768:vwheNR1eCZWUJ2S7pRflrFWwqTlFNB5azjYvzNeVMU2331ANA0B7RhuqDV98SN+s:vwOt37pOzwLMU431ANA0BLBCGr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "768a860d-dc6e-4f44-8536-3400e549c231", "value": 50476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "0fb58029-ef6d-47b0-96a6-059662fe71e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79e1c787-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "91bef26c-dfb0-4cd7-a1f4-6028ec556b56", "comment": "Malware payload (Mirai)", "value": "5ff353c0d859eb4f9b9a156277d842cc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "0f56db12-ca3d-46e6-9f13-6a764402a242", "comment": "Malware payload (Mirai)", "value": "2d351e6f9b18ef1b14a3cbbd6762f8b248fca06991f30a0f09a4fd7c3f9392ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "a167d6cb-80f0-4508-91ae-d265ff497d9a", "value": "T10BC30956F8819B11D5D151BAFF0E124E77131B3CE2DE7312AD24AB307B8A8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "bf05bd28-329b-4a41-84b4-42efb6b76d4b", "value": "3072:f5D7YhjFMX+maR8TcDeRqQV3tNQYciYTG1l:f5D76aX9aKTcRQVnoiYq1l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "49981ee2-6502-4c18-8382-ea06a49a51a5", "value": 129244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "65580b09-4430-4476-a33c-f4c37d7b18d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79ea98f9-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "999a4a33-4b01-47fb-883d-4b7351c78c86", "comment": "Malware payload (Mirai)", "value": "4fcf04349463cb52dd964acaa0765b23", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "e9d45396-ef87-4896-b1bd-555b756027b8", "comment": "Malware payload (Mirai)", "value": "a4ffbec6d0a5080a029ccbe7f2f38639d9f241fa4a92489beb560302bbd09818", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "d447f0d4-af83-43c2-b214-910f20ff1653", "value": "T192837D69EE0E6E42C2C7D279AD1A4FA230337CF45354C2725E00617DD4FAE9988F29", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "f2ce985f-8a94-49e8-bec5-1b4092401c58", "value": "1536:7aW2U73jqB/dVFPLa7EOAeAmSBiS4ZSwOl/g5lOmQXWPed8DFn9wiiY69usLThQx:7aDUSPMSBip7HQXW3Znvr6UwSW9kKrv0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "375d34f4-8fd3-4dfb-85eb-a60867b0ace6", "value": 83512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "af18361a-9e85-4da1-bbbd-cc469f1cb28a", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79faa393-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "ad54a7c3-b498-40bb-8510-68c37cf6eb6d", "comment": "Malware payload (Gafgyt)", "value": "ebee820fd155f7e1e93d61cb127a00e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "3e359848-e40e-4bcd-96fb-6b62785bae4d", "comment": "Malware payload (Gafgyt)", "value": "39bea49f694f71113619706b0df298fefc29139f9006b5031a287dc4b3b351c1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "f2f5d334-3954-4751-b388-d3a4e6dfb4f9", "value": "T1C8C2E0D387A4C462F11690B56F4DABF8F193B83908ED05A815238FE08275949DF20D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "ffbb6654-56e9-4ea9-9bf8-b0f94f6bc625", "value": "384:h0WWMfdriGrm0LCP9EWMKm/zhVjfBQPV7cNwAAWimagle0aZCb6jDIpba6QqV:8md+P0LCP7uFtSPyuVm7haYb6PYt5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "cadba6b2-1829-4092-98f8-ffa8b308e590", "value": 26216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "b00f58a6-21d2-4897-aa5f-6b5612873d67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79fe064b-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "8df2167c-15f2-476d-8088-adc54b18dc98", "comment": "Malware payload (Gafgyt)", "value": "d7794d3235343d851b0f718f47264715", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "d1c60c96-e71a-4afd-ab32-97b38f138cb9", "comment": "Malware payload (Gafgyt)", "value": "05e8bcfc1f5ae44413daa7e5dc772d4316901be7a59fe3862a6c3f8fbf2de19c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "2c0c0cbd-356e-4cad-92ee-5bbc6da19bff", "value": "T1FEE2E1F49E496E7185F02830EC5AC1C1B3870BABD69152FE1DD459ACA9E6A0033BD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "8d0ac101-49cf-4465-8c0d-8871765d63c5", "value": "768:uMv5IESo9RMCnzm6vIbM/wjtWJsjglFVq3UirRhrP9xI/acR:Xlh9RMCnz5vIbHtWJsySPUCcR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "eca534e6-a202-4267-b53a-a6d14d018b3a", "value": 31936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "800d7d5a-6732-4b53-a88a-2a25be10a64f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a0a05d2-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "4af53748-2caa-4bcd-ac8f-f4ac1b8a5bdd", "comment": "Malware payload (Mirai)", "value": "e0b77abdcd1effb5ab200317116e500a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7939abce-3533-4f5a-b559-783f981d73d3", "comment": "Malware payload (Mirai)", "value": "3d605b4e113d87780f36a26cc04f647e04f65744c8c2055d1dc194d0c39652ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "bcb8878e-7e4c-4b99-af0a-6b9770e82c4d", "value": "T1FAE3B71A9F910EFBDC6FDD3302A9060635CC954722A43B763674D528F64AA4F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "b1b22a64-8c52-4612-9010-b73a3e13f893", "value": "3072:UxjJw1Cc/0s6YAPwenUr48pzfR+JonEy:Uxlw1xAop0YfRE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "f2096129-53d9-4bce-9f07-b021ec79e7ee", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "b6ecd6cb-b425-4a38-b79e-969f7cf2970b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a105382-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "0e51b698-fa0e-43b3-a610-3538c133703b", "comment": "Malware payload (Gafgyt)", "value": "43afb5a6dbc6c1126ad133ed3ab51575", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "25dff79e-f77a-415e-aaea-b6dd4c36f579", "comment": "Malware payload (Gafgyt)", "value": "70b58485e56d83cef2e2ed664391833eef49b367b870d1050bdb13099d125d45", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "c7e65568-50c3-459f-b065-e8f100c7ee8b", "value": "T198B2E01D92D22031DA723837787F4582DB664930E5B931F0B249896D38E64DF8FCD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "ff6c3a09-2cab-4e8b-853c-c99592e3c614", "value": "384:z23UjbCuMFOR9WDDy8NteEWuzqn3LtYLA2Pl1wNXk5/tlmdGU57DH+41hKQ4+RNh:zQelMsbQy7ExqhMP/CXkTl3Up+qhKkNh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "94faedde-774d-46dc-926a-c7061cb8db4e", "value": 24508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "edd77d52-5698-4cfb-a3d0-a4065d5aa6c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a10e23b-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "2b8093b9-d1b5-45be-92e5-0481d26f98cc", "comment": "Malware payload (Mirai)", "value": "85d75873844ccce4eb646ba9b9538aad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "938c2ac4-c80b-4a94-a8fe-edb2d8fda0a5", "comment": "Malware payload (Mirai)", "value": "b07885a5082f44bbd2a977cc36dbe45bbf966be1618e1528e132ef90e140fc16", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "ca10c30d-f390-45a5-86b0-251380f3968b", "value": "T1CAC32A05B30C0D47E1633EF43B3B27E193DFDA8121E4E640655FAA8A91B2D32558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "d8e4b86e-9ef6-4053-8027-271e0efc64bc", "value": "1536:6GB72AZ4ex10JrZqQ7UrZb6wI0vAnjiLVRuzae8Dhq6N2te5f3dwJ:6UB4exMF7oZKJnCNYaeJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "be69ee59-9827-457a-9cd5-6d3fedd5d269", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "0b9ee58a-634d-415a-86fd-a36939682628", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a124f6c-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "b3314351-ca21-415c-93fc-b7def49612c7", "comment": "Malware payload (Mirai)", "value": "a4ebc58e7eb21d1dcc5e92baadf7a5e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "6e493c70-8de9-4814-97fa-adbae2d25693", "comment": "Malware payload (Mirai)", "value": "4a38b31b4ab29b7e5da48d77ddec5aae6f8795ca2455fbdf2d1659120b0404cc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "9805d597-8dfb-45cf-9c7d-334e02810de9", "value": "T1FA32C407A7B7AF1BC4D027770193072162AA9FA56025472F7D0D1C4E6E9B3812D3FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "94d284eb-791f-404f-b9a6-45150ec3055a", "value": "192:xvPOR1CQOV/1NxfAzVHaCD0SdbNlDqM+2mKdc0Ew+e+f:xvPbbzfaV6CISd1/c0Ewkf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "c9726302-d877-494d-8f48-013f79dda8b4", "value": 11024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "662102e6-710a-4ee2-b0f3-b15b6571c01d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a13ea8e-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "088036c3-b1b9-4aea-b0a5-f3dacf89c262", "comment": "Malware payload (Mirai)", "value": "29d39877afb9384a795b108965a6e4ec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "871b4b02-ce05-4b9c-8ff6-711a6e473159", "comment": "Malware payload (Mirai)", "value": "a39e914e48074dda05766f928d028c405bb624c60794eb8a8d44a906b93cb34d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "6bdd0dc2-b20b-4de2-9e2c-4f29f61e70ed", "value": "T1DB930749FD406B10D8D635FAFF4F024973934B6CE3FA7201AA245B2523CAA6B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "8aa730e5-314d-411b-91da-34ed56949beb", "value": "1536:wqnZh8D4zgUdtS0tFbvacgzafVAweBuqKlUI9HiWNRIbT2gZ1Yqn:J8NUv5nTacgzafVAwe4BNRIbT2gX1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "348c8c6b-e8aa-4c94-a65b-cdc5e1c448dc", "value": 93252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "4ff641a7-d126-41fe-bc15-d49846036940", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a14059f-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "03a9aa11-c1be-4df8-97fa-9568023bdc1e", "comment": "Malware payload (Mirai)", "value": "80afa13f3753152e22bb9a4043389c71", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "6fac09a1-ad0b-41fa-8133-9dcaacc976e9", "comment": "Malware payload (Mirai)", "value": "178bbc7e4181d89196b2208fa1ee10989d2c1364013e56bca163ca49e4f61206", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "d994b3ac-8cc2-47e9-9808-4b62c3f9b8f7", "value": "T1F4F33969BA0F6C41F2C2D3F9DA8C87E13E1735E3C6778DA1790252EDDBA39D949805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "2bad439a-bfcf-4174-8a39-22d6c905e507", "value": "1536:YdMiHrrc/qDHavM5Dtrg89RPA4b1X75rgmnX7Dy+IfMp5En5p5M/LW:a7vDtrnPTR71gmX7Dy7fMp5xq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "7115889d-e97f-43bb-b8bc-1e7a2c19456d", "value": 157544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "8a9ba4d4-86f7-4252-ad79-f3753f41e371", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a14ea22-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "0709ff59-a947-4952-9f59-f2362dc5969a", "comment": "Malware payload (Mirai)", "value": "9b618e494cf9c0b69371acd184ced542", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "0f2cbae4-0c41-4503-aa6c-b6577110159b", "comment": "Malware payload (Mirai)", "value": "92cf682b91d2443bcd4677bcb5550fa829280c72fecd21a7753a900168e37ff6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "54e66933-9a79-45ab-8955-4fc0b219f068", "value": "T193735CD4B20A3FBFD1D72D3D81456B06AF1C9FE4AA43501150F9BA071AF32922E26D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "1c9eb9ae-75f2-4d79-8c54-648c40a2c89f", "value": "1536:34zUZDiYVcYNejSQ474EfvPvDGurUYZ+SrvzRNxCaxpeYEQrNV:IyV9USvXnyGUJSrvPxBxpeYEo/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "a7e4a54c-0cd4-4926-97a3-efee0177a595", "value": 75560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "f5447845-6e49-45c6-84a8-7525a26916ac", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a14ff08-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "356a44d7-8ff7-4fc2-befb-28e8acdf64be", "comment": "Malware payload (Mirai)", "value": "06bc329602bcb7d27d8e3316cbcb7644", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "f4ef4573-6416-4402-8db4-e9bb191bc217", "comment": "Malware payload (Mirai)", "value": "e6d221afe5461434e1413dc4998c507f081c27f080a27522f9992b2dac7be6b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "eb902341-8e25-4912-b37e-ddb8be15afd5", "value": "T10EC39DABB24F1051C82647F41BCB579C2E3325019E2B9AE77C6E373E1A369DE58063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "411be94b-845c-4a01-9b86-217c1ddff37e", "value": "3072:yf0GQgHfg5nBR4YYSOxTKB6Aq7mgbgiCrheiiU41qe:yf0tJBR4NSALD7rnCrhei2qe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "5b91906a-f4f9-40ae-8ef3-5b96d7366173", "value": 124344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "9948bd9a-195d-4052-8361-987ee1d6979d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a1518b6-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "ee84dc23-e6e0-46ad-b3cb-f908cdb0d41f", "comment": "Malware payload (Mirai)", "value": "c71bc0cf947be9c1920cb04dd66ad05b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "089a6096-d554-4c79-8391-b369f40cac73", "comment": "Malware payload (Mirai)", "value": "a03d4a24bb8c2384cc89bd6a6ae6c9f6d6ef9d4d53ca1f42ebb66bb5c5347da0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "6b5fa2bf-e02a-4ef3-b3dc-ffa5f5e9bdbf", "value": "T105D3F8C7F900D9FAFC0AE7374853080AB230BBA545925A372257357FED7A1990477E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "c79a328a-ae78-4e28-92ba-ebcee9c10bfd", "value": "3072:YNbul4MGHJLqHy5Fut5K/cwpifdDounVoQV1jbiGLD3rQ3J:xHy5ct8/cyiWuVosLDGJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "81c77b47-b675-4c30-8cbb-05598e61eaa1", "value": 140064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "64263691-96eb-4f90-9a71-a440b6b44b9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a15abc6-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "28d450ca-f88f-4e9c-a6bc-d3c6f6fe1780", "comment": "Malware payload (Mirai)", "value": "57958bc98ce263a65e3e5d713e0cadd4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "69e79a99-9c09-4076-84d4-5d7753948ae0", "comment": "Malware payload (Mirai)", "value": "82f962a3a94097cadcae9feb3cc8e1722c316371bfa5f5a53568ed47e4acd816", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "bb9d33ca-244c-46b4-ad5d-150f6a08590a", "value": "T10BB3194777218F61C7A9D53046F74B667BEE22C626D29446E36CDE203A6034C682FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "2ca078b4-8e58-43e1-a4f0-811170661b70", "value": "3072:zq3B66IuBvBhe5Ithy+CEwT/TIfZMIBDjz:mx6HGvHGl/cKWvz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "7363ca02-81d0-47ab-9dbe-c9897faaeda8", "value": 113092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "def6da21-040f-41d3-bcf7-1fb237d50259", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a16f669-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "030d8f53-198c-4ed0-8e44-debdf72bd89a", "comment": "Malware payload (Mirai)", "value": "c60ce942bdd27408faa89c1335e98956", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "b7a6b67e-9332-4bd0-827c-39444ad7f4cb", "comment": "Malware payload (Mirai)", "value": "6d12d7cd6dfa7324320518d4d97f20ba0743089b5f41a56e2cebbdc2a233ff97", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "d1e41045-041d-443b-a5f5-a2efc4c14dc2", "value": "T1C9B33B89AEA51BEBC4AFCE30011F071715DE558F63E1B33A527CCC58389A3599AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "bd52227b-e1b6-4ef5-a87b-7fec7a9a379b", "value": "1536:0k7lvVySD4d7Xz0NHnTRXkGJhSiEKUMqajPXGf2ENSKoIBOb4rk:0k7lv8SD4FsRXfSiSYjfVgkIBOU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "99304aff-b289-428c-8a43-38885cfec07d", "value": 113092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "a4ac5ebb-6ff4-49ba-a42e-9aab16c21ab4", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a1722eb-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "247e5f91-f670-42bc-b6fc-43558bba859c", "comment": "Malware payload (Mirai)", "value": "2b1de67d8ca90ffeeac0d07b36691e7e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "739c7fd3-ab97-4dfe-8aa2-05d5b0c66a56", "comment": "Malware payload (Mirai)", "value": "0d767bd5f98b23b81ec07c17fd44ddecc846155949e81331fce62194a0a75698", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "f42140a6-c973-497a-a446-65609cc66396", "value": "T169634A81F5A3C2F0E0834570006EEBAF9F36AD664125D667FB683931FCF17524846A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "b9af7f02-ece6-435e-bc2b-21f6ada45718", "value": "1536:ezvpB3G025EdrB4xKxFpLaWffIkSZapoAUBE4GG1oMYior:ezH40xF9aWnyApkr5oMYr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "45886a9e-251e-4eac-99c0-4a11a576cc65", "value": 70804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "b22b9968-c29c-4b2c-b453-bb5446c5626a", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a179359-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "cd129212-95b5-4679-bfd7-a4feb4a49a0a", "comment": "Malware payload", "value": "4634d421ba8a3496e2e7c9823b660750", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "b03e86d1-3645-422b-91a1-8bafdde4276a", "comment": "Malware payload", "value": "bb673cb71c788034d4246695b87fcb7d476f3626ceaca411757e624cdf60e6b0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "ee9493fb-308a-4128-93f1-18109ec43058", "value": "T1E4938C25FAD1ECABC82101715464CA351A51EDE003E6B24274FEF3B85A737417EAEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "a5fb21d7-ada4-4975-b0b6-0d76f248077f", "value": "1536:VZCNyoWbn9EkUHFrnDB8U9whuiA6aA8eGIBmIrUTuJpTeIwYJnZFO:jCZOnsHt5whuijaReGIBnxaknjO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "f434be5a-5a84-461b-aa81-b860f062f3ec", "value": 89979, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "8fcc4e38-01a5-4228-978a-d9573fe3edc3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a21e8a4-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7fa97652-4118-4475-b29e-accf0b14f6e8", "comment": "Malware payload (Mirai)", "value": "13b26ac2d3084ffabaa757a3a6962341", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "fdb7f909-ad81-49fd-a6c2-6dc2f4e014b6", "comment": "Malware payload (Mirai)", "value": "a6c961a79c8adf1b8942ca55d87def8c8728062324ffac1226e3ae9e28a6d06b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "70a25c87-001f-4f00-a7a7-ba0441c8ec5b", "value": "T1DBB30945F8445B17C6C666B7FF8E438D7B2A1758E3EE720399256F30378B85A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "5f12fdf7-fa3c-473a-ae64-4dd3a85f7beb", "value": "1536:v7jnPq8azP4V8YOTIBRvyNOzIuSIwYeFWd/lk68wywlQ3Ym3Tb/V1oEakCxO:DzPqF41OUBljSIxecUtCA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "10b4effb-3dcf-4805-a0b1-3505d61d166f", "value": 113184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "9e06d1a8-bb20-4dcb-97f8-50459e9d9b59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a252e01-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "35266956-454f-49cd-8c31-bc5b0ef5fa13", "comment": "Malware payload (Mirai)", "value": "fd6ca4ece7e68288fbf5e2ca0d0e655c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "fbd5bd3d-9116-4b47-acd7-cd1716f0afee", "comment": "Malware payload (Mirai)", "value": "65b52e19817531f74d71d5350d13149553cbcd04e48138ae48aa8827ad556e68", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "a70e10bb-6519-47e4-8118-5571e5a83bf2", "value": "T15CA328A3CC766F58C628D5B4B0B18F796B93AA6081475FBE1567C27480C3D8DF6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "bf9a771f-cafd-4500-8748-1d1cbb74f88b", "value": "1536:7HufPeqU2CVKCsNV7lsLPC9z+NzWuBx/3RhyXAa:SbU2RC4kPCtSzWu3/3L1a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "5fdcb8ba-55d4-480b-a0a7-ae1af10e3497", "value": 105056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "f06f147a-270f-4bf5-b203-8ad890b53c7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a25fc24-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "37f3cd3c-6d5a-4250-b494-77e9a2ecbf4a", "comment": "Malware payload (Gafgyt)", "value": "965b60d87a2c0fd6a4f4c1afda8bdfe8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "26dc56ea-bc4b-489f-9b06-4b994f455a43", "comment": "Malware payload (Gafgyt)", "value": "ae39d9bb90596bad86c57dfd18a5fb1923be8f052cec069632e568cf50e79114", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "cd8fb87f-d5e6-4d99-8f0e-32f09a549eea", "value": "T1AFB2D02C92921431DBB2383BB83F4292EB764930E5B972F0B209495E35E60DF4F8D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "376657e6-bc3e-4edb-ba02-18702ab871d6", "value": "384:jo23UjbCuMFOR9WDDy8NteEWuzqn3LtYLA2Pl1wNXk5/tXmdGU57DHz41hKQ4+Rz:0QelMsbQy7ExqhMP/CXkTX3UpzqhKkNZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "e43e2450-e226-42fd-8eb2-00fa1ec2b8c9", "value": 24508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "45716655-523c-489a-a3e4-e5dd58025b0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a2604c0-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775463201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "bb451b35-5ece-4339-83c0-bd12e9bf384e", "comment": "Malware payload (Gafgyt)", "value": "8d2a309fa0867f843aeaedb1a0ac4b00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "4e7559e4-c9d6-43da-b3c6-91320f367c08", "comment": "Malware payload (Gafgyt)", "value": "c74bda6c601c08802724569b523ab94f2bff979d6ae2e1972a618dc4e303a08a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "a7f7765d-4339-4b3e-a1a3-6b7b42872986", "value": "T17C43F88398A26FB7C055AA75297B19240717FD121F4F0F8A252CBAB5477F1CEB40EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "8c05a427-839d-49f3-a2e6-b9774275ca11", "value": "1536:dyqltKwUPhB6GrrbOmc0n6ATW1CQRICQBBJ3f2:JltknrrbOmc0njTgC11PJ3f2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463201, "uuid": "4a6c6115-cb4a-4e48-a5f0-8d4a2c7f1b57", "value": 58674, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463201, "uuid": "13083bc7-7006-408f-b087-7e342575aa92", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a2e567d-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463202, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463202, "uuid": "70d77064-b351-467e-bad0-32ede4e16c12", "comment": "Malware payload (Mirai)", "value": "7da913719c00b2d9b8d09252fb226f14", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463202, "uuid": "ed1463d7-8eed-41c1-ab45-f32d17f67edb", "comment": "Malware payload (Mirai)", "value": "00526bf2bce8acc85e37fc3a8f512f5f8a79abd5770765784c6f013eba65dd0b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463202, "uuid": "d03beecc-5f45-42d6-9eda-8d22518b9d07", "value": "T1C723F197330B75F5E7950076265674C8BA3EA886372A0BAF18D21DD3DC79B807E3C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463202, "uuid": "59bd3eb2-3f18-44cb-a589-995218ab3ae8", "value": "768:xnVsFkDSjrnvvMLSPWoZ6Tqs2efQ1Z2o8YgagHnTA4u:JhsrnHJPd6eGfK2ZYgagHT8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463202, "uuid": "25373e2f-a5f1-44d7-9991-bcc1939b519b", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463202, "uuid": "99822abf-dad9-43ae-8e69-2ee73a19162a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c561706-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775463205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463205, "uuid": "354d1280-c04f-428d-9ab8-dc401fb73203", "comment": "Malware payload (Gafgyt)", "value": "4ad306331192f58e6d0903fb2346c746", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463205, "uuid": "25d007eb-1f98-4f8a-8dbf-4721b7696416", "comment": "Malware payload (Gafgyt)", "value": "363cb0b6bdd66193ec537f2a2222657a8389c493e8e8b091268b748795c04c9d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463205, "uuid": "35d2a051-ba09-4e70-bfa8-bcedeeb0b4ee", "value": "T18DC2C05D8AB63DC9C6FC2D34D0A803579D58708162EDCBD5C3748C886FB4D2B358E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463205, "uuid": "8b2de07d-3139-4b7e-8f1c-51be670fff38", "value": "384:D50LelzhAGIM2Ds3Waz7i3bXgIlBi4U3+3TrRWGVCz7zZ8euR3N1aMYbKP:D5hlzhA42DtaXXUV4+3pWTNCtNvY2P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463205, "uuid": "778eb613-56ee-4cb2-a31c-abfa13a937e9", "value": 25760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463205, "uuid": "6c810d80-06e8-41cd-b87f-b84d86b9df57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c5cd64a-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463205, "uuid": "02700f2c-02af-433a-90e0-47044baa80e1", "comment": "Malware payload (Mirai)", "value": "7cfe783644890e8714cb248113499af0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463205, "uuid": "1cd5b09a-216f-48a8-9188-2cb47b0717bc", "comment": "Malware payload (Mirai)", "value": "2a878369fc31716e19c37b89a0dcbd2569c536672ab085624edc6f45aca20cc3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463205, "uuid": "4e683eca-9f88-4867-9a3a-1e2e7e2aead9", "value": "T155B30945FC505B17C6C652BBFB4E428D7B2A1768D3FE720399256F30378B96A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463205, "uuid": "77aa74a0-fa72-4736-bc4d-e1079963b8a4", "value": "1536:xUK9yqnU8vGRz4VA4j6T9y28Ty6O5FtZpqQcZlCtwywXvqcVuafhPeA45Zvd:6ixnUHz4Z+5ypkn3E8d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463205, "uuid": "b99f441d-0853-4127-9310-fea8246bbeee", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463205, "uuid": "a7948e1f-2e54-406b-9942-f12f2b18aae1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c6a7499-3190-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775463205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463205, "uuid": "4a4802fc-5c36-4783-9371-b36d1ae4fd9f", "comment": "Malware payload (Mirai)", "value": "89d3f3ce6f654953e2cee1101db8de0d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463205, "uuid": "2324ab6e-8bd6-45ba-b822-590ea9084fca", "comment": "Malware payload (Mirai)", "value": "f4dc237995e7bec509ddec3aba11b2eee67d28a9decc8342205510473df4b14f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463205, "uuid": "c70ce448-d0dc-4989-aec8-97105c243a61", "value": "T14F633B12B15150FDC48BC1349B6FE92BFD32B8DD1224766F5BD47A712E72E211A0AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463205, "uuid": "e143548a-1386-4e53-9340-db2664446ed3", "value": "1536:hZ08k/io/3XDd0bD9r6sm6heTt+oKULEIsYlor:hTZo/DdCFxeT8jIsYO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775463205, "uuid": "6175c346-40cf-4479-b4dc-f98dbc4ef727", "value": 71480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463205, "uuid": "f216955f-cf57-4666-b527-161acb48c5be", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7c81438-3193-11f1-bc00-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1775464567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775464567, "uuid": "0c721afb-bfb3-40b2-8d0c-9edfe766d566", "comment": "Malware payload (Stealc)", "value": "f66f95cef4621d33831cf86c5cfc5815", "object_relation": "md5", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775464567, "uuid": "932306c8-660a-4de5-9aad-19509d8e779a", "comment": "Malware payload (Stealc)", "value": "1061671e20ed7a7687b490cb39f4cb7befc42b1b5226aad4584f901a083743b2", "object_relation": "sha256", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775464567, "uuid": "d2f37db8-631d-4f68-88c8-7cc91667124e", "value": "T14E546D0196D08BD5D11AF2B88ED5C931C7216CC82BA097FE8E7CFE418A31DA4DE355", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775464567, "uuid": "996c042c-0be6-4bdc-bf4a-f6b4da7f9d3c", "value": "1ad35ad75a00d46c9f76cab586995f0c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775464567, "uuid": "68914d37-ddd3-489c-a965-27fa0f5fda37", "value": "3072:yW8G/Gpalm5TR6Gl3b/tENLQZhdGWTDqjmj3q:yW8G/GQo5NXlr/tMQZhdGQv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775464567, "uuid": "3dedeb84-0c5c-4f6f-9179-dd286dc8ba47", "value": 279040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775464567, "uuid": "6ed501e9-a396-4f87-8eba-1e34eee0d6a9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8be98c6-3193-11f1-bc00-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1775464568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775464568, "uuid": "25213ca2-6d83-49f7-b3e6-d1759d4f55ff", "comment": "Malware payload (AsyncRAT)", "value": "6bb8d1aecc6662bb538a45986b9664c0", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775464568, "uuid": "16d5b210-3e8b-4e73-bae6-a5618789d7e8", "comment": "Malware payload (AsyncRAT)", "value": "eb5626fe387a20577c00ea5b80108337ca40dd4307b90146a116631c546a7668", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775464568, "uuid": "05dce17c-45a1-45b4-9954-67130628999c", "value": "T11046F137B69A633EE0AA563749F292325C3B7E21B50E5C4296E01C4CCF790603E7E6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775464568, "uuid": "15716e8d-1475-4cae-88c6-fc00e40e7f49", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775464568, "uuid": "abea8887-7d5f-4eef-a0e7-8bef08009eaa", "value": "49152:gN61T1mJQiSGI3rrheKbTxVH9swPxhJoVxVtOV6I/RwApNZSt:gN662DGI7rjbRPFsrkYS/f8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775464568, "uuid": "74de0ced-f70c-4871-9643-ec0d8a41c3ad", "value": 5427676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775464568, "uuid": "cb11d344-0c4c-478d-bdaf-9e015f399fcc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c60f53de-3194-11f1-bc00-82aee05be84a", "comment": "Malware payload (VioletWorm)", "timestamp": 1775465047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465047, "uuid": "4230f04d-21d9-4a09-9da1-b50a6da2c34c", "comment": "Malware payload (VioletWorm)", "value": "1759675620537ad9d2f477ce78704a48", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465047, "uuid": "9e8d643b-a239-40d7-aee0-addb886e60b8", "comment": "Malware payload (VioletWorm)", "value": "84e03eb7665a140b8769ba72fd95fa497190682e61eef78d6f6ebcacca3867ff", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465047, "uuid": "c11f8432-7bae-4ff2-84fc-76e9b5625721", "value": "T19C53B9943673CC32D17EAE76E6C3624F9DB15173AC05D5860CD666E23F02E86C90A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465047, "uuid": "e4c10625-3ff9-4a9f-bfe7-d9ec79d9ed6b", "value": "768:gQJdeAd+qFj618aTpCZzSdpUtS1N9Orc9bjyiQpxXdrMQ6rwS+:gwdLsqF61TTpCZmdpUtuj9beimdwI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775465047, "uuid": "88b33137-8968-4b7d-bad8-2c4f8a95144d", "value": 66048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465047, "uuid": "ce75a665-70e1-44f5-850d-794e1c56dd3a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e0e0fb4-3195-11f1-bc00-82aee05be84a", "comment": "Malware payload (VioletWorm)", "timestamp": 1775465168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465168, "uuid": "f998b421-87dc-4ec6-80de-3a819aa69cd2", "comment": "Malware payload (VioletWorm)", "value": "d8943f8b04a7d27810691f542c341fe8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465168, "uuid": "a142a2f3-d17c-418d-93d9-ba676deb1d2b", "comment": "Malware payload (VioletWorm)", "value": "970dd62d5d6e8996defbfda6eacef182820b91aeddcce0845a2f727b421ac9f4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465168, "uuid": "d4587a90-a863-4c86-8da0-7d6d24cd9d31", "value": "T1D053B5C532778872D27FAE7AE6C7624B6DB54073A901D5460CD277D36A02F82C90AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465168, "uuid": "af3b57ca-d647-4a75-85a6-a9b7c563228d", "value": "768:qhQXs5Bx2EOwnynarOopWUEy8i3D9bSSEASoQom1aCu5rsd:I+sR2ELnyn0pWYXT9bSSEAm1ka", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775465168, "uuid": "4a7005b9-4729-48ba-95ac-7234d402d796", "value": 64000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465168, "uuid": "bc3bfc59-2678-4052-9f3d-710049c26a01", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0eb2bdab-3195-11f1-bc00-82aee05be84a", "comment": "Malware payload (VioletWorm)", "timestamp": 1775465169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465169, "uuid": "6534beab-1e36-4f7e-9296-12fda301edc2", "comment": "Malware payload (VioletWorm)", "value": "6f7e59caac24659e23967807586dbce5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465169, "uuid": "9cc1e750-ca8c-479e-988e-cac2d8f2c274", "comment": "Malware payload (VioletWorm)", "value": "a961ce0314f78900f26aec189234ac71e497487b35c1a4a604bf384e911f3e00", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465169, "uuid": "30af937a-698b-425c-9910-221736bce375", "value": "T1A953B6C536778872D27FAE7AE6C7624B6DB54073A901D5850CD277D32A02F82C90AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465169, "uuid": "26ae3c2c-baa2-44cd-80d3-d1634d2ca51b", "value": "768:yhQXs5Bx2EOwnynaPRqQYE9fxD9bx22kyxmmzKFPrsk:Q+sR2ELnynoBx9f99bx2269jZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775465169, "uuid": "6bfd59e1-ed88-46f6-928b-b04403b3d76e", "value": 64000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465169, "uuid": "d98baf0a-0c0b-4d0c-9592-a3a2d7af4d0c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f2adb22-3195-11f1-bc00-82aee05be84a", "comment": "Malware payload (VioletWorm)", "timestamp": 1775465169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465169, "uuid": "1645b300-922d-4a81-9d5b-abd68679ebbc", "comment": "Malware payload (VioletWorm)", "value": "3c28a5dd2cf5d5f0f4e24f6437fe70da", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465169, "uuid": "d6a8e9c6-881e-4e78-a8c4-140e4d443310", "comment": "Malware payload (VioletWorm)", "value": "b69c825f72a6a7630a356a90f5a4ca044960c475964a75d7c743ac0466dd81b4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465169, "uuid": "ec2bf7aa-bd27-453d-b360-0812ac2a571c", "value": "T12A53D5D532778872D27FAE7AE6C7224B6DB54173A801D5460CD276D36B02F82C90AC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465169, "uuid": "502d94e2-1ae4-4c11-b3d1-0dc3f48ae912", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465169, "uuid": "5f838f0a-e11a-4d0f-86bc-0e52c3ffa626", "value": "768:XhQXs5Bx2EOwnyna+NIA/MVtR8E9b5sMoe96aPN+mhBCZrsMV:R+sR2ELnynH5/MVtRp9b5s1aF9M5V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775465169, "uuid": "f0076c0c-d892-47e9-a238-d50eb73eb7cb", "value": 64512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465169, "uuid": "74fa2576-bf0c-449c-a887-8fa82411d4fd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33e5fe6b-3196-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775465661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465661, "uuid": "01266cc1-2572-49cd-8681-90462aa04e94", "comment": "Malware payload (Mirai)", "value": "fdee2e7a8df81115812c67a68a21bddf", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465661, "uuid": "134ab918-f4be-4ab4-82f3-15d8c8863f7e", "comment": "Malware payload (Mirai)", "value": "498eb3260c37e6b39480ddc2c3aa0899065b99a75d587ab81e8be8d6045bae15", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465661, "uuid": "b110f7be-2e1d-4ae0-bf6f-8ff7a7a28199", "value": "T1EE64F1CAEF11BD3AE9C006757A9B074DB3B59B99C3C3F150F190C62E39A9185AF660", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465661, "uuid": "59fc2a32-e87b-4658-9674-fd7dd93b7e4f", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xiohKqqwPa5POdOQ33Q:p3lOYoaja8xzx/0wsxzSi4KqqfPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775465661, "uuid": "c1b02145-4352-4b76-83c1-58d60a215504", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465661, "uuid": "0b4107b7-e8c2-49b1-a546-5837cd764eca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2fe82c1-319c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775468451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775468451, "uuid": "052b4aa6-b8ca-4990-90ed-7c437e432c5c", "comment": "Malware payload (Mirai)", "value": "1dad357b98b1d1eefc6ec53b4ef7e442", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775468451, "uuid": "f76fda24-9054-46cf-8b2f-a461ebfb0692", "comment": "Malware payload (Mirai)", "value": "013a9df9d9c613502088ecd92a4998992bb14027989b044752f45243b73366d7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775468451, "uuid": "7986857d-3637-4b56-8356-93592ebf8ae7", "value": "T193533B99F4029E3DF88FE9BA84160E05B93023D112931B2767ABFDE37D331659D12E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775468451, "uuid": "122c63ba-9819-40ab-92ee-1bc11aecec88", "value": "768:me4gpsM204GEkRbjveXd/nQi122EQtBSv3gFHn1eu48B8vB6J7EzNfXQuJpozfyC:mo3EkRbDmoiz6IFn1X48B2SEzNfAuJ3C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775468451, "uuid": "046f77b1-e935-4166-85db-647832da561b", "value": 65100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775468451, "uuid": "7fd103cd-e4a1-4a2a-b4dc-86854cd1b042", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6f2f808-319d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775468887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775468887, "uuid": "25e9d6ad-f79c-40aa-aebe-227f22188ac4", "comment": "Malware payload", "value": "c89abb6cfb2c32f2adfc7f6d8dd7db08", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775468887, "uuid": "fd443395-2ef6-4729-8225-a51e075682c6", "comment": "Malware payload", "value": "aaae6ae582311c1ff8aa36ac42a2fd3a21f6edf179f3333eab23026b17fa33f9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775468887, "uuid": "703453c9-2963-4a82-be9e-e3f2e5635fe8", "value": "T17B7394B13D8B2C2A210F029FA057321CA4D6CEE0E513A5E8F1FF912867F5DD176976", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775468887, "uuid": "98c38e46-f138-46b1-9186-1fc1cf1e907e", "value": "1536:GdNKuu59f5spVEc9lGzvEQYM1tAZa/dP+3mT6j:g09f5sptkzvEQYM1tAZa/dPCU6j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775468887, "uuid": "f935d7f2-0356-486d-bacf-4474dc37a645", "value": 77345, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775468887, "uuid": "4f1649fe-68f2-4baa-a8f1-8bf4c349fdbe", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c67d9ec3-319d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775468913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775468913, "uuid": "056d1259-b2a6-487e-bb00-d78f5cb7a621", "comment": "Malware payload", "value": "2cf6fa21589ce583b0c5dfc19893101b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775468913, "uuid": "4035b20b-6be5-439c-95f8-8af2a2c20225", "comment": "Malware payload", "value": "9e9afdf9f21bc4b630a9f9f3ccefbf544321478d90e448094954270c18076742", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775468913, "uuid": "98364fe5-0711-4684-844e-ae695c448848", "value": "T1FE04E0A3330046B76D76899B7B194CDD407DBF5003E0A0F6F6AB6CA2D0B4B56D2E46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775468913, "uuid": "2cb9f820-0526-4b2f-95df-0ffb5915a4f0", "value": "3072:5MBVwHeSM5eF5oDE75hr+/kpJ2KEOBKXuf0rXuGbXtC0:5Mji9v+aJ/BK6Gn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775468913, "uuid": "5e7b4632-395f-4380-9b28-19a447dea541", "value": 175209, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775468913, "uuid": "cc64b910-d764-46e6-b773-94744b2731c7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2467008-319d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775468986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775468986, "uuid": "e475b974-9f19-4d8c-b1aa-29e337e1b578", "comment": "Malware payload (Mirai)", "value": "dd890740b91b2c47c356187145d7f671", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775468986, "uuid": "efa6820e-436c-426d-85fb-83b4da2af3d4", "comment": "Malware payload (Mirai)", "value": "fc9bc615e35ce0b9131b78edb048857a545caa49f9a301cf3aa93aa21f206db4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775468986, "uuid": "af0cffc3-f366-4560-a702-f7219d1010ef", "value": "T1ACD2E17C7B0148D7CA6AA1744EE50B262D608F72F1525C077699EAD7BB0A8AC3CA5D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775468986, "uuid": "00cf8152-1945-4970-8bc1-d299b3798e86", "value": "768:I4ylAtv6pqLJM0RXaxGyUbXtheU/SmbJgGlzDpbuR1Jo:DMBqTRXa+Zhr/BRVJuS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775468986, "uuid": "80823755-0bea-4519-bbc5-7a5a6d29a2c3", "value": 28900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775468986, "uuid": "3c23317c-a40d-416c-b4b5-3478ebdc6cf8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65e8bfa9-319e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775469180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775469180, "uuid": "c02a3872-ff19-41ad-9630-e0d381ae7a59", "comment": "Malware payload (Mirai)", "value": "7cb9d837a4bdc1c29f33c915adb178c2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775469180, "uuid": "f6a9adfd-332c-49a2-8471-e5d25b3f6e09", "comment": "Malware payload (Mirai)", "value": "fc50bf0946eec1adc3e325eed052e8a96c0d49373fa2bb3c2c56a713e83e72ea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775469180, "uuid": "d9419af6-55c4-40ef-8c87-f584824c0bb3", "value": "T179C2C0721AEF39B0C2A430BAEC7886D7511F4AB965F16521324056A1DEE200362BA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775469180, "uuid": "ca11c8e4-abca-477c-a82c-21921bda34fa", "value": "384:8WXNSIfjdxuZ1DUofVOyPqMvt6GqAAdq1K0jzNH7EUz6z6RNo9chH+hymdGUop56:pjKX9vt6GqA3Q0jzV7EUyUq9e+s3Uoz6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775469180, "uuid": "39b4a5e5-40ee-4839-883d-5476ca7f14c3", "value": 27336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775469180, "uuid": "963de153-2d2b-409f-ac34-0a42868288ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00410235-319f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775469439, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775469439, "uuid": "583a0e69-e831-4b32-a951-f43990860c72", "comment": "Malware payload (Mirai)", "value": "5ae1b4dc381707f53f81881703b155bb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775469439, "uuid": "db76c373-8820-48d2-a7c4-70cf11dd8f7f", "comment": "Malware payload (Mirai)", "value": "60d1fa2e7c615f5835aca9442cb530c497259eb617a900501af691e6bad39981", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775469439, "uuid": "23ce6015-9bb6-4978-8f28-af9e97fa33b7", "value": "T1B3C2E16360BACE13C8F283776D3C15A621645434A34DDD2D33699BC937470D4657AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775469439, "uuid": "6e6044dc-81f5-4e52-8bec-5a0a6c5b5c88", "value": "768:+5+Kcrb9VDJee2KTgdTHOBcK5ZCAySVbnF:xlrb9veKTg9QB5Vx5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775469439, "uuid": "6da86fee-853c-431c-8297-490e2ff52457", "value": 27704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775469439, "uuid": "2962fd9e-598f-4b4b-a073-c3dd4fac75d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c009f7c-319f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775469513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775469513, "uuid": "62d23ddf-a1d8-40c2-b057-2b0cecfa9410", "comment": "Malware payload (Mirai)", "value": "8aadda9593a3070380a8f7e7bd935471", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775469513, "uuid": "1d38322a-73db-4e50-b799-511e855266d2", "comment": "Malware payload (Mirai)", "value": "6df7b1baf184b2f4f0d52bc5413b11dfb5b6949bd7f6a14864d767f4ce95aa30", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775469513, "uuid": "ad5446e7-4930-437f-add0-64254de55e79", "value": "T184B2DF34B1A9A4F0CD316434F97EC987ABDA01FE90FD3721226750F85A568CD15A8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775469513, "uuid": "4812bdaf-f6a2-478b-96a7-a970e046572f", "value": "384:osoBE5aNSS75BOI+ypZ5vTlYIwcvsdTf5MF1iAUgefoeDYbZXGcH1JhymdGUop5R:ocaNSq5sOHpTqncvsdDePiAUgefoeDey", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775469513, "uuid": "e7426172-babc-4c00-914e-7e632ed6067c", "value": 23736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775469513, "uuid": "b6182ee7-c3d8-459b-93cd-45b52ea720dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94635eb6-3106-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775469581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775469581, "uuid": "46293dff-3f4d-49c3-a587-f76cebf29003", "comment": "Malware payload", "value": "7abff55bf8ff0075afb3a3ff2ad9d7f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775469581, "uuid": "6e70a010-9dc6-40e1-8148-7cb059b7305b", "comment": "Malware payload", "value": "b67cd5f540094b7a2dea1ba92f3ac7a3c0ecfe67975ed947a1203cefe41f3a42", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775469581, "uuid": "df38f730-5b70-4746-b878-ec40a88b3d6a", "value": "T17006338D0C1D9FE2D2888BDD3B6E33E25AD039B15DE4102C2E8D99D745B9CE787963", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775469581, "uuid": "4446004e-8bba-4966-8b5d-e960f235f145", "value": "98304:z7oBJ0g8+4sObL8hr+gH2plIeaSv0ou8XRct8ipc:3o70g8vPE2Gp8K6l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775469581, "uuid": "9b01cedb-6769-46fa-99eb-e7d23ca70871", "value": 3722808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775469581, "uuid": "e752e744-9437-46b2-8317-a817a3b30854", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2739d420-31a2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775470793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775470793, "uuid": "2dc9b834-12ec-4ae2-8c12-7ec4d3e85131", "comment": "Malware payload (Mirai)", "value": "4f60ce7b579bd69bb0eb96f6be78cb3a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775470793, "uuid": "1f3f6658-c3e8-46c7-a178-15fa863bce01", "comment": "Malware payload (Mirai)", "value": "8a710e0eac0685bbe1f9f95d63c1406d0de530d44170c115dce6af02380d4102", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775470793, "uuid": "7a9efa49-d519-43f5-b16c-645b9eaf6f55", "value": "T1EE538D75D12DAEA8C0414AB4A9198E704F13E4C046733EF7EA9587A68443DBCF858F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775470793, "uuid": "c12487af-438e-4034-a34f-b5a52208dec7", "value": "1536:ragXV1f1Fl/wtknCPQauiufs3Ii3O/qyD6EZeCc:r57f1b/0QHf+Iey6EZe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775470793, "uuid": "8aa41fc3-71a9-4cf5-b772-53c87b45da1c", "value": 63480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775470793, "uuid": "329d0ec3-b8e4-4c6c-b093-e5678fea55fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66ad164e-31a2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775470900, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775470900, "uuid": "e3fb50d1-01dd-4864-9e51-44d6623ae9fe", "comment": "Malware payload (Mirai)", "value": "33c3a13ca947e6b1fbd059a45305144d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775470900, "uuid": "1291ed05-a09a-47af-a17d-288293ef0a1c", "comment": "Malware payload (Mirai)", "value": "3a6bbae2e93670400b2a39e59c16e7fcace3d72a70c319cebd1bf1c858eb9c3f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775470900, "uuid": "075a1350-57d3-49e6-b37f-74417fb5fd02", "value": "T160731883FD81A603D6D4127ABA5E518D33256398E2DE3203ED126F203BCAD5F0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775470900, "uuid": "c5ad7c2b-c15c-48c2-8b2c-cd6e7ccf3417", "value": "1536:t45wQcg8w2+n5Lq1VeoJvAuKXHNWyoVaVvxkIQjGjzmZA6WMFPJ:t45wQ78pFvAzXHkOJkFjmoF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775470900, "uuid": "9e5dacb5-0169-4d36-8c5c-a86e32245a7b", "value": 75276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775470900, "uuid": "a72e4c92-1cb0-4768-a996-fc9f1226f424", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c9b880e-31a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775471178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471178, "uuid": "c76246c5-1937-4dda-8a58-b97deeaa689c", "comment": "Malware payload (Mirai)", "value": "cfe940fd23724a1761bf20a4fea0fa33", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471178, "uuid": "f9a810ef-ca1b-4e22-bb49-3e5bae69a4d8", "comment": "Malware payload (Mirai)", "value": "1a85f3fb20e23e4b220afb2c2c3a3dce30c71af30e1bb890c80975807f1382ab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471178, "uuid": "8297a03e-58d9-4d90-9e48-7031701c3f11", "value": "T19F734B213A352E17C4E5A07D61EB4722B2F9374D24B4CA1F7E722E8EBF1452071176", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471178, "uuid": "938037c0-6c8f-4fb0-85af-0fc292966537", "value": "1536:kLwVD05xZXjFZBc9wyMOTEwPjjqlbCioh1aStftMpdYm+a:sc975WMirSf2v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775471178, "uuid": "838ebb1d-a36e-45d3-9296-86459af3e08b", "value": 79128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471178, "uuid": "a95a6337-d43a-4414-a0a4-beb8617a8b8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45eed6b8-31a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775471274, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471274, "uuid": "397fdcba-8aa6-4473-873b-550c1a07be4c", "comment": "Malware payload (Mirai)", "value": "577d58288a6410a903d31d940939234e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471274, "uuid": "9ce0d32c-b799-450c-a377-5d8cb71f4137", "comment": "Malware payload (Mirai)", "value": "39138d2dfdf1402d7e705c643804bd7238a597c3ae79927d8c0900fdfa33caf8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471274, "uuid": "6440c4bd-396c-4671-a86d-41108d1e2023", "value": "T180634BC9E683D9F9EC1509712577FB3287B7E13A2168DD9BC79869328C82A01F5062", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471274, "uuid": "f97e3a28-590d-48cc-a271-00397f7e8800", "value": "1536:Z5/LEmGCsOrSHG+h7an9DHsMJe0QsoNIDnCV3Oau68atCK:ZZ9GxOrSHXK9zsMJe0yeTie0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775471274, "uuid": "b688f000-249c-43a4-a054-d2c09bbdd9c6", "value": 67092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471274, "uuid": "ce25ddb6-f3e1-442f-b7fd-35d01c7f8817", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a2c30a6-31a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775471308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471308, "uuid": "b4c598d2-d526-464c-9225-d50c512730cf", "comment": "Malware payload (Mirai)", "value": "bb316f4b4dd69a9d32faf0a5cfb47f5c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471308, "uuid": "764222de-05fd-4d5f-b6b3-bc9bd5af3ccf", "comment": "Malware payload (Mirai)", "value": "a8e78b25da2bfcb1437fd740e8fa05f6d151dfeaa58615e03c51ad590702c5e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471308, "uuid": "4b38320b-183e-412d-9c4c-9f5ead1bc8dc", "value": "T1D4732A26B97A1E26C0D4B57E60FB8B11F5E1278E26B4C50A7D720E5EEF147006502E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471308, "uuid": "b901ec47-8e49-4c0c-b6a5-3c1cede5b5fb", "value": "1536:hD/B6f6UD5hAS7mo0DCCAXpSKV6v3G78nN9Wf:927jqCt8v3GI/0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775471308, "uuid": "5b6a5bb9-bd1c-4fd3-a0b1-4bc504d7b256", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471308, "uuid": "b87394df-6cac-470c-b3e8-7c202f54f529", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7a5d04c-31a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775471492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471492, "uuid": "efc1df70-09a4-436f-afb2-06f5c7521a73", "comment": "Malware payload (Mirai)", "value": "b1af58c923f4205a18bc15179625358b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471492, "uuid": "1ddb0069-9aab-4b3a-b951-125bf2e239fe", "comment": "Malware payload (Mirai)", "value": "fafc2152e9f17e9aa6014b10c18aa58b31ba2e7c125dc31530a7fef4878d80eb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471492, "uuid": "42475739-b50b-4c90-a5ae-417f05727df9", "value": "T170732B85F9CB81F5C91B487090E6F23FCB31D9668170996DEF995F31DA77A02A2132", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471492, "uuid": "9927afcd-922a-4981-86ff-6304abdaa595", "value": "1536:Ab8vIjJtrsF5yp6kmVur5G/x19KedHEvqqk6u689:Ab8QjDrg5yp6kmMrE/b9vevqV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775471492, "uuid": "68ec315c-3ead-4e5e-b805-f3eb5fb25bb9", "value": 74324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471492, "uuid": "bfdcf0b7-97e2-4154-b6b8-9984fb17f13e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3adc74b3-31a4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775471685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471685, "uuid": "38f7a3ae-7b5c-4897-bd26-bc848fc96bd0", "comment": "Malware payload (Mirai)", "value": "0406cc14ec98d75ade02275585dcdd05", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471685, "uuid": "8dfecf2d-db53-40c7-b248-2e421b1af9c3", "comment": "Malware payload (Mirai)", "value": "6dd0cd91a681d76ee1ab8e3dfc695cfb73db2c1590e2e5584ae0a99a16e795d2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471685, "uuid": "111ed814-d40f-42d1-9c47-b76cbdbe7dbc", "value": "T175634A0177580A03C16659B42C3F23D583FBEED122F4BA896D0F9A4A81B4E772459F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471685, "uuid": "8996a190-8aa9-4cb7-a0a9-e4c637b1fc4f", "value": "1536:WQQ82elcOc8Gdza3gJw/8Xx6JouijO2aZG5k63ZA6WbFTVL:5Qcj3gJ3s16OlG5t4Fd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775471685, "uuid": "afffd299-7b6c-4ec6-a3b4-3e2fe7524733", "value": 71708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471685, "uuid": "009dac19-f455-4ede-b623-88a01631fd6f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8614d396-31a4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775471811, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471811, "uuid": "bc85907a-8f3e-4dc1-b7db-7dcd0d4cb982", "comment": "Malware payload (Mirai)", "value": "dc7815a1338a8643665514638bf38c9f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471811, "uuid": "34809071-6ef4-43b0-8d87-09b19b3e0037", "comment": "Malware payload (Mirai)", "value": "5fe862862d9c7e5ebd5764531a0337b459a60e745990f66712d69cecf3bc4c97", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471811, "uuid": "bc066188-bc92-49a3-b2c4-4c1245d8e0ab", "value": "T18EF32A46FB418E03C4D61775BA9F42493322A755E3DB73068D18BFB43F8AA9E0E276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471811, "uuid": "c5201a12-96cb-41c1-8024-896539de85a2", "value": "3072:HZMFFkdzVC+myqnRRexHURlQKwxvVZFmT5NmM/9NuOFfmZwLYWPv:HGFFkTC+WRexHURGKw9QT5IM/9NuAmZI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775471811, "uuid": "7e0d435e-dad6-49b0-b6a1-6497d5e1c929", "value": 157648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471811, "uuid": "b49d7f2e-eed4-4fab-9602-c8e36da04a7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6be370e-31a4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775471974, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471974, "uuid": "a5b42776-9049-4dfc-90e8-3b6d6d086347", "comment": "Malware payload (Mirai)", "value": "927d066238334b5727d5e53791af4e68", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471974, "uuid": "cf7e5d94-f9e3-43e6-9391-9fbdcc8086a9", "comment": "Malware payload (Mirai)", "value": "47d7b7f44920c232a29b73f0ff4bce9879bcb82454756613c305f31ec494d2b2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471974, "uuid": "bc3175aa-f249-436c-b7bf-40a333ed31f6", "value": "T15E734B86F401DEBCF81FD6FA81114A0EF92162455E430F26E7A7FD936DB20A44D67E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471974, "uuid": "19b2674f-657a-426a-9926-253c7485d158", "value": "1536:rIkt4iS4L4l+yICDc5VGNM3kwpToc8nxKspU7AWTA6ZZ4wi:rIkt4X4L4l+yICDc5x3kwpUylTAIZI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775471974, "uuid": "867c3f9d-13e6-4771-b15d-dfaa56cf21c7", "value": 73880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471974, "uuid": "4c8885d0-7dad-48c1-8661-11f3d73848fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "906c4795-31a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775472688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775472688, "uuid": "c77294a5-983b-4adc-9916-01969d6a9801", "comment": "Malware payload (Mirai)", "value": "8a07ad5cdf87df04c16ce52c9254f05a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775472688, "uuid": "38039ead-08d5-42b8-8521-ee3328b45e97", "comment": "Malware payload (Mirai)", "value": "b0a093dd32a647419414cfde1f9585b8f0c5768261ec8b907e3d587af4871beb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775472688, "uuid": "e2e145e7-5b11-42d9-a33b-9a72615ef037", "value": "T125E2E1D559B7A479CE710DBAFC774B4E252EC5FC85FB102267F4372423B09964AB04", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775472688, "uuid": "91e41f2a-a8e8-4619-99f0-1b566c43177b", "value": "768:q8Lm6COq1fewdHy62pud4yNOYSOyB8LrtHMg9q3UELdm:zLJCmjpkcMKUBKLs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775472688, "uuid": "10f7a2eb-70dc-4362-9c0d-36247d5cba02", "value": 31864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775472688, "uuid": "4fc2547d-ab8c-40f8-b462-000af0ec78c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c27277ec-31a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775472772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775472772, "uuid": "8a2dd831-f25e-418f-a14f-fdd2b74cb336", "comment": "Malware payload (Mirai)", "value": "ac4d36edceeae91b59227624efbd8b9c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775472772, "uuid": "9505918e-a0f2-4ee6-b31f-0a055467c3f8", "comment": "Malware payload (Mirai)", "value": "491ca52fe6e0f4c8cb262237617e4e43aaf2ce74d3ed13cbf959bd48192466fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775472772, "uuid": "99997f7e-89a9-4c0e-a706-364cb8430c12", "value": "T1ADD2D07EE5B441C6ED8E0C3E80CD3BA10E56D1C1631BDB9577218C895B32C5BF16A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775472772, "uuid": "e974056c-3f1d-4f19-ae93-248f1f718bda", "value": "384:e8pVWtmRsLYEpB6V8S628FuRUuNJG9whQ3Cfbo6w+K95orj9+yrjRWGVCz0Nv+:jMYHb62x4ahQ3CfdwLjc+ytWn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775472772, "uuid": "c6f12a06-90d7-4533-a04a-a84c2822ee7f", "value": 29944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775472772, "uuid": "d9f83785-0564-4869-9ac9-fcc2dfceca2b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c50557e6-31a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775472776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775472776, "uuid": "d396a7f7-e85f-487a-ad04-06ce8b99b43b", "comment": "Malware payload (Mirai)", "value": "2446f5f899d7de7046648b89fdfc6606", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775472776, "uuid": "afd9c241-59c3-4868-82a1-38fc62e8c9f1", "comment": "Malware payload (Mirai)", "value": "f65913e8c72670f4d31ed01c2531807590d79800090a6c7ce7c4f1906fdf083f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775472776, "uuid": "5bd4e2f9-ecf4-4ce5-92ad-fcbf8b6394d5", "value": "T120330113B714BDA3DE761D39A2F94D8A3148025ED0ECA82235C859B162D315BFBD54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775472776, "uuid": "195afabd-de93-42f9-bf6b-ba97084fa8c2", "value": "768:JfZYvZxNZ/SPjiUv0w0zyIvfgJy2LHRfbZlQJMNZ9q3UEL2qEK5J6OAsNTGjf2tN:KPtQjiZVcykHRDZfML15J6RN2tA+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775472776, "uuid": "80e0083c-8f33-4b8c-a48c-765dde80bf4b", "value": 51432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775472776, "uuid": "78836324-4582-4988-a0c2-0bea156a8548", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cf1ed5c-31a7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775473085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473085, "uuid": "08a17813-f0f1-4765-aeea-7feed390e1e0", "comment": "Malware payload (Mirai)", "value": "f43fc69d3c34984dc4fc8d68fcf28646", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473085, "uuid": "53698761-deb3-40f0-8189-53ad2349c9ef", "comment": "Malware payload (Mirai)", "value": "730bfc0f4b716727ef48345cf4cdf51cabf8f96eca0c90d9b4acb2e4f9e71ffd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473085, "uuid": "3a271ea8-682d-4395-b4d8-4f0c4b2d9517", "value": "T1AC837DCAEB87C6F0DD4109F0113BFB3599329C312124DDABDBD4BE639DA2A42A0562", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473085, "uuid": "5fd3d7e8-df55-463c-a019-5faa4f280d4a", "value": "1536:1KoFfhazMU6ozOhs7kSYgAQUW31EJrGYdUru682KrL:1KuIYNoyhs7fiYKxNFL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775473085, "uuid": "c90608bc-65d4-4c0a-8982-6fcef7aec541", "value": 87036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473085, "uuid": "5984308a-4071-4299-9ffb-e582987afee2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ece8950-31a7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775473141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473141, "uuid": "3b20261f-e8e6-451d-bd82-910c218f8bd7", "comment": "Malware payload (Mirai)", "value": "5d41eb82780153e89836819d280714c8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473141, "uuid": "b38ad9aa-40ba-4067-82bb-f73643ab6fce", "comment": "Malware payload (Mirai)", "value": "d3047ff521542e77f8206ddde6af450fe760bb782646dbc4ee22ace6f0c72d37", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473141, "uuid": "6f5aef25-5dc1-4771-9579-3b04109e1bf0", "value": "T109734C0BBD4880FDC159D53C83BEB53AC56770BD1139B2EB2BD8BE271D46E612A1C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473141, "uuid": "6908744a-a517-4ca4-8e5e-efef136c4a97", "value": "1536:7YSDIfasSohWyrHsxz0Wjv7U1maJYf4pdcmmDQzHvYaXua84+:NGBSoEssxAcUgaJq4pdODQzHvYaO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775473141, "uuid": "81195852-530f-4586-bf1c-0ce17c179410", "value": 76016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473141, "uuid": "18c3cb64-0cd5-4bbc-9327-528dbd2cc6cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abcc792a-31a7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775473163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473163, "uuid": "e10b023e-9005-497d-a11c-bbe9953f065f", "comment": "Malware payload (Mirai)", "value": "55f76754cbceffd84e07762898f05084", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473163, "uuid": "c3cb6952-0fbf-49f0-9cba-212b46fc887f", "comment": "Malware payload (Mirai)", "value": "0b84ee93a149cdeb2e076163df4e5e2b15fab53ae843b976aa47e0b4db3b1d82", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473163, "uuid": "46e7bb01-45be-4a60-95cf-627147cea6aa", "value": "T11A735B21B97D1D27C4D4E17A22B78B66B2F6120F14A88B2E7E720FCEFF515C06A165", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473163, "uuid": "3ebfac4d-60d2-456a-88fd-8d4f21350e46", "value": "1536:cDcMXfZcx8/5msC87jBrnua+9CJEia2NAAZWaW5NkJ:Ob6U5meBrzf1NAa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775473163, "uuid": "e74d6e4a-4669-437d-806a-b9d2a84194cf", "value": 78480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473163, "uuid": "e5a8628e-2844-4f6b-bdf7-f9a422771759", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff6a0558-31a7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775473303, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473303, "uuid": "15b6df81-56a7-4366-96f6-a90cb4dda9fd", "comment": "Malware payload", "value": "a4d12509cecc228dd3ef1e1df51ca3b4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473303, "uuid": "73ce66f8-3014-4f98-a4b0-19aada76ef9f", "comment": "Malware payload", "value": "164089a74046fc09a4e6c9fa1c0b1434b51cca521f80c81773af59ad42f0cb05", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473303, "uuid": "56d40295-d803-486b-b0bd-ffd472e4d3f1", "value": "T1BC32B53261A062363217C4D1ADD6639FB1B1D807D9074284BAFD41EC8FDAADB87376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473303, "uuid": "be372881-f258-4e0f-8189-9f36f7e30c87", "value": "192:d1O6I9QmPuAPQWaMV0QeEedTjRJOzAbGnspDHJiqvBVRlzgla8Djn1ciIJ7:deQmGAPQWab91rn2qvPRZgl9Djn1c7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775473303, "uuid": "af0725a2-dbfe-432b-a693-4740329c0e69", "value": 11841, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473303, "uuid": "b63cb562-a189-45c4-89d7-0ee3df498373", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e20246d-31a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775473328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473328, "uuid": "10411791-1de3-4d97-8cd2-0abf5cd66d48", "comment": "Malware payload (Mirai)", "value": "f657466d7d0a472c21770a50c8f8bbfe", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473328, "uuid": "a6b638dc-601c-4f0a-b1cc-0aa00f2c21c2", "comment": "Malware payload (Mirai)", "value": "d34b56584b96b5989297ff866631eb6b544d9a3ca3a24f388d0c3b24b19ef437", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473328, "uuid": "581a164c-4f6b-44a1-b14e-936164eb5454", "value": "T1E663AE66E4952EF4C14445B071B8CEF90B13A905E6A62FF055D2CBA7844BFECB6093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473328, "uuid": "4d3e9fcd-7e2c-420e-95bb-475e70ce39e7", "value": "768:9uW3wSBIgyMqddTkFCuQIU7C80PwJ1qYJqRoioS/iB+CaaZA6W30Fn79b:RgD80sCKUGwuY0QSW+CaaZA6WkF79", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775473328, "uuid": "baccf791-236c-4ea2-93e9-18a28940c199", "value": 71236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473328, "uuid": "3bf95be3-207e-4a6d-b880-5a6c5b6c8768", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "258a5f41-31a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775473367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473367, "uuid": "4d50d2d6-2fdb-40f2-97a9-f8822bb545ef", "comment": "Malware payload (Mirai)", "value": "07edcabdb6729e42a8e98189788ff122", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473367, "uuid": "fe7c1dbb-2207-443a-86a1-ee5e7a3787df", "comment": "Malware payload (Mirai)", "value": "64a1e15aac8d795285e01b74b73f7e25c79041efb8159c029ea93fcdccc8456b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473367, "uuid": "cfc0feaa-c9c1-4fbf-b790-cd03a0493230", "value": "T1C8A3520D7E328F7CFAAD863493B74F259248379532D2C589D2ACE6112D6010E746FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473367, "uuid": "0cf54090-6cd8-458f-99ce-41fb4ecb726e", "value": "1536:jJQxUAaXuMn3v2NDaTmiI2B73KiwwWfz94Q1OKZeDrBXZSClwG7qg8naFvBX3TZU:CxUAarKiqfz6QoZSClwG7pqaFvBHTFE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775473367, "uuid": "5c061780-a766-43a3-a6c0-49ec22962759", "value": 99060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473367, "uuid": "12bd23f6-0162-4707-beda-c5e773c60c03", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff5b8185-31a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775473733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473733, "uuid": "0b0ed419-3664-4b0b-98cc-75b7a9b7c9b3", "comment": "Malware payload (Mirai)", "value": "4ec05f4e14c97c9af6bd19959c68190e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473733, "uuid": "5c04742b-c7d5-4a07-872a-ef3f3a891fe9", "comment": "Malware payload (Mirai)", "value": "0ff27d4e151d2d6ebd26a50450bbac584d8fd79953e1bebefe947d32de7a761a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473733, "uuid": "ff6e8dce-5250-41bf-a43e-ad58779e44ab", "value": "T155733983FD81AA03E6D41376BA5E51CD33217399E2DE3203AD126F217ACA91F0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473733, "uuid": "ef755782-604c-4790-a138-92dc6819c5ff", "value": "1536:5fgirL3sZ0njeacF9nWRtV0AsRuc1gNQZA6WWFKQ:5fgGLFa1WqAsRPSNMF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775473733, "uuid": "371af797-de48-4e70-8fef-1d62fd802bcd", "value": 75276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473733, "uuid": "37ed40e6-ae0a-4d3c-abb8-67c46e8d6edb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1004de96-31aa-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775474190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775474190, "uuid": "2e16a5b6-952f-4339-87da-d6a8f4d077e9", "comment": "Malware payload (Mirai)", "value": "0f614c0cf2ec8d568c035902927069af", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775474190, "uuid": "b9be95c1-e994-405c-8597-41508516c8f7", "comment": "Malware payload (Mirai)", "value": "156ed8a333c8d51ab3c140a2c03bcb0c809d6948dd46aba73d1c33f0c8fc803f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775474190, "uuid": "7e08d5ed-c89c-40ee-86f7-cace0a6e122d", "value": "T1A2C2D070F9C16DB5DEFE9D38881189D03BE62F5937E2CC9A208DED155112D36D6A8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775474190, "uuid": "ebe79d01-f8ad-415f-94d5-a70f73a91aaf", "value": "768:7KnqLiChP7gI5gBZw+LajRJ44uVcqgw09o:7KqL1h4Zwa6344u+qgw09o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775474190, "uuid": "09119b24-e474-4205-af7a-9cb6982900ab", "value": 26224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775474190, "uuid": "4114a203-654b-416e-bdb6-f7bfb13b7e4a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39fa5266-31aa-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775474261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775474261, "uuid": "0c22db5f-a4d5-4937-a5aa-c69d0c735aac", "comment": "Malware payload (Mirai)", "value": "d575a6a8ec6f1a836067c219b99fddbf", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775474261, "uuid": "086ed612-21d7-4309-add7-4974cad1c113", "comment": "Malware payload (Mirai)", "value": "e84d5b7d9ff1d785eea06f2e691faf47193bd8e5c3ef210f203a1e329f49fba8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775474261, "uuid": "f944dce0-4942-49ad-bae5-93615224e094", "value": "T121A307B41885F2ACE9B450B5F40321E5255206183FEDD2E368C366BBFEB4749716EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775474261, "uuid": "e46b553a-c1d3-44c4-b043-3f415001a132", "value": "1536:vYkGLT4FRTcizGCE3uHLRHiyB4VBIVCCfy0K9FTZZGAW7CJ:OT4FaizhE3kLeuKTU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775474261, "uuid": "fa5f5e43-fd73-4693-a3b6-3f247efa2441", "value": 100220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775474261, "uuid": "4897fc4f-42f9-4b41-b3af-e439342f14ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d84289b5-31ab-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775474956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775474956, "uuid": "68ac7f0d-d58f-4457-870b-4c018fdd69ae", "comment": "Malware payload", "value": "03b406a4944423679b5a27a03c7b881c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775474956, "uuid": "f5829136-1909-4f80-8376-56612b1e7ec2", "comment": "Malware payload", "value": "6321164175fec40b89af43d0c3d3cfaf7be12ee07fcdf35bc514c707815436ae", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775474956, "uuid": "6765a97f-a1af-44d9-8704-29b242730e65", "value": "T1BA373324E7B811BBF5E7B2B69B55CD22D768BD943310D3CF1B84A2D90E1B0D00A5EA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775474956, "uuid": "e38e69da-7ec7-437b-a9e5-5578c701a341", "value": "2057790ae7855765d51bdc4142e62f9c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775474956, "uuid": "3788b855-5f1c-4e8c-a6ed-24ec8ed6981d", "value": "393216:QbtzNqQgXFk1Tz7HuPXBbMMTjv8/SGp37JsaNdKK9tkZkfIp8QMTjv8/ShemsIgX:QJYtFkJudobn7iy6CIpF4ZsI1q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775474956, "uuid": "4d8eacd2-98f6-4c8b-a250-e5a551203bab", "value": 23788916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775474956, "uuid": "a08c8d14-928c-4282-8d2e-b46bcd99bf84", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "468ee87a-31c4-11f1-bc00-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1775485449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485449, "uuid": "02204ac4-5d10-49b1-98fc-3ddf7aa53990", "comment": "Malware payload (NetSupport)", "value": "f1955ca2476c0e812a0bd2b6af5dd8a4", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485449, "uuid": "6e7c113e-42a7-455c-9b8c-8628fbc65f41", "comment": "Malware payload (NetSupport)", "value": "00e8f28233776a2ebe59cd547694b83012d5d9697a5f021a7b6e7e9aa9553922", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485449, "uuid": "ae9b4b70-5c41-4c87-8cf3-0fbacee73b78", "value": "T15B967CB88B84975EAE6E1A07E078571E67F37F26D09271FC5B62370B216FC086639C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485449, "uuid": "c1d8da16-b1d7-4c38-967b-8fb0963b52e3", "value": "49152:a3a7k1IvGaA1UzZfjTlGDRISMvSQpV9xwSjEZV7Vu2zAxN9yDt:G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775485449, "uuid": "b6c7b50b-e9a1-4e24-8090-165c73c95f51", "value": 9410827, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485449, "uuid": "61947837-70aa-4395-a7a3-64d2aaf62b12", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48b62c4d-31c4-11f1-bc00-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1775485452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485452, "uuid": "5d4961e8-bb80-4f9f-a646-2c3f116c8e45", "comment": "Malware payload (NetSupport)", "value": "34e9b7cf145e036847af8806f7f13211", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485452, "uuid": "8831eebd-72e7-464f-abfc-b4b4a4eaa188", "comment": "Malware payload (NetSupport)", "value": "2b02ac7eb661502bbe47f12c8fe5444ecddc8697bf547431d7295cd2e44a991b", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485452, "uuid": "1587416d-6dbc-4d99-9ecd-12d6dfd9ebf1", "value": "T12F967CB88B84975EAE6E1907E078571E67F37F26D09271FC5B62370B26AFC085239C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485452, "uuid": "9fe1d70c-3fd7-4688-a3c1-b619591e6731", "value": "49152:KM3oGXEAcIqi5t40OQEoxzhwYI9ObHP4iH0RFblMKkp1mzxHK:f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775485452, "uuid": "02490f17-6f5a-4e71-a056-00ac5ff7ec24", "value": 9410790, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485452, "uuid": "ab6ac2dc-2324-4707-8458-a8fdb30af989", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c9bb859-31c4-11f1-bc00-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1775485513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485513, "uuid": "327935ea-3b9a-4ce7-b15d-2a5bfbda42e5", "comment": "Malware payload (NetSupport)", "value": "4f8c11ea33dd9bc6f310dec3fb444efb", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485513, "uuid": "3af8d8d8-7030-4706-8e61-90a5b38a833a", "comment": "Malware payload (NetSupport)", "value": "e52071d85604f1f27971a61729e9b283ecbec3f2bc3921c3f1e690423876d9c0", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485513, "uuid": "13147a4b-922f-4b4b-9c00-86f4761a9db5", "value": "T1C2967CB88B84975EBE6E1A07E078571E67F37F26D09271FC5A62370B266FC081639C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485513, "uuid": "cdf059f8-33a6-45c3-97eb-eca24b9f9ee9", "value": "49152:0+yh7I1IvGaA1UzZtNgQEoxzhSYI9K7HP42H0RFbl+Kkp1mHxMC:P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775485513, "uuid": "dc5492ba-cb63-4a36-b0f5-695f0a7c5b38", "value": 9410685, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485513, "uuid": "f2e90b89-661b-42ad-a72a-41755687dce3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f633a45-31c5-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775485813, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485813, "uuid": "a8472347-c18e-4591-98a0-60c991c48094", "comment": "Malware payload (ConnectWise)", "value": "1ca8d52ac365385ffbb0159dbc6025f9", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485813, "uuid": "6c7afef1-c6e4-43b9-a18f-23dacf7d3247", "comment": "Malware payload (ConnectWise)", "value": "8a5198f2059e43e5a3d811018e4b067692c2f89066feb635e5f70915b3a576a0", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485813, "uuid": "2a1fb067-27f0-4612-93bf-db3f11264c40", "value": "T1D4B6231473F8A119F1B72A3AED3952F1587A7C22CD62D15E17583A4D2AB0DC19AB33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485813, "uuid": "6be14fa4-a9d1-4000-b65c-ff3bb630d300", "value": "196608:WHGbQE9d00AG+0yANlDdTHGbQE9d00AGOHGbQE9d00AGXHGbQE9d00AGvHGbQE9f:WmkEdQ03NldTmkEd8mkEdRmkEdpmkEd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775485813, "uuid": "d3cfd471-d819-41de-8d25-cd672800604b", "value": 11251712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485813, "uuid": "a792ddb2-9925-4c2b-8964-14a165ce7617", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a2166b2-31ca-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775488166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775488166, "uuid": "ecde1ab7-deeb-47d7-828f-48fb04cd0d59", "comment": "Malware payload", "value": "c65a35124fdd12986a3342f45b180264", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775488166, "uuid": "6da34ae3-01fc-4563-9cd7-adbdf5686ba1", "comment": "Malware payload", "value": "7fc73628c344fa872e6df815bec434d99393d6d4913cfd96a23af18ec2306683", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775488166, "uuid": "3869abed-dd26-4aad-b8ee-eb08b6ed0b79", "value": "T124931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775488166, "uuid": "5a87e3fe-ed22-417c-a9d2-38b03f57fcc6", "value": "1536:0Byp1tF/uwMmAIa14oXx+I7epeV7tb73WdxCrCitkb5fv2v05xsprCK81sPyKEt8:08jI00GitkbFv2v05xspr61sPybt3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775488166, "uuid": "2c4c1b83-b497-49a2-890c-a69d232866fd", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775488166, "uuid": "96eb033f-dab6-4bfc-959c-dc4eba78acb4", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "525a1caa-31cf-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775490193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490193, "uuid": "177586c3-fd93-4958-82cd-74b2a9a6ed8e", "comment": "Malware payload (Mirai)", "value": "93783dcec355d0bb4726a10da2a308b1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490193, "uuid": "d3268250-d4f6-43e2-896e-088f3f29df8a", "comment": "Malware payload (Mirai)", "value": "a375bfdfbd08db887a7f4e1a529d08ae0dd9c33186060ef35dfe7e7ed8ba4d62", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490193, "uuid": "412c29c9-806d-4b69-ae72-02ef543ba001", "value": "T166A3A509BF604EF7ECABDC374AAA1B4514DD652724A83F75B930E818B54B24F25C38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490193, "uuid": "7f8420a8-9bfb-450c-b4ff-be9d45631803", "value": "1536:CfWqhitQLeRiy3uaWmIjWK9z6lWUtAZ3WJAu0EZA6WEFl7Z:CfGCaMy3ulYA3GF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775490193, "uuid": "a8ba4e60-91d3-4a86-8dfd-b70f7b141c01", "value": 101652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490193, "uuid": "03ac08c3-db09-4b4d-b2f7-d49031cbee29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775490561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490561, "uuid": "593ebbfc-694c-4743-a8a0-eef4aa84260a", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490561, "uuid": "681abf3e-db57-46e7-981c-f6fd8305186b", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490561, "uuid": "feb34382-0cc4-43ec-a84c-ead54976eb87", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490561, "uuid": "b3de1d65-7aee-4be7-845e-c7d093d3350d", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775490561, "uuid": "4d15ed43-e71f-4d94-b987-08140ba7d604", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63c6c0aa-2f54-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775490800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490800, "uuid": "d77297c3-2d47-46f3-bd45-fc5b558253c1", "comment": "Malware payload", "value": "c6469c9ff76bfd88e09aca1a44fdb1e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490800, "uuid": "8a6242e2-160e-46c6-89cc-338ab2c9a4f5", "comment": "Malware payload", "value": "604697c8a05c31f1135e03c625fead61c11e3a1d4c03a7c721b292a196b26a89", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490800, "uuid": "5a345420-3ba9-4e52-bc6d-9f0c41f503d4", "value": "T1A1341283F050585EC5EBF1FD667F8233FA30B846923A679F1B02E9701F065656607B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490800, "uuid": "9545c8cf-12e0-4c96-989c-2f20357199e4", "value": "6144:lnRawWnTQGTVwzg3BTVWPAjwRtRI1GttMyA5kXfrsAJ:qnTXTVKg3BTXwjm1GttMycUfr1J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775490800, "uuid": "6d29b0f0-e4ab-407d-914b-265e14af1f07", "value": 237214, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490800, "uuid": "73f73d5b-c86f-4fba-a9f2-e15dbfb90d16", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c84de007-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775490800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490800, "uuid": "06a41ed6-e996-4764-b51a-37c330b6f852", "comment": "Malware payload", "value": "b403e46d54dea0e65b1b8694a1ca65f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490800, "uuid": "1fdab3d3-d9af-41e1-bba8-0e3831a78202", "comment": "Malware payload", "value": "3d6f920992c6e41f82584fd558cf0415f255a9b50ef3628e2b0dafb8014ed0ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490800, "uuid": "b8f2ee0a-aaa7-45df-a390-b3510713b3b6", "value": "T179641211EE401F9BCCAFDF755AAB03272B8C54DA83A1A32E537C8D2D789864049D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490800, "uuid": "b7e6de8d-01fe-484f-a642-2a68cfe85f5f", "value": "6144:1gr6qZDnFJLIqJ/dGpU3UCKYQYqlZdadbMtwDtVx5SgW97msQfMAI:EdDLdJ/4pU3LQ8bMtwDvx5bG7msQfMAI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775490800, "uuid": "53a2b12e-4352-4619-93d0-b30b9d8f149b", "value": 326002, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490800, "uuid": "576ae78b-3b74-4222-b354-64b638dedd51", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1d1e0f7-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775490800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490800, "uuid": "9839add4-30e9-4b44-942d-a06e09fdd9fc", "comment": "Malware payload (Mirai)", "value": "0143eb760a1119e56b6844e20a1bb106", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490800, "uuid": "500cb901-5871-4b40-8a49-e656a632f1cf", "comment": "Malware payload (Mirai)", "value": "bbf512e2470851f6cb53f8874846a9fcc58b741a1e0662b2fa1b8890004e04ba", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490800, "uuid": "31496676-bc3f-4655-b612-fbbf5aaa6141", "value": "T1B9340141FAA1EFA2D3C2917AFD8E405833231775E2AA7345DC34AA3073C66665F3B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490800, "uuid": "55882666-8028-4ed8-bb0a-a021500aa83e", "value": "6144:6derbsQ6WW5nUuryzcDDyK/VPNhCoFeXktWWpur5tLJaIyuqngP/:keHzNWFtrySyUNhVsklY5toIyuqm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775490800, "uuid": "9828a0c3-8a44-42be-a397-260ef1426de7", "value": 250505, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490800, "uuid": "3c3b3eba-825c-4303-aa81-bdcaf09f7532", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1e46bf7-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775490801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490801, "uuid": "40b43323-8490-48f3-9a04-b6541a81bd72", "comment": "Malware payload (Mirai)", "value": "dae80bd043b4a7cac8cf2ede5eb27c85", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490801, "uuid": "0a5e571c-37e3-44e9-bdae-32c571d5eb34", "comment": "Malware payload (Mirai)", "value": "2596e230dd9075d1b5af526067774f97d078fbd1f34ab8be5cd11b556c6b8c3a", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490801, "uuid": "13647a62-0c97-4c0e-b604-7eb943de03a5", "value": "T17D340122F480D726C9D4667AF7BA155C7312076CA3FE3201DC648A7437EB9278E375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490801, "uuid": "b5ca67e9-e0c3-4215-8591-42c28ed147a8", "value": "6144:mGMCt5Q+7ozo5yp58QUIkAMYr0zy8BKOW:PMueSIEycQZ9ozy8Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775490801, "uuid": "b8879b88-fde1-482c-9c34-22dbdfbf2a89", "value": 251170, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490801, "uuid": "ccb0cb2d-d33f-4a3e-9bc0-7a26e1022e42", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1d08659-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775490801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490801, "uuid": "7bfb7db3-0bb0-4afe-a394-8ec41fbe2078", "comment": "Malware payload", "value": "e320f077ba74de8ac4924a064dca5028", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490801, "uuid": "3db8b8dc-84f1-421d-ad0d-c423af1da52b", "comment": "Malware payload", "value": "3e7a55dfc594af6b7d41d2855845d8b7288904e7e0f23d25667d8b4cd67145b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490801, "uuid": "38f07479-0fbd-4918-b61f-15265b032e45", "value": "T1AE5402A0F7284533E0468EB56D7F4776EB284E6201B2C13C7711EF563A23935DA8B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490801, "uuid": "06591427-3181-4b10-bd03-572d93cbc531", "value": "6144:I7DnbnUJ3sK+ilibzRowG4hKpuX3hgSR+ZXrPxBr:+K+fbFowG40PSYrz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775490801, "uuid": "ead90765-9a3e-487c-9a6c-35f6d6ade6de", "value": 289221, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490801, "uuid": "93c7ba74-890a-4289-9f7e-e836f514f79c", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e78d3c3b-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775490801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490801, "uuid": "14a3de25-9bf9-4cfa-88bd-8bb3bf148519", "comment": "Malware payload (Gafgyt)", "value": "71d34b6f0b0ec85692a33e9a7d3d0b9d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490801, "uuid": "55fb1226-b590-4ce8-9f42-5f45ae8377df", "comment": "Malware payload (Gafgyt)", "value": "76dece1465d0598b533b29e3da7cc8531f48e1b15dc547896cda4650171d3d62", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490801, "uuid": "eb279d3b-df3f-4965-8e1e-c2729640b119", "value": "T1C9341241F6C361A2E51303750652E7EFF2B9EB345090FB2FE3546E769EE0680918DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490801, "uuid": "668ca084-0904-41d6-a1f0-0f79c78ca70e", "value": "6144:bw0leKLh+EPq8OuTS0URjHF1qHO288X4tD6A6XUSw:bw0le6hniJQS0Wl1qu2lXV5USw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775490801, "uuid": "7882b074-d12a-4d90-bcc5-526d0ababeb7", "value": 247000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490801, "uuid": "b704ef72-db07-4709-835e-2fa6313812ce", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4446e95-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775490803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490803, "uuid": "f501d171-cb8a-4fb4-9ac9-1097ca1c4be1", "comment": "Malware payload", "value": "7fc78617822d26e161381bd28c4cac27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490803, "uuid": "7709909f-83ec-49eb-a467-03eadec2a5a7", "comment": "Malware payload", "value": "4db115d6aec8de6663fbfc8a7e94ab34adbf3c718bb9bd4d6100e65198b85b55", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490803, "uuid": "ce896feb-69fc-499b-ad18-b14516484cf7", "value": "T1376412C26B508F16C65D81728AFBCB91BFE601E526E08546B33DE800DFD264C5A6FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490803, "uuid": "7fe872be-48f2-4375-b62b-e39657638218", "value": "6144:uRjR4tudkSB23bFVPYIJfHMACIaf6/li74liAy+FQ1k5L0RPtKt+/KKoy8l:akufEZVPYIqJIaiI74e+K1k5L01U8yKA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775490803, "uuid": "d448fb20-b0f9-4e7b-9852-87b5121a5a6b", "value": 324829, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490803, "uuid": "602e68fe-b840-4a98-b82d-03ed53151fe0", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8669b61-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775490803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490803, "uuid": "1f7837e8-3c77-4358-9464-3e590ab1ac9c", "comment": "Malware payload (Gafgyt)", "value": "35710589e5c527a1b54c9ba1150ecffe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490803, "uuid": "07001845-706a-4130-80d6-ba3672e39389", "comment": "Malware payload (Gafgyt)", "value": "a21b9fdbae3257e202e0f4aaa32ba65d23c14728683fc1a651eca42ddea9a9d7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490803, "uuid": "137f5f50-e401-4eb8-98d7-49a46acf8da8", "value": "T1443412839FC251B1E6938A344096D787EB24DD242004DBD5FB1E3EB1A8E23E7F50E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490803, "uuid": "52e9ef23-8cf0-430b-99d9-718afd9bf616", "value": "6144:0wM1m1qFlHH4APNSTfqEcaDKctbC+MeETu0pU:0wM1mgln4APNQiEcaDL9JMLVpU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775490803, "uuid": "76fca0cc-acb7-4d5e-a7ce-40c37c980597", "value": 248295, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490803, "uuid": "3225923f-cc5d-4af8-bf3f-d06f555eea86", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c86af821-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775490803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490803, "uuid": "647520ba-baf6-418c-8aae-33eeb41e13a3", "comment": "Malware payload (Gafgyt)", "value": "68dcf39cfbd689d99c471c140300f110", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490803, "uuid": "8687018b-e908-4877-af6d-9d1ab3a9669c", "comment": "Malware payload (Gafgyt)", "value": "ad5aec8723a8ab586cc8442cb7ee4794feb633b15a96d0b1d8ae924aa3a94986", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490803, "uuid": "c3426534-b569-4ca4-8c53-2ff1aced00ea", "value": "T19B341242FBC191B1E46703B40907DBEFCA34FA240150E5A6F395BA54B8F76C361AD7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490803, "uuid": "93a1d686-2c57-447f-98e0-1f34c3401cde", "value": "6144:0wM1mczgZ4GmRg87dvqqjpyuUjsoo8cFrPBESWGQAxyJUatxrNCxW:0wM1mcWgRg8Iqjpujsoo8qPBJAXPtxrr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775490803, "uuid": "2782bc89-6d33-4895-8949-5a44e96b45eb", "value": 246860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490803, "uuid": "a9a9ee9d-32e0-4b18-95f6-26418d44b5c0", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1d0b0e7-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775490865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490865, "uuid": "1b892cff-e5a9-4aa2-804f-65b7c485e571", "comment": "Malware payload (Mirai)", "value": "3c3a94b8baeebe520dc3d2f7dcc806b0", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490865, "uuid": "a58aca4d-c97c-47dc-89d3-62a58b44962f", "comment": "Malware payload (Mirai)", "value": "b5edb9fc654b260661c83360090194e1951a2d7932fc3c9d8354c3687507343b", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490865, "uuid": "44368bb8-04db-4c94-a69e-9afdb25d2c77", "value": "T10C440225F090EBA3C6D16B7BF90E565973030770E3DD3301DE2A8A3563E2A568F366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490865, "uuid": "cecb2df5-a775-431c-b0ee-dec2209630c3", "value": "6144:SiqQbbQ2sG+RtTJtCOCWROchiFuo9M/6Sd+7H0:hqSc2sG+RQVWSqST7U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775490865, "uuid": "6d041657-f074-4d79-bafe-52a878430ae3", "value": 253697, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490865, "uuid": "8c352a4e-b69c-4f06-8822-00bfd0f0966e", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1f98715-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775490865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490865, "uuid": "2a1e4295-acbd-4b7a-b007-e9bf5e1a3a54", "comment": "Malware payload (Mirai)", "value": "09423ac616ce71323ab19b0d5a5bd262", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490865, "uuid": "60a1518c-2cfb-4690-bde4-04cf28f5a89a", "comment": "Malware payload (Mirai)", "value": "bd4445aa5dd492a8c177bceff7a4ef8a9b333fb95a8d7bdf5e8fb3161259da98", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490865, "uuid": "7c6ebcc7-4b22-4131-ab1d-fb73697f2536", "value": "T1E74402D8F0918B72D9E0217FFB4F695D7713072DE2D933015E195A2937E3A6B0E226", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490865, "uuid": "b33dbf32-0d3d-4dba-a464-20f7f7d01d03", "value": "6144:2JHQbbQowPuo8moGcyht/OREaT5QbYo8/e/NxpJmi8j:CHSclPudixGRubYo8m/JU3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775490865, "uuid": "5e4cc69c-6864-4a0c-b749-9de4d199fd3d", "value": 253653, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490865, "uuid": "6b824557-be4b-444b-94f8-b35ea26748c3", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88a239cb-31d5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775492861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775492861, "uuid": "121d4a32-5bc4-4bda-9fba-cc0efc6fa676", "comment": "Malware payload", "value": "3f25a388ce11e1165f8ed6bbb62ab24f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775492861, "uuid": "f58158b0-c322-4838-b6b2-c0362298fb0e", "comment": "Malware payload", "value": "0d27781d21c18546cc6555b74bd4a8d0597b670f258b14fc712355d78ac40fec", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775492861, "uuid": "50ed7083-99ea-4e51-83d9-6a91e79ec78c", "value": "T1418308327588582A210B028FD263336C70EFDCE2D611E5B6F6F922344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775492861, "uuid": "f3258747-e4c2-4bc8-8872-8431a2e1d851", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnoWaoVN/:XEKltp9t2SX/yr2pboW5VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775492861, "uuid": "176ce26c-2ff9-4a56-857f-319a827a9831", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775492861, "uuid": "0ca6c50c-8128-45e4-be5d-92f6a78e74b1", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d436fe9b-31d5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775492988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775492988, "uuid": "487ce4ac-266b-458d-83c6-a082e107bc04", "comment": "Malware payload", "value": "29cdcc69a9eb8dea15cb247375052aa0", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775492988, "uuid": "9f9ab919-4186-4caa-a9ab-59233358a1b5", "comment": "Malware payload", "value": "ab43e84395aab280985e39700fb9b111d63b4d3541ccfe6cd8274811732af230", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775492988, "uuid": "e9b8e31b-8e9e-4df7-bf91-ab9533583a27", "value": "T178F53329C75B901C44499112B88E398B937D8D177E1E17315E43736CFE378AE3E8E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775492988, "uuid": "a8866a81-9a55-4181-88e4-4b55878ac8e6", "value": "98304:SyrPvG3UNpYqQLpXhHHeanDebmPL+okjWa1luR:SyrPO3UDsdXp+z8+FWyc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775492988, "uuid": "6d25af7b-e608-4806-a779-17d03739923b", "value": 3468328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775492988, "uuid": "01683dca-a883-4fac-8df1-d548cc686041", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe24d717-31d7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775493917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775493917, "uuid": "3acbec70-15cb-4864-93fb-ec68753ec26d", "comment": "Malware payload", "value": "56e82a13409ddf91004368a4d350037b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775493917, "uuid": "ae8544a6-bf78-4200-87f3-61c8dc7bf79f", "comment": "Malware payload", "value": "f6cd7d02410683b70b75654242ca1f57b708981e6fc8dcf5f447501cd143ac40", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775493917, "uuid": "569d2bd8-61c6-48d0-beb3-d073228ab8f8", "value": "T1A1D6AF82FA8340B1E9911074947AF33B9B3075094B6695D7F3DC3EDAA6312D13A3B6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775493917, "uuid": "8be2680d-dc19-47fe-8b97-317d3a9718a6", "value": "8af42523a99088a2e632499616d24293", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775493917, "uuid": "228006b0-4e0b-431e-ba1d-a13e66384e19", "value": "196608:MtDMb3YPxMDzisVkM0hnjjpPJsv6tWKFdu9CEuDm/:CxM3v8BpPJsv6tWKFdu9CEp/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775493917, "uuid": "fb7abccc-dac7-4f9f-931d-e6a25ec543d8", "value": 13469560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775493917, "uuid": "7427efe4-0f8c-4a69-9e15-7f9eedb57e4a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "839018c0-31d8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775494141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775494141, "uuid": "0ea62b1e-eb7d-4516-9c26-5533a9f69c87", "comment": "Malware payload", "value": "101707e6e27bd6a9742da111f341529e", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775494141, "uuid": "14362098-161b-4171-bb4f-5695e003bd8d", "comment": "Malware payload", "value": "057ab1839e6b6be055ec100a30f86ffdbd005f7871057f4daac10cb80ad12646", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775494141, "uuid": "f74b303c-7982-4ba6-96c5-577bbf41659e", "value": "T1E5157E99E7C798F1F65300F1068FD7E31924A2265043F6F6EB8C1A977432B526E172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775494141, "uuid": "cff608be-0de6-43d6-8fd1-7874f563c898", "value": "24576:EMXaohE6hjGO11P7gB+Mx8rr/DaBRyqW1rzemBTnZD:ZaohE6h3jitU/DSyqmd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775494141, "uuid": "d4315d4f-a3c2-4e26-a2a3-e49ed50b4e03", "value": 918592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775494141, "uuid": "e32b3697-d5d1-4b08-9feb-d628287bc3b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0df73fa7-31d9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775494373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775494373, "uuid": "e279266a-1177-4fe6-875d-fdb16d9dbcbd", "comment": "Malware payload", "value": "ae40995e2d20c1c2c0de792affaa09d0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775494373, "uuid": "cb5d7068-8132-46bb-8dba-66898e27b592", "comment": "Malware payload", "value": "9c96f753e1a0aba988ac27f9aa2a1c325a55d170f3231a2d7228ad827f461d2e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775494373, "uuid": "eb864b81-1d81-4493-93aa-1e69cc5c25ae", "value": "T12A93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775494373, "uuid": "74e60704-6a31-481e-9761-dc60caeecaf5", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXxIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYP8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775494373, "uuid": "f6015970-48df-4fd3-9acb-da82fe5bba69", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775494373, "uuid": "05787afa-0c9f-4c5b-8d9d-eba157ab9c00", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b709f909-31d9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775494657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775494657, "uuid": "0215d1b6-0726-4a45-a937-41906434d790", "comment": "Malware payload (Mirai)", "value": "06ca6e08148781c609e2ceb289f10541", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775494657, "uuid": "836cf45a-94f2-4932-b610-3648f28c00e6", "comment": "Malware payload (Mirai)", "value": "7a38c59499b7d1348b1561c779e925ce5b715db97f6e66b48cae24edd1599980", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775494657, "uuid": "08a82ac8-3dcb-4885-b6ba-f34ba4c91680", "value": "T142832A82FD819E12D5D8137AFA1E118D33136369F2DEB253DE116F206B8A92F0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775494657, "uuid": "e41cf5d1-1587-44a0-8d33-333627519198", "value": "1536:MYnKegmj+yFcmphCyuOQHAeZFWMu/iw5SoZMWiDW92jh9OeZA6W0FTr:NRj+yiRyIZZFluqk92jh9O4F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775494657, "uuid": "72604e51-1c30-4b0f-b7a1-ed494a2563b0", "value": 83492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775494657, "uuid": "45162edc-d4d1-4554-bfb3-3abac08a541f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08cfbaef-31d5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775496813, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496813, "uuid": "1a8db628-28b3-40bd-83d1-e160f68c5daf", "comment": "Malware payload (Mirai)", "value": "55452f98c49a2b42665fa60609589388", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496813, "uuid": "b3c0c93a-7c72-4dbd-96a7-0db61da6fcb7", "comment": "Malware payload (Mirai)", "value": "3ae5fdeed012fdf6fcfff1a6c35a53f5ab3e33e4d812fc84cab200e0dc6d82c6", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775496813, "uuid": "ac8d7b84-da6b-468f-9a1e-1b9148583f1b", "value": "T162157C2EB2B2F1BCD00BC03457DBCAA15535B47522222DBB26C4DA353D6ADE51369B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775496813, "uuid": "63e2fea2-9082-4602-a1f3-85a2621912f1", "value": "12288:znxHUgkNgitkzO/S+tqIZdEHtY9s60SFoyez6JzM/vDie0isz6aySdm0bbbbbbb+:znxHrkNgj8xt/r2XDiqszWQW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775496813, "uuid": "f923a630-c8ec-4d13-ba36-36650b3944c7", "value": 957040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775496813, "uuid": "7e1dada5-9c1a-4161-ab22-c8d211532447", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "976e82cc-31e8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775501046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501046, "uuid": "86372be3-50bb-4fb9-b0c6-f76fa67c4ac8", "comment": "Malware payload", "value": "fcfad51db32121a21b24d1d641779940", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501046, "uuid": "a7ee3319-4979-4d92-b5cd-978b44f378ba", "comment": "Malware payload", "value": "c1002d61b6abc7d87158b28c829c9bca9bf862ba1fbe2994405a865115150485", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501046, "uuid": "ad639aa6-4e3c-4fdd-a4cb-ee7d54f91b5c", "value": "T18433F945BD829906C6D84377FA1E42CD331173D8E2ED3227DD153F52BBCAA1B09AB1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501046, "uuid": "5763fb7f-8867-4ae6-bf7a-0af9ed2b040e", "value": "1536:GcYZ7LMohtjgj4oa/RbYrdV8iCqwbZnH:XYZ7RhiEHRbU+qwbZnH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775501046, "uuid": "b3dec79f-dc21-4726-9d81-1128377304f6", "value": 51608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501046, "uuid": "2c7b408f-d814-4bfc-88c6-37865fe40bba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "977d9e0c-31e8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775501046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501046, "uuid": "0c86c2e8-33ee-40e5-bfa3-7f7e1a6a2ece", "comment": "Malware payload", "value": "100f5f87b50d2f5895d8ea9e365e7395", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501046, "uuid": "c67c8ff1-4967-48c5-83b0-91e66ef2e253", "comment": "Malware payload", "value": "36da70c8b00b173fd5318242ce3b51ae0c03ca528440067458f0fe36ca4da628", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501046, "uuid": "d690f9c5-7be5-4596-ac4d-95f96c9fefcc", "value": "T187333A13258089FCC40982B147BFA62BF562F4BE4234F58D6BE87E26FD5AD310A5D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501046, "uuid": "32aab7e6-b334-4e8e-a441-bc7c5e86a12c", "value": "768:FnjJrbghrXpCJ9t3C0q0GNls1qttNo7MM7a0KGxDopKXobZ7/cKYeTBn:xdwG/t0XNlEqbC/7a0xxMd97cBeTBn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775501046, "uuid": "2735a7ad-7a77-4901-a727-cb87ff294f1b", "value": 50176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501046, "uuid": "3e1eb51f-8e2d-4959-8cd2-83b67461d0a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9daa8071-31e8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775501057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501057, "uuid": "ef2209ca-4c45-437b-b670-a9adc4b6ea1b", "comment": "Malware payload (Mirai)", "value": "b24370d5e099816b8677abd6f498bcac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501057, "uuid": "6367e252-35fb-454c-9535-1e26ea10207c", "comment": "Malware payload (Mirai)", "value": "c9288be6a0dc58feff3c8011ed99a0d57873c5c710a8840f43191fa2948198a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501057, "uuid": "adbf6228-05e1-42fd-b465-4aa0364dab4a", "value": "T19053E846B9829E11C5C8077BFE1E118D33137798D3DEB222DE116F21BBCA56B0A7B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501057, "uuid": "63b5ac3c-c9ec-4507-a744-243be9a4ad18", "value": "1536:wRn78zEyaRDCvEsDCbscC65IrqrrYmPOIRiM/3qFsIwbZnE:aSEJDCv7Ssckrs/3qFsIwbZnE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775501057, "uuid": "26dc7600-aef6-4a20-afb7-e1e8425ffe7e", "value": 62640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501057, "uuid": "79ee343d-c21c-48f2-861a-c33fd52e4dbd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9daaa118-31e8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775501057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501057, "uuid": "9e65778f-4e96-4bf2-82e4-cd91f6563767", "comment": "Malware payload", "value": "25a5cb029ece192edc0268e5a11a1f2c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501057, "uuid": "04160e45-c612-47ad-a1e2-5d38c0acd835", "comment": "Malware payload", "value": "a7014bcfb7388701a089666bcf8a208e62d6c18938c6bb64c9bcaa5307c27390", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501057, "uuid": "f8e4ce34-a14f-4672-a673-98cbc1f73679", "value": "T1EA33F945BD829906C6D84377FA1E42CD331173D8E2ED3227DD153F52BBCAA1B09AB1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501057, "uuid": "2e74420c-b0a4-4032-89c4-26c962a305de", "value": "1536:gcYZ7LMohtjgj4oa/RbYrdV8iCqwbZnH:hYZ7RhiEHRbU+qwbZnH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775501057, "uuid": "ffc3dc9b-6cb6-4694-a10b-640b984a593a", "value": 51608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501057, "uuid": "b2d27138-bb11-459d-87f4-68dbd8e3bf75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9db04204-31e8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775501057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501057, "uuid": "d1632c3b-f9c8-4def-883f-28028340f534", "comment": "Malware payload", "value": "4f252576f7fec1f1a472194b59ff2d4b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501057, "uuid": "da8d4fe5-6931-406b-b2f1-05f845975ad2", "comment": "Malware payload", "value": "35bc82d55b05bce923d6eb229cbf2462a8c4c8bb1a2b711451a8713cc19d9118", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501057, "uuid": "4bdbd51e-ca7c-4e35-8430-48274c9ece85", "value": "T12263410ABF611EF7F86FCD3706E52B49308C641A21A83F757974E918FA4A10B54E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501057, "uuid": "bcbe45a6-02da-46ef-a10f-92452cbde018", "value": "1536:nxo6M86eAtqV6lf2VNufYuI0Kck6n2MFiwbZn:K6MjeAt8692hulKV6nkwbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775501057, "uuid": "8d2ae92d-725f-4c4b-9c35-6d23eaec0f3d", "value": 71480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501057, "uuid": "68cf3c49-4caf-46a8-b066-1d3b6e8d8479", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9db5f882-31e8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775501057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501057, "uuid": "4da9502a-3a44-450c-bca9-8a43320a3f9b", "comment": "Malware payload", "value": "91b53cf57587d85f6002cc653dcf2256", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501057, "uuid": "49173e81-2c3c-464f-baf0-0d3a7048aeed", "comment": "Malware payload", "value": "1447a6834f024427654849663b93a547e507a538bcaffb4c86d92d023d1bcbea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501057, "uuid": "8948a13a-43bb-4cad-a4e1-3d88126cd1e6", "value": "T1F863511E2E618FADFB6D873447B75E21F24873D212E2C640E15CE9015EA034E785FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501057, "uuid": "e6bfffd0-cdfd-490b-80ac-b570aa7bd805", "value": "1536:qZSWtG1Oyu8jDZAPvDMNYdDiwZwnUwbZnL:+G1OMlAANYdDiwZoUwbZnL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775501057, "uuid": "10a5a49e-5b5e-41ef-a0b6-f073bbf1ccb5", "value": 68008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501057, "uuid": "a9825314-78e1-45e5-88df-5a422143aba2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf8ff4f4-31e8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775501114, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501114, "uuid": "9be44b7d-b349-44f2-9a08-9f7b2aaa73f9", "comment": "Malware payload", "value": "e3f5b359374545599605acac3de227eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501114, "uuid": "18292386-2b44-469d-889a-8d046e0a9521", "comment": "Malware payload", "value": "138fbf53ed903dc0c23cdf86237acbf8fd2d897e4e7440beb7176ab483eb4974", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501114, "uuid": "b93f7318-0853-4e9c-a06d-67f8118bae78", "value": "T11273074AF9829F10D4D913BBFE0E018D33536798E3EE71129E116F11A7CAA5B0B7B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501114, "uuid": "d55a1dc2-fed3-4264-98b6-26ed6651b1a4", "value": "1536:K9nq3zwiiI5npnFUNh0n2iooZnknrw6iYhf8XllzfisgAXU5wbZn:5jwFI5pWNh02o2nrw6iYhMVgAE5wbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775501114, "uuid": "161a86d2-e4c9-456c-9f1e-1f0ec8988cac", "value": 75616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501114, "uuid": "8f4c287e-3f30-4935-840f-b07f61bf39d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b9dd5e3-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775501456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501456, "uuid": "3d97f1dc-058a-4b52-b0d0-83379975d669", "comment": "Malware payload", "value": "01a23621eaf274f05b8673263efa315b", "object_relation": "md5", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501456, "uuid": "dcfd28d5-6825-4b8b-a69c-dc561366eca2", "comment": "Malware payload", "value": "fb56650d137d0fcfbb3ae102911256ae5426b9d5d460aedf37b338d60562037a", "object_relation": "sha256", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501456, "uuid": "bc91c05b-2b71-4b3a-a64b-23a42a7a9afe", "value": "T1CF68330D7CDBE123F9EECE588342120521637C0386B6A09C56757FD96D6CFA2528EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501456, "uuid": "55bf2a25-03ec-4dc3-b764-0f17d15a3c0a", "value": "3145728:xECsV/90WPXBPl2GeVOz/+mBvsBGIb3xV+fo:6Cw/90S5l2Gdb+mBvsPBgo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775501456, "uuid": "a830de31-18c3-4d8c-af74-3838cb39a908", "value": 142369437, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501456, "uuid": "3e4713ac-eec2-40ac-a5ac-85ba0f796d60", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cda0f8b-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775501458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501458, "uuid": "e242635f-29c1-454c-90c8-70adbb57f349", "comment": "Malware payload", "value": "2fc8a33ba79a2820f3ffe337fa1466ff", "object_relation": "md5", "Tag": [ { "name": "kryptik", "colour": "#98dba5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501458, "uuid": "c57b042d-66d4-4d8b-b3d3-9bc431972dda", "comment": "Malware payload", "value": "249c6d30873154d7de671db8c24e9ca294d2992095bd36310257f29fef97ab1a", "object_relation": "sha256", "Tag": [ { "name": "kryptik", "colour": "#98dba5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501458, "uuid": "9be42813-e76b-4549-b0c8-83a0fb51f36d", "value": "T17668338D7EABE233F5ABDB4CC345611121736C128679A4C8A67DBBF5BC1CE9311487", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501458, "uuid": "48aa80a6-96f8-4d0c-9773-6ad780de774f", "value": "3145728:HErmeYzBl24kGxwZ7CIzvbGpd0SszPtwov2:HEabBlvkGM+IzzKVszPtwJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775501458, "uuid": "9efd81df-d2f9-4241-9ce5-631a2e152bbc", "value": 139821185, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501458, "uuid": "0e2f139d-f8c6-4573-85aa-501c86f7d84e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ced3f64-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775501458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501458, "uuid": "0f1ddf08-2668-4326-ab96-f1d654e8eaa2", "comment": "Malware payload", "value": "d7321fdbd513b80ef8c23e862945c9e2", "object_relation": "md5", "Tag": [ { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501458, "uuid": "b1d3bd03-9abb-45ad-9f9a-bb338f473b74", "comment": "Malware payload", "value": "fb6ebd8fd5a8168b25fd9e0ad12f6044b8b9630383fa5698b6cd2049d15cbf6d", "object_relation": "sha256", "Tag": [ { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501458, "uuid": "ecdb0893-4475-494d-af67-d7aaeb4a5d20", "value": "T11B68338E3EBBD123E5F7CA4C8291601420332D1286F9F4857A7DBBE97C5CB9352887", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501458, "uuid": "b69ac3af-8cff-4f5f-8298-c671a0e37217", "value": "3145728:hngXTCtsarWxBG0oRc7cSS+omhGJJMk879/+iHr:hWetsrxBXoRkDoiOr879/+Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775501458, "uuid": "ad1afd58-16a2-4159-852e-305a7e910ef1", "value": 139816357, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501458, "uuid": "57acf106-f798-481a-8e19-00c99f535afc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cfea0c3-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775501458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501458, "uuid": "d5578052-5c40-4163-96f2-73368711713a", "comment": "Malware payload", "value": "9e93f7fdd371619ab76df69436a82caf", "object_relation": "md5", "Tag": [ { "name": "Kryplod", "colour": "#b67714", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501458, "uuid": "3e893b65-511f-4724-8b9e-57eeb9b4124c", "comment": "Malware payload", "value": "6184ddb5d29e4d9360195f51a4eced4ddc46f1321fb34019ec144a9f9ab56511", "object_relation": "sha256", "Tag": [ { "name": "Kryplod", "colour": "#b67714", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501458, "uuid": "42197d3a-196d-461b-a9bf-767a95e9f110", "value": "T150783388ACEFDBD1D445A678788814626D23FCA0B78C7FE5DE169CFC22F94D046489", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501458, "uuid": "0d4e7c23-94dd-4215-b0a7-d63f5eb8adc7", "value": "3145728:JduNIZWhSPuB1DOll2M5Q7qkQQ2MXFVBJ8xouMKf9sbo42+VKD4/t604P6Ey:7CIjPuBBMDnQxVTmousbop+VKO65y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775501458, "uuid": "149dccce-35dc-4a0f-bb5f-39670a69c508", "value": 154016956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501458, "uuid": "39ba7c91-217f-422d-bc60-f1dde894c129", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95c86aeb-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775501473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501473, "uuid": "5dcc3f72-9e7f-428e-8cb4-d57e343464c1", "comment": "Malware payload", "value": "1e7ab04292546aa0ac3ac40b125c54be", "object_relation": "md5", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501473, "uuid": "b4bfed0a-61f4-4bfa-93dc-0c19b3583042", "comment": "Malware payload", "value": "ad480852247a8fa7c70e9141981127732d45674299daf9ab83b47bcdc760002f", "object_relation": "sha256", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501473, "uuid": "77093aa6-899f-4923-962b-b7426f5132fa", "value": "T195283377501DEFDD944DA406E5041A4FF9A2F8A9CBB82129E9CE5BF1112E8839D73C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501473, "uuid": "79ad51d3-0d76-47df-881b-f2957402f797", "value": "1572864:I0mfr/LcfTSDOMhkPgcY09CKhtBaSYI087CR3pFnoGp7cLIe1E/uVsOlAuPVf+3s:I0wgfTSDOMQhbtA1I0CW3TZHe1E2VsKn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775501473, "uuid": "23dae362-c685-4448-b644-0f407cc92b1c", "value": 99759879, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501473, "uuid": "90cf9d44-0afa-407c-a59c-44039e679db4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aeb9bc30-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775501515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501515, "uuid": "a197fa98-748b-4787-8716-70d58add13a9", "comment": "Malware payload", "value": "04839c9e5773ac4aa5381252b7ffcc04", "object_relation": "md5", "Tag": [ { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501515, "uuid": "8cd5715d-f3ef-4a41-a4da-91c20e0583ce", "comment": "Malware payload", "value": "090843668b80e2abb615b46d498ba09e1628862fd8d364d9751d9c8698f513a0", "object_relation": "sha256", "Tag": [ { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501515, "uuid": "79725e27-91a8-4c88-8d02-f2810416dbfe", "value": "T17D78336D208AE90EB5B95DE37B0453E02579A9ED8A0AEC3E65D0254FDCC335600BCB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501515, "uuid": "972fbc61-b141-41cd-86f4-038a050d96c2", "value": "3145728:IGt5iuEZdJ8EoYy70PC0uGwP3G4L58iyKG3yR5vkZQbeHWxrSLjJ:IGt5id1HofoKtXP3dfyxy38ZkeHW1SL1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775501515, "uuid": "716df310-0c51-4a64-8f90-dd9e8c75798a", "value": 157378242, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501515, "uuid": "25c210f2-04a1-41c8-8e20-647d327ca60b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "caf6f0d8-3201-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775513850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775513850, "uuid": "92bc6b78-1148-4463-bb50-8bfc7dba4111", "comment": "Malware payload", "value": "f09f0e4dd838f1889516a49f62d662a5", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775513850, "uuid": "8acf9e3f-afba-4e79-8130-4868c3ad623e", "comment": "Malware payload", "value": "dfde26bdef2c3f08de84b7af7883e05be190becdbf472be431c9c56887d729f9", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775513850, "uuid": "4dc95b70-d350-46f9-8967-9f75ae8801c8", "value": "T13DF43A56F8809F62C5D1257AF65F82B8731347B8C3DB720699189B383BD782B4F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775513850, "uuid": "f639a603-2f84-4f46-ac5b-9b0ec2f354e9", "value": "12288:99TyexN69kLsz02f0tP8Hc+VAMARKUaElgpWWtAOECnwIt29wFis:yexN6iYcqcaAMIPa/iwwItOwFi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775513850, "uuid": "5ed0cfd0-522d-4c1e-b871-005921abfac7", "value": 729232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775513850, "uuid": "bbccaf2d-65fe-4808-9ec4-1b3a7156550f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d559088c-3205-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775513998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775513998, "uuid": "fbffd54c-0155-4572-b951-2bfd2acf6983", "comment": "Malware payload", "value": "96c42095a8785f6767de924e558e399e", "object_relation": "md5", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775513998, "uuid": "834c68e7-e445-4244-afee-c6148518fdb5", "comment": "Malware payload", "value": "e8e4808d522e5a8960da08b3aee5b4886591636b218d2dc2b3c369a9b598b7a4", "object_relation": "sha256", "Tag": [ { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775513998, "uuid": "dc4cc477-ca5d-4b4b-acd5-89b299618477", "value": "T187157E89E7C7D4E1F55300F14A8FDBF21534A2265043F6F6EB4C2AA77432B526E162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775513998, "uuid": "bec5be28-3dde-4e07-b7a7-64fa4535b609", "value": "24576:Q1ycs6Lh3mh50o9KF38HDrHhvHwKnfkMAx1GPIm4PiCG:HcsMh3mhHosH/hwKMMAIv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775513998, "uuid": "065287cd-4af9-45a4-9613-0a165eea5a13", "value": 918592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775513998, "uuid": "51f2f61e-fb3d-409b-9e49-9e42bc4861a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05e282b4-320a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775515405, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775515405, "uuid": "14dc3a7e-0e48-4845-8376-1768da340e39", "comment": "Malware payload", "value": "e4f07b1828235436e815a433b7502ba5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775515405, "uuid": "50db38a2-62dc-452b-844a-56b77c80baab", "comment": "Malware payload", "value": "d32ff8801ab16f9025b132e70c5a15c6eb54f646e52cc5db08eeaab34deefc0e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775515405, "uuid": "670177b6-8032-49c9-98c9-c05b4d382d6b", "value": "T11351E48E235282F87C48EA17F475DF9078E09DD24CEB8F44DEDD2B51918CD5478356", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775515405, "uuid": "70622979-a4c4-4b2b-9538-6c1648dc64f0", "value": "24:faTsdYgqmP/R/EECErQ8QpfL+IvICIqIDIVNIVwh0opyl1v28:UPw/HEVuVh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775515405, "uuid": "b5e68505-22d5-4b76-8ed8-867fe7df379f", "value": 3090, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775515405, "uuid": "13251293-69e7-43f8-9710-abc5e714badd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "125e831e-320e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775517144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775517144, "uuid": "a61c223e-e10c-4e51-8d46-14edba9843a0", "comment": "Malware payload", "value": "240c695ae0cb453dfbf5dd4d35e3470b", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775517144, "uuid": "3bba7cfe-9bd7-4011-91ac-1d5aadfc2d95", "comment": "Malware payload", "value": "639976690e64bb7e71543d6e3b52bf727dfc357773b25c7105b7b7563a6b0b6b", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775517144, "uuid": "1702fe23-4c77-4fb3-8a2a-d177bb613157", "value": "T17F52FE7DD8E1BCC0836B72D065AEF7C6118A8B13BE672B1CF9DC045157143A1EBB92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775517144, "uuid": "03fb176e-5b92-4f7f-b704-14964cc6ec7c", "value": "384:wsj6QC6WQcXl2SA4vB+t37ukLGtEBgZg0JylurpcuIr/TzZN:fu/jXw4v4LDaJbU/r/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775517144, "uuid": "bc701ef7-8efd-4f32-bca6-51be57160761", "value": 13620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775517144, "uuid": "ae43de93-492e-468a-bbfd-c406af85d0c1", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775433622, "uuid": "9b5f5fcc-314b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.1.67:49969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775434159, "uuid": "db3e3b36-314c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.5.15:49181/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775434627, "uuid": "f2713066-314d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.240.174:44360/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775435526, "uuid": "0a542512-3150-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.134.103:41848/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775435537, "uuid": "1097de58-3150-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.145.242:39558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775435777, "uuid": "a01e6166-3150-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.5.15:49181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775437210, "uuid": "f649115b-3153-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.180.207:40674/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775437279, "uuid": "1f26e27f-3154-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.145.242:39558/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775438471, "uuid": "e59eec3e-3156-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.242.226:57888/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775438713, "uuid": "75fa761a-3157-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.156.114:39424/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775438903, "uuid": "e7695b5f-3157-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.57.127:45797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775439502, "uuid": "4bff220f-3159-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.69.192:40407/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775440457, "uuid": "85719e2f-315b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://fdsafa.best/bots/mirai.arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775440638, "uuid": "f189b761-315b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.203.83:52121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775440809, "uuid": "57348395-315c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.156.114:39424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775440819, "uuid": "5d1088c1-315c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.98.77:52423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775441119, "uuid": "0fd17db7-315d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.69.192:40407/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775441233, "uuid": "53e07da7-315d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.98.77:52423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775441946, "uuid": "fcc3992a-315e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/7.exe", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442130, "uuid": "6a563b3a-315f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.183.236:34554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "00e0bd03-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.243/hiddenbin/Space.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "00e0beac-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.243/hiddenbin/Space.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "00e0f598-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.243/hiddenbin/Space.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "00e2cacb-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.243/hiddenbin/Space.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "00e95258-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.243/hiddenbin/Space.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "00ee34a5-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.243/hiddenbin/Space.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "00ee377d-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.243/hiddenbin/Space.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "00efca64-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.243/hiddenbin/Space.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "00f67a25-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.243/hiddenbin/Space.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "00f68aee-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.243/hiddenbin/Space.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "00fe2c47-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.243/hiddenbin/Space.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "00ff8a2f-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.243/hiddenbin/Space.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442382, "uuid": "0100e8ea-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.243/hiddenbin/Space.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442383, "uuid": "011fcc1f-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.26.192.157/bins/pmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442383, "uuid": "01218abb-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.26.192.157/bins/parm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442383, "uuid": "012420ae-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.26.192.157/bins/parm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442383, "uuid": "0124211e-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.26.192.157/bins/pmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442383, "uuid": "0124a6d4-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.26.192.157/bins/parm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442383, "uuid": "0124db25-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.26.192.157/bins/parm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442383, "uuid": "0125be5c-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.26.192.157/bins/pm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442383, "uuid": "0142c4db-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.26.192.157/bins/pspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442383, "uuid": "014604e4-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.26.192.157/bins/psh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442427, "uuid": "1bd7b7a1-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.244.15.38:49179/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442428, "uuid": "1bf93c4c-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.26.192.157/bins/px86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442428, "uuid": "1c0b7839-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.243/hiddenbin/Space.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775442731, "uuid": "d0ac408a-3160-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.34.25.18:38722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775443643, "uuid": "f0277160-3162-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.183.236:34554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775443756, "uuid": "338975ec-3163-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.153.57:42869/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775444527, "uuid": "ff59a2f9-3164-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.232.62:36914/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775445068, "uuid": "41ab67b9-3166-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.153.57:42869/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775445137, "uuid": "6afadc80-3166-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.234.155.94:39613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775446026, "uuid": "7d131b91-3168-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.244.11.1:55717/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775446156, "uuid": "ca37d55b-3168-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.234.155.94:39613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775446326, "uuid": "2fcc640b-3169-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.232.62:36914/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775446582, "uuid": "c849eb1f-3169-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.229.159:49082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775446931, "uuid": "97f13f75-316a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.235.173:35312/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775447424, "uuid": "bdcd589a-316b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.150.202:33633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775447826, "uuid": "adbb493d-316c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.244.11.1:55717/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775447898, "uuid": "d88c2e5b-316c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:56094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775448427, "uuid": "13bd5d74-316e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.195.127:48023/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775449523, "uuid": "a0ddac00-3170-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.227:40456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775449640, "uuid": "e6e7e913-3170-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.150.202:33633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775449748, "uuid": "2758e51e-3171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.78.35:49213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775451490, "uuid": "35a6417c-3175-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.78.35:49213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775451742, "uuid": "cb91bc00-3175-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.143.132:42284/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775452027, "uuid": "7587314f-3176-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.143.132:42284/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775452395, "uuid": "51276659-3177-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.150.79:33194/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775452813, "uuid": "4a5c7f38-3178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.105.38:50784/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775452995, "uuid": "b65c6a1e-3178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.87.7:44145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775453058, "uuid": "dc62191d-3178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.248.121.105:58539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775453230, "uuid": "42e93129-3179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.227.108:56557/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775453827, "uuid": "a67f0b46-317a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.175.206.228:43178/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775454427, "uuid": "0c3ac394-317c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.149.21:40984/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775454728, "uuid": "bf4e0afc-317c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.227.108:56557/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775454855, "uuid": "0b1d10cc-317d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.248.121.105:58539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775455268, "uuid": "01a0f240-317e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.96.190:59697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775455716, "uuid": "0caaea9e-317f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.118.231:59747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775455761, "uuid": "271b7da5-317f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.30:50525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775455867, "uuid": "66a302c5-317f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.140.38:42287/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775455929, "uuid": "8b4ca0c7-317f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.201.148:44314/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775456117, "uuid": "fb5dd9bb-317f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.249/bbc", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775456529, "uuid": "f11b5633-3180-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.240.174:44360/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775457372, "uuid": "e78a6e06-3182-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.140.38:42287/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775457494, "uuid": "301c2c54-3183-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.118.231:59747/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775457616, "uuid": "78bb2825-3183-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.59.63:37559/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775458036, "uuid": "730ccd11-3184-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.87.147:43039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775458216, "uuid": "ded72ef8-3184-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.30:50525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775458541, "uuid": "a02ba4fd-3185-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.173.127:41868/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775458627, "uuid": "d36db3a0-3185-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.201.148:44314/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775459292, "uuid": "5fadab09-3187-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.59.63:37559/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775459827, "uuid": "9eed54b2-3188-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.49.242:47506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460125, "uuid": "50b60775-3189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.200/work/addon2.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460126, "uuid": "50ca8712-3189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.200/work/addon.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460127, "uuid": "517db50c-3189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.200/public_files/160066.jpg", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460129, "uuid": "52d2cf64-3189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.200/public_files/cgCnZfO.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460129, "uuid": "52e38122-3189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.200/public_files/pEN7Qdm.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460130, "uuid": "534187b6-3189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.200/public_files/X3Qow0s.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460310, "uuid": "be829df0-3189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.101.173:41434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460374, "uuid": "e4905f7e-3189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:56094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460375, "uuid": "e54d9e26-3189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.17.13:43141/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460787, "uuid": "db2bc375-318a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://being-node.ontologicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775460910, "uuid": "2471b724-318b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://real-time-io.ontologicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775461275, "uuid": "fe2413b5-318b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.102.129.176:54382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775461446, "uuid": "640999f5-318c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://source-data.ontologicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775461517, "uuid": "8e2ed72e-318c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.170.242:52377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775461688, "uuid": "f3e18019-318c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.17.13:43141/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775461928, "uuid": "83665d7f-318d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://exist-api.ontologicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775461929, "uuid": "83b64a50-318d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.161.184:52519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462048, "uuid": "ca8b099c-318d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.101.173:41434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462347, "uuid": "7cb6dc2e-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://filehost.sbs/share.php", "Tag": [ { "name": " infostealer", "colour": "#0254d5", "exportable": true, "hide_tag": false }, { "name": " malvertising", "colour": "#a37ffe", "exportable": true, "hide_tag": false }, { "name": " renpy", "colour": "#9d4245", "exportable": true, "hide_tag": false }, { "name": "TDS", "colour": "#0494b3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462347, "uuid": "7ce19300-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.56.112/californication.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462348, "uuid": "7d8e478d-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/PowerChrome/svc/raw/refs/heads/main/bettertotemhighlight-1.0%20(1).jar", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462348, "uuid": "7d975d6e-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/PowerChrome/cvr/raw/refs/heads/main/zaza-1.2.1.jar", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462348, "uuid": "7daeb1c1-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-429e5192f69c4021acef9add7ed1790a.r2.dev/downloads/Doomsday_Client-1.21.11.jar", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462348, "uuid": "7db4bde9-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://djasdajnsdnjgjg.com/sdfggg.js", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "IClickFix", "colour": "#863382", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462349, "uuid": "7e2a9016-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/PowerChrome/az/raw/refs/heads/main/loade.exe", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462349, "uuid": "7e37005e-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-429e5192f69c4021acef9add7ed1790a.r2.dev/downloads/Fabric_API-0.141.31.21.11.jar", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462350, "uuid": "7ec6bc14-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/PowerChrome/svc/raw/refs/heads/main/xaerominimap-fabric-1.21.5-25.3.10.jar", "Tag": [ { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462351, "uuid": "7f44bfdf-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-429e5192f69c4021acef9add7ed1790a.r2.dev/downloads/Radium-1.21.11.jar", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462355, "uuid": "81aa71af-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/dz72gn.bat", "Tag": [ { "name": "BlankGrabber", "colour": "#f1c814", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462364, "uuid": "86e26d84-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-429e5192f69c4021acef9add7ed1790a.r2.dev/downloads/CatLean-1.21.11.jar", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462364, "uuid": "870a5e81-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ok-vsefotki.online/?download=1", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462364, "uuid": "87157fc3-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-429e5192f69c4021acef9add7ed1790a.r2.dev/downloads/Krypton_Client-1.21.11.jar", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462364, "uuid": "8748aab1-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://job.recentbox.life/DivineX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password:dx2026", "colour": "#40bf8c", "exportable": true, "hide_tag": false }, { "name": "pw-dx2026", "colour": "#d631c5", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462387, "uuid": "947609d9-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://top.recentbox.life/DivineX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: dx2026", "colour": "#48f582", "exportable": true, "hide_tag": false }, { "name": "pw-dx2026", "colour": "#d631c5", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462408, "uuid": "a0ec07b6-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.120.17:43996/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462409, "uuid": "a1ddcf00-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/minecraft.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462409, "uuid": "a2134fa5-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.110.191/cat.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462410, "uuid": "a2462b43-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bot.cdnlivechatinc.com/", "Tag": [ { "name": "LiveChatCDN", "colour": "#eac978", "exportable": true, "hide_tag": false }, { "name": "magecart", "colour": "#9a90e5", "exportable": true, "hide_tag": false }, { "name": "magento", "colour": "#1ec2d2", "exportable": true, "hide_tag": false }, { "name": "skimmer", "colour": "#141e26", "exportable": true, "hide_tag": false }, { "name": "stripe-overlay", "colour": "#3b870b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462414, "uuid": "a4b5c1d1-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdnlivechatinc.com/", "Tag": [ { "name": "LiveChatCDN", "colour": "#eac978", "exportable": true, "hide_tag": false }, { "name": "magecart", "colour": "#9a90e5", "exportable": true, "hide_tag": false }, { "name": "magento", "colour": "#1ec2d2", "exportable": true, "hide_tag": false }, { "name": "skimmer", "colour": "#141e26", "exportable": true, "hide_tag": false }, { "name": "stripe-overlay", "colour": "#3b870b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462414, "uuid": "a4d86582-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdnlivechatinc.com/ws", "Tag": [ { "name": "LiveChatCDN", "colour": "#eac978", "exportable": true, "hide_tag": false }, { "name": "magecart", "colour": "#9a90e5", "exportable": true, "hide_tag": false }, { "name": "magento", "colour": "#1ec2d2", "exportable": true, "hide_tag": false }, { "name": "skimmer", "colour": "#141e26", "exportable": true, "hide_tag": false }, { "name": "stripe-overlay", "colour": "#3b870b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462414, "uuid": "a50e1d39-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://media.base44.com/files/public/69adbe084cd3b016d9ae3891/37360cb4e_Dupe.jar", "Tag": [ { "name": "AdamRAT", "colour": "#7bc235", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462414, "uuid": "a51432b7-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://media.base44.com/files/public/69adbe084cd3b016d9ae3891/b595cccce_donutExtras-131219.jar", "Tag": [ { "name": "AdamRAT", "colour": "#7bc235", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462415, "uuid": "a588f4c7-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://media.base44.com/files/public/69adbe084cd3b016d9ae3891/733184ba4_gambling-rig-121x2.jar", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462417, "uuid": "a64eb197-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://media.base44.com/files/public/69adbe084cd3b016d9ae3891/7f201bfb1_DonutMoneyDisplay-100.jar", "Tag": [ { "name": "AdamRAT", "colour": "#7bc235", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462418, "uuid": "a70f59ac-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://paper.recentbox.life/DivineX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: DivineX", "colour": "#ccb356", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462493, "uuid": "d3c2ea40-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://e-ifanyi.com/%E7%88%B1%E7%BF%BB%E8%AF%91-20260404.rar", "Tag": [ { "name": "keylogger", "colour": "#546475", "exportable": true, "hide_tag": false }, { "name": "MalwareX", "colour": "#14e65f", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462525, "uuid": "e73b51c4-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://release-assets.githubusercontent.com/github-production-release-asset/1201672648/2630ced6-3c20-444a-9e9c-5ea38846399c?sp=r&sv=2018-11-09&sr=b&spr=https&se=2026-04-06T08%3A27%3A39Z&rscd=attachment%3B+filename%3Dfile.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462527, "uuid": "e83f3264-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.14/bins/mao.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462527, "uuid": "e840a75e-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.14/bins/mao.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462527, "uuid": "e841ed4e-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.14/bins/mao.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462527, "uuid": "e8430e9f-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.14/bins/mao.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462527, "uuid": "e843cf10-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.14/bins/mao.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462527, "uuid": "e843d78a-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.14/bins/mao.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462528, "uuid": "e8fa5684-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rule-set.axiomaticgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462533, "uuid": "eb85ff6e-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.14/bins/mao.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462533, "uuid": "eb86005c-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.14/bins/mao.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462533, "uuid": "eb860d6f-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.14/bins/mao.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462533, "uuid": "eb87a4bf-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.14/bins/mao.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462533, "uuid": "eb916f76-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.14/bins/mao.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462533, "uuid": "eb918415-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.14/bins/mao.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462533, "uuid": "eb977278-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.14/bins/mao.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462533, "uuid": "eb9fb521-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.14/bins/mao.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462533, "uuid": "ebca0b3b-318e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.49.202:57888/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462594, "uuid": "100ea915-318f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.190.156.14/bins/mao.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462595, "uuid": "107e90b0-318f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.101:49274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462771, "uuid": "79cfad78-318f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.161.184:52519/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775462948, "uuid": "e2dd84d8-318f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-logic.axiomaticgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463137, "uuid": "53cdfcdf-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.170.242:52377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463192, "uuid": "7456a766-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/iran.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463192, "uuid": "747c35bf-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/iran.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463193, "uuid": "74d85154-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.56.112/cali.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463193, "uuid": "74d94530-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.56.112/cali.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463193, "uuid": "74e13be2-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.110.191/iran.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463193, "uuid": "74edebc7-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.56.112/cali.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463196, "uuid": "76eb18a9-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/iran.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463196, "uuid": "76eb1a60-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/iran.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463196, "uuid": "770901e0-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/iran.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463196, "uuid": "770b2198-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/iran.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463196, "uuid": "770eb8b1-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.56.112/cali.powerpc-440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463196, "uuid": "7715b2bb-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/iran.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "79f35005-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.110.191/iran.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "79f6e5e5-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.110.191/iran.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a01f9a2-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.56.112/cali.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a020ce0-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/iran.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a027db5-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.56.112/cali.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a074b85-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.56.112/cali.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a099117-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.56.112/cali.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a109d26-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.110.191/iran.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a12fb80-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.56.112/cali.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a144165-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.125.106:45381/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a18ef4f-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.56.112/cali.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a1b9f86-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.110.191/iran.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a2280b0-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.110.191/iran.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a22adab-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.110.191/iran.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a244387-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/iran.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a256052-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.110.191/iran.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a26079d-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/iran.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a26936e-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/iran.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a269eac-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.110.191/iran.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a26b13b-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/iran.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a27223f-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.56.112/cali.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a274297-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.110.191/iran.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463201, "uuid": "7a2c7c04-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/iran.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463202, "uuid": "7a30b4e6-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.110.191/iran.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463202, "uuid": "7a323140-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.56.112/cali.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463202, "uuid": "7a328de1-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.56.112/cali.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463202, "uuid": "7a329ca6-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.110.191/iran.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463202, "uuid": "7a33f5ec-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.110.191/iran.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463205, "uuid": "7c5f7083-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.25.56.112/cali.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463205, "uuid": "7c63292c-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.110.191/iran.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463205, "uuid": "7c716172-3190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/iran.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463547, "uuid": "485b57e6-3191-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mesh-static.axiomaticgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463619, "uuid": "72eed53f-3191-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.52.149.207:41857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463727, "uuid": "b3a797f5-3191-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.64.192:59623/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463789, "uuid": "d895afef-3191-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://msgrouppolicy.vg/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "dropping-LummaStealer", "colour": "#647eab", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775463969, "uuid": "438983ec-3192-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fixed-point.axiomaticgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775464509, "uuid": "85a5a5ca-3193-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-matrix.axiomaticgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775464567, "uuid": "a7d260ca-3193-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/xy.exe", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775464568, "uuid": "a8cb9d82-3193-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/ability_3759.42.6_INSTALL.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775464629, "uuid": "cd490f33-3193-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://msedge.vg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "dropping-LummaStealer", "colour": "#647eab", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775464696, "uuid": "f4e76258-3193-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.245.107.223:46005/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775464814, "uuid": "3b48a4fa-3194-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.67.122:40997/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465047, "uuid": "c64dcdea-3194-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/l44443934-ui/aaa/refs/heads/main/he.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465047, "uuid": "c65ff417-3194-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/l44443934-ui/aaa/raw/refs/heads/main/he.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465048, "uuid": "c6f40516-3194-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://law-check.axiomaticgrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465056, "uuid": "cbb17703-3194-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cccimg.com/down.php/4e950740bf977e9c89d48cd323c3c0b2.bat", "Tag": [ { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465112, "uuid": "ece8ffd8-3194-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.125.106:45381/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465168, "uuid": "0e20fb31-3195-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/l44443934-ui/Violet/raw/refs/heads/main/Violet.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465168, "uuid": "0e3ff973-3195-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/l44443934-ui/app/raw/refs/heads/main/Violet.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465169, "uuid": "0ec49854-3195-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/l44443934-ui/aaaa/raw/refs/heads/main/hey.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465170, "uuid": "0f38b2ac-3195-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/l44443934-ui/99/raw/refs/heads/main/VIolet.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465172, "uuid": "109f19d8-3195-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/l44443934-ui/aa/raw/refs/heads/main/hey.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "VioletWorm", "colour": "#797d88", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465290, "uuid": "574aa246-3195-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.52.149.207:41857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465413, "uuid": "a00c6df6-3195-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.159.99:45804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465590, "uuid": "09ab15de-3196-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thesis-sync.dialecticflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465658, "uuid": "32a238c0-3196-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.205.35:36010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465661, "uuid": "34566865-3196-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.19.69:37002/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775465898, "uuid": "c15c7ae2-3196-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.96.190:59697/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775466080, "uuid": "2d9dc1b1-3197-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.190.3:51751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775466130, "uuid": "4bb26316-3197-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://anti-node.dialecticflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775466556, "uuid": "49c871ce-3198-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.155.139:60064/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775466612, "uuid": "6af9bf20-3198-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://synth-portal.dialecticflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775466621, "uuid": "709294c9-3198-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.190.43:37039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775467027, "uuid": "627a0876-3199-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.24.7.61:38015/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775467153, "uuid": "ad366b67-3199-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.159.99:45804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775467209, "uuid": "cf016e2c-3199-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://debate-log.dialecticflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775467326, "uuid": "14b42889-319a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.223.164:48104/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775467390, "uuid": "3a741edd-319a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shift-point.dialecticflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775467578, "uuid": "aaaece51-319a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.190.3:51751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775467757, "uuid": "15be133f-319b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.119.54:35214/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775467930, "uuid": "7c97ecaf-319b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.65.222:44369/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775467932, "uuid": "7dbaa7dd-319b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://motion-svc.dialecticflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775468003, "uuid": "a7e73d6c-319b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.190.43:37039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775468474, "uuid": "c0b459b5-319c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://infer-unit.inferentialcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775468527, "uuid": "e024f1ea-319c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.0.146:40185/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775469127, "uuid": "464f0d6a-319e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.223.164:48104/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775469253, "uuid": "9122afa8-319e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lead-trace.inferentialcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775469261, "uuid": "95c81767-319e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.245.107.223:46005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775469495, "uuid": "219ae15a-319f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://logic-vault.inferentialcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775469862, "uuid": "fc30d6ed-319f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.158:40192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775470035, "uuid": "638e1daf-31a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hint-api.inferentialcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775470281, "uuid": "f5e80391-31a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.145.25:59275/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775470328, "uuid": "11d3eafe-31a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.93.65:52411/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775470328, "uuid": "11fca783-31a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.180.207:40674/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775470349, "uuid": "1e580749-31a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.127.252:33249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775470516, "uuid": "81dc194c-31a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://guess-node.inferentialcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775470520, "uuid": "846d5815-31a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.163.179:53077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471055, "uuid": "c383a2ce-31a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://step-wise.inferentialcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471141, "uuid": "f64987c2-31a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.80.3:56840/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471155, "uuid": "fee958f7-31a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.185.44:41568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471178, "uuid": "0ca3dc9a-31a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.216.39/bins/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471180, "uuid": "0def100d-31a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.121.243:49826/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471534, "uuid": "e0beb3d4-31a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.158:40192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471590, "uuid": "021fe819-31a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://abstract-io.theoreticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471649, "uuid": "250673ff-31a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.121.243:49826/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471719, "uuid": "4ec3d5a0-31a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.163.179:53077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471826, "uuid": "8eb6bd85-31a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.93.65:52411/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775471948, "uuid": "d7a51791-31a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.146.190:46363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775472074, "uuid": "2283d7cd-31a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://model-check.theoreticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775472128, "uuid": "4308a5ec-31a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.135.87:50617/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775472550, "uuid": "3e97a90b-31a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.172.113:52901/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775472615, "uuid": "654efe94-31a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://map-project.theoreticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473155, "uuid": "a6e4f74a-31a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ideal-node.theoreticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473398, "uuid": "37af83b6-31a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.78.22:53458/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473520, "uuid": "809afea1-31a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.144.209:59574/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775473631, "uuid": "c2863032-31a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://space-time.theoreticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775474062, "uuid": "c3ce859c-31a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.61:54977/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775474175, "uuid": "06f2bc28-31aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://frame-api.theoreticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775474227, "uuid": "25c588d4-31aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:53971/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775474535, "uuid": "dd6060dd-31aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.61:54977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775474649, "uuid": "2126d6c8-31ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://order-logic.systematiclayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775474898, "uuid": "b58ed333-31ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.156.123:36974/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775474956, "uuid": "d881f023-31ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.globalchat.site/download/DiagETLUpdate_Installer.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775475078, "uuid": "210384ba-31ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.49.242:47506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775475188, "uuid": "62d74887-31ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.144.209:59574/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775475249, "uuid": "870fdd67-31ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://step-monitor.systematiclayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775475724, "uuid": "a273afaf-31ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8301037712/W2hGvST.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775475733, "uuid": "a78a52ef-31ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rank-index.systematiclayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775476271, "uuid": "e80ed901-31ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://file-stack.systematiclayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775476538, "uuid": "87807e30-31af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.156.123:36974/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775476627, "uuid": "bc6761be-31af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.44.243:56059/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775476628, "uuid": "bcb9cd72-31af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.231.44:51959/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775476816, "uuid": "2ce88930-31b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://archive-hub.systematiclayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775476942, "uuid": "78520cc6-31b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.44.243:56059/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775477169, "uuid": "ff292414-31b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://line-secure.systematiclayer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775477589, "uuid": "f9f06805-31b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brain-weave.cognitivefabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775477901, "uuid": "b3c2ddd2-31b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.172.113:52901/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775478316, "uuid": "ab0f023e-31b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thought-api.cognitivefabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775478377, "uuid": "cf3df5b2-31b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.76.148:46506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775478509, "uuid": "1e2201c6-31b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neural-link.cognitivefabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775478941, "uuid": "1fec8721-31b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mind-web.cognitivefabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775479331, "uuid": "07e65680-31b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sense-data.cognitivefabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775479569, "uuid": "9632d591-31b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.110.198:38787/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775479579, "uuid": "9bbd69f5-31b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.76.148:46506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775479629, "uuid": "b9d0055a-31b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:36165/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775479639, "uuid": "bfc98340-31b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://perception-svc.cognitivefabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775479700, "uuid": "e3f2bce4-31b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.92.213:44773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775479927, "uuid": "6b90750b-31b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.188.139:39201/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775480058, "uuid": "b99dd3e2-31b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ratio-point.rationalmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775480239, "uuid": "2536a137-31b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.228.215:43855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775480529, "uuid": "d26c6a5b-31b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.207.134:34110/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775480531, "uuid": "d334028e-31b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-node.rationalmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775480890, "uuid": "a929623f-31b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://think-tank.rationalmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775481136, "uuid": "3bbc2969-31ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.19.26:57470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775481252, "uuid": "810a9688-31ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-head.rationalmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775481911, "uuid": "0a114dfe-31bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://calc-logic.rationalmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775482091, "uuid": "75497a85-31bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://decision-svc.rationalmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775482392, "uuid": "28690152-31bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://67.20.225.220:41113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775482449, "uuid": "4a5250bf-31bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://break-down.analyticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775482519, "uuid": "742a1d70-31bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.61.101:49876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775482812, "uuid": "22de2af6-31be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stat-render.analyticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775482928, "uuid": "67ee45ee-31be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.125.7.77:59115/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775483122, "uuid": "db7c719f-31be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.19.26:57470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775483291, "uuid": "40a8c184-31bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-scan.analyticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775483585, "uuid": "efe2b833-31bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7362035837/LalmHOj.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775483590, "uuid": "f2c53d13-31bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-split.analyticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775483958, "uuid": "ce017631-31c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.17.133:52065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775484250, "uuid": "7c0a20ef-31c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-track.analyticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775484430, "uuid": "e772192d-31c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.125.7.77:59115/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775484430, "uuid": "e79f80d4-31c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trace-result.analyticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775484614, "uuid": "54d716fa-31c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.61.101:49876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775484912, "uuid": "068b5b40-31c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://step-sync.methodicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485091, "uuid": "712a5112-31c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow-order.methodicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485331, "uuid": "0017afd0-31c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trace-audit.methodicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485449, "uuid": "46abfa57-31c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.91.97.92/032.txt", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485450, "uuid": "4798c961-31c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/ydZXHTFS/image.png", "Tag": [ { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485453, "uuid": "4917dde9-31c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.144.108/i88.txt", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485453, "uuid": "4917ec14-31c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/PJMG3BXJ/image.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485470, "uuid": "5333c2dd-31c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://one.immortalday.life/DivineX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: dx2026", "colour": "#48f582", "exportable": true, "hide_tag": false }, { "name": "pw-dx2026", "colour": "#d631c5", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485513, "uuid": "6cde8a87-31c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.148.195.30/ffa.txt", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485580, "uuid": "949d4840-31c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.17.133:52065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485693, "uuid": "d85c04b0-31c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://path-logic.methodicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775485813, "uuid": "1fa5dab6-31c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.101.82.22:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&t=massspamming&c=massspamming&c=&c=&c=&c=&c=&c=&c=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775486049, "uuid": "ac93ddf9-31c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rule-monitor.methodicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775486112, "uuid": "d1dfd8b0-31c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.76.223:32865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775486176, "uuid": "f7fead73-31c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.231.45:54260/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775486347, "uuid": "5e3da245-31c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://seq-manager.methodicstream.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775486540, "uuid": "d10160be-31c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.231.45:54260/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775486710, "uuid": "361780d2-31c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://strict-code.formalisticcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775486783, "uuid": "61ed122b-31c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.92.106:54615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775487070, "uuid": "0c9f12b4-31c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-syntax.formalisticcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775487368, "uuid": "be476d00-31c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://proof-vault.formalisticcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775487732, "uuid": "97851495-31c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://check-point.formalisticcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775487913, "uuid": "03a7a924-31ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.25.95:35908/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775487914, "uuid": "04062955-31ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.230.160:41348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775488088, "uuid": "6ba0a35f-31ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://norm-engine.formalisticcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775488338, "uuid": "00eb5e38-31cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.46.83.29:60673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775488388, "uuid": "1ebfd0a7-31cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://axis-portal.formalisticcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775488391, "uuid": "203a3e4d-31cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.46.83.29:60673/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775488391, "uuid": "2049ae9a-31cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:53971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775488694, "uuid": "d500aa5b-31cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://top-down-io.deductivegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775489052, "uuid": "aa0e12b3-31cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://result-node.deductivegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775489415, "uuid": "829cab8a-31cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://proof-static.deductivegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775489597, "uuid": "ef45ee6c-31cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.230.160:41348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775489768, "uuid": "55079152-31ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://law-verify.deductivegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775489902, "uuid": "a4d19d81-31ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.0.51:57452/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490077, "uuid": "0d289691-31cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-extract.deductivegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490427, "uuid": "de1d213b-31cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.231.44:51959/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490562, "uuid": "2e61b0c1-31d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.44.32:53485/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490674, "uuid": "7150092b-31d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://unit-logic.deductivegrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490799, "uuid": "bb44d0d4-31d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/payload/ne4769eap2uv/xurc7j.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490800, "uuid": "bbfbaa90-31d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/payload/ne4769eap2uv/ln8cw1ox1f", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490800, "uuid": "bbfbab30-31d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/payload/ne4769eap2uv/3vrtjbxplo", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490800, "uuid": "bc05b50f-31d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/payload/ne4769eap2uv/rigdtn0fpm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490801, "uuid": "bcc2bece-31d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/payload/ne4769eap2uv/rt6l46cwdn", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490801, "uuid": "bcc7d148-31d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/payload/ne4769eap2uv/5u6pbsspr6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490801, "uuid": "bcce5cad-31d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/payload/ne4769eap2uv/aygbsqq0c4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490803, "uuid": "be1a0f35-31d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/payload/ne4769eap2uv/zlr01030u5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490803, "uuid": "be1a2bcf-31d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/payload/ne4769eap2uv/rh1ele5p8l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490803, "uuid": "be233ddc-31d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/payload/ne4769eap2uv/3yahbbprg4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490850, "uuid": "d9b63950-31d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pattern-dev.inductiveflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490865, "uuid": "e2f3c9c0-31d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/payload/ne4769eap2uv/rduiqsxg66", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775490865, "uuid": "e2f42b91-31d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/payload/ne4769eap2uv/547e510g2m", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775491033, "uuid": "46fa282f-31d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-guess.inductiveflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775491100, "uuid": "6f258441-31d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.68.80:42363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775491407, "uuid": "25e2641e-31d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.0.51:57452/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775491414, "uuid": "2a28a2d0-31d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.53.218:41063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775491455, "uuid": "426b18c1-31d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trend-sensor.inductiveflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775491752, "uuid": "f37e37da-31d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://likely-hood.inductiveflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775492054, "uuid": "a7c046eb-31d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flux-scan.inductiveflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775492184, "uuid": "f53fff20-31d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.44.32:53485/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775492474, "uuid": "a1a5d3fe-31d4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-drift.inductiveflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775492529, "uuid": "c27a625c-31d4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.122.124:53839/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775492720, "uuid": "34858801-31d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bit-weave.logicalfabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775492900, "uuid": "9ff9b196-31d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.164.254:47652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775493021, "uuid": "e7bfaa47-31d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.120.41:52340/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775493069, "uuid": "0497722a-31d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate-secure.logicalfabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775493382, "uuid": "beed9c2b-31d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.39.122.214:55049/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775493383, "uuid": "bfa22732-31d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.52.205.167:58619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775493433, "uuid": "dd519936-31d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mesh-router.logicalfabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775493669, "uuid": "69fafa68-31d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.53.218:41063/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775493729, "uuid": "8dd1099e-31d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.36.108:36740/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775493734, "uuid": "90d26efc-31d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thread-svc.logicalfabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775494090, "uuid": "651011d2-31d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stitch-api.logicalfabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775494455, "uuid": "3ee3edb4-31d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-net.logicalfabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775494629, "uuid": "a64aa6f6-31d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.130.5:34795/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775494753, "uuid": "f075c9c9-31d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mind-stack.cognitivematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775495003, "uuid": "857436fd-31da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.39.122.214:55049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775495115, "uuid": "c8633289-31da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thought-hub.cognitivematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775495240, "uuid": "127296aa-31db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.129.91.47:55421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775495243, "uuid": "1428dadb-31db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.97.113.40:50942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775495469, "uuid": "9b43a384-31db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neural-io.cognitivematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775495529, "uuid": "beff194b-31db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.36.108:36740/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775495774, "uuid": "512031c2-31dc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sense-gate.cognitivematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496136, "uuid": "28cd1660-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brain-api.cognitivematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496207, "uuid": "5348074e-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.2.196.255:41225/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496377, "uuid": "b870d26b-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.97.113.40:50942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496449, "uuid": "e346300d-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/zyre.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "ec861301-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vision-node.cognitivematrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "ec956fa9-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/get%20files/client", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "ec9d1149-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/zyre.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "eca2e353-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/zyre.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "eca891ab-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/zyre.apk", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "ecab049e-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/zyre.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "ecab5a23-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/zyre.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "ecb5d921-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/zyre.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "ecb5fb74-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/zyre.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "ecb604fd-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/zyre.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "ecb80fb9-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/zyre.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "ecb904c5-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/zyre.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "ecbae317-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/zyre.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "ecbaf007-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/zyre.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "ecbc8554-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/zyre.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496465, "uuid": "ecd45b81-31dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:4949/binss/zyre.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496792, "uuid": "afe30a75-31de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://word-map.semanticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775496909, "uuid": "f5900f3b-31de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.129.91.47:55421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775497150, "uuid": "8514cf50-31df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://term-index.semanticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775497512, "uuid": "5d05516c-31e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meaning-svc.semanticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775497580, "uuid": "852c76de-31e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.28.216:52542/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775497812, "uuid": "0f69781a-31e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tag-portal.semanticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775498169, "uuid": "e4983b6f-31e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-trace.semanticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775498239, "uuid": "0e11561e-31e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.122.124:53839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775498302, "uuid": "33e32d82-31e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.171.85:54017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775498355, "uuid": "532b0e0b-31e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.2.196.255:41225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775498531, "uuid": "bc00a5e1-31e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-point.semanticvector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775498830, "uuid": "6e605174-31e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://frame-build.structuralcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775499191, "uuid": "457bad85-31e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://beam-logic.structuralcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775499198, "uuid": "49a3d7b4-31e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.171.85:54017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775499487, "uuid": "f605f31c-31e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solid-store.structuralcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775499790, "uuid": "aa5d9666-31e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-support.structuralcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775500028, "uuid": "388deb92-31e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.203.83:52121/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775500147, "uuid": "7f3a4373-31e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stress-node.structuralcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775500452, "uuid": "35476b53-31e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://load-api.structuralcore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501047, "uuid": "97a89ddd-31e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.101/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501047, "uuid": "97ac3d73-31e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.101/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501057, "uuid": "9db4653a-31e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.101/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501057, "uuid": "9db467c0-31e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.101/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501057, "uuid": "9db83843-31e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.101/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501057, "uuid": "9dbc08e8-31e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.101/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501111, "uuid": "bdea9d05-31e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://idea-vault.abstractlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501114, "uuid": "bf9ca818-31e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.101/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501289, "uuid": "284ab6e3-31e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://model-check.abstractlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501351, "uuid": "4d26c5c1-31e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.233.117.15:51846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501456, "uuid": "8bb4790f-31e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yifanyisetup32.oss-cn-hongkong.aliyuncs.com/yifanyi3.12.zip", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501458, "uuid": "8d00df65-31e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://2026yifanyi.oss-cn-hongkong.aliyuncs.com/yifanyi3.12.1.zip", "Tag": [ { "name": "kryptik", "colour": "#98dba5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501458, "uuid": "8d05eec6-31e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yifanyi-67349x32.oss-cn-hongkong.aliyuncs.com/yifanyi-67349x32.zip", "Tag": [ { "name": "Gh0stRAT", "colour": "#a8d97f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501458, "uuid": "8d17e99c-31e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://youdownload.oss-cn-hongkong.aliyuncs.com/yfanyi_win_Installer_PC_x64.zip", "Tag": [ { "name": "Kryplod", "colour": "#b67714", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501473, "uuid": "95dc251d-31e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://maiqiaqia1.s3.ap-east-1.amazonaws.com/Win-malqla-x64.zip", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501510, "uuid": "ab9dd4e1-31e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-3f298b361d774ae0a68be902f3ed9d89.r2.dev/4.31507MQ.zip", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501515, "uuid": "af0ec712-31e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yiyikxcmasndfaf56433145334461asdas.oss-ap-southeast-1.aliyuncs.com/fy_yifanyi_fanyiweb_22356145.zip", "Tag": [ { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501536, "uuid": "bb7738a8-31e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://seonn199.bj.bcebos.com/yfanyiy.zip", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501546, "uuid": "c14daa19-31e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blank-space.abstractlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775501553, "uuid": "c5946b29-31e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.50.50:55125/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775502128, "uuid": "1be463b5-31eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pure-node.abstractlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775502315, "uuid": "8becf3b7-31eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://theory-svc.abstractlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775502550, "uuid": "17fffe61-31ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ghost-api.abstractlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775502742, "uuid": "8a1b82df-31ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.215.22.234:54945/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775502789, "uuid": "a62d188e-31ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://entity-hub.conceptmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775503211, "uuid": "a1d899a8-31ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://root-source.conceptmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775503572, "uuid": "78d59fe9-31ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud-draft.conceptmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775503874, "uuid": "2cbeedd3-31ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://view-port.conceptmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775504231, "uuid": "01886f07-31f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sketch-node.conceptmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775504412, "uuid": "6dd2c3e4-31f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.23.43:55488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775504534, "uuid": "b64a58e4-31f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://master-index.conceptmatrix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775504828, "uuid": "65495c43-31f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.176.25:48828/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775504889, "uuid": "89d7608f-31f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://call-center.exhortshelk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775505009, "uuid": "d1685d01-31f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7362035837/aREfDTa.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775505191, "uuid": "3dcfc278-31f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.255:54185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775505249, "uuid": "605533f4-31f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://voice-api.exhortshelk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775505554, "uuid": "1605f38a-31f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://push-notify.exhortshelk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775505910, "uuid": "ea8bfc2f-31f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alert-node.exhortshelk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775506275, "uuid": "c436c570-31f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sync-logic.exhortshelk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775506283, "uuid": "c88521c0-31f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.255.55.138:56605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775506326, "uuid": "e263b797-31f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.176.25:48828/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775506446, "uuid": "29a11ddb-31f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7362035837/aREfDTa.msi", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775506571, "uuid": "749d0267-31f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://relay-svc.exhortshelk.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775506585, "uuid": "7cd460e2-31f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.255:54185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775506868, "uuid": "25889a47-31f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gloss-check.enameledtack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775507229, "uuid": "fcb04eaf-31f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hard-point.enameledtack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775507238, "uuid": "020ab826-31f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.224.40:32953/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775507590, "uuid": "d3dbc2e0-31f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pin-storage.enameledtack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775507889, "uuid": "85d76de5-31f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://surface-api.enameledtack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775507945, "uuid": "a74bed88-31f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7359455182/Et5cbkQ.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775508020, "uuid": "d3db5660-31f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.247.90:37586/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775508127, "uuid": "13ce6143-31f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.123.174:56631/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775508311, "uuid": "81b587fc-31f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coat-logic.enameledtack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775508552, "uuid": "1160fa5c-31fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fix-node.enameledtack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775508909, "uuid": "e606712b-31fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://query-hub.howaskfor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775509268, "uuid": "bc15e1ed-31fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://request-io.howaskfor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775509518, "uuid": "514112af-31fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.49.161:39460/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775509571, "uuid": "7054b6d0-31fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://help-desk.howaskfor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775509627, "uuid": "92077a9c-31fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.247.90:37586/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775509685, "uuid": "b488efce-31fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8301037712/ODdofh9.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775509933, "uuid": "481340b8-31fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://search-svc.howaskfor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775510290, "uuid": "1d34be48-31fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://client-gate.howaskfor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775510361, "uuid": "4781c025-31fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.104.45:44279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775510419, "uuid": "69e4cfb1-31fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.30.6:52717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775510655, "uuid": "f689a035-31fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-form.howaskfor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775510947, "uuid": "a4ee4901-31ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.148.182:58793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775510948, "uuid": "a55c5210-31ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blast-zone.explosionjunip.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775511069, "uuid": "ed809733-31ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.17.74.18:46811/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775511199, "uuid": "3b127474-3200-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.49.161:39460/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775511552, "uuid": "0d6c0c69-3201-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fire-wall.explosionjunip.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775511732, "uuid": "78c9ff8e-3201-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wood-trace.explosionjunip.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775512027, "uuid": "28443db1-3202-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.21:44071/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775512027, "uuid": "2844469b-3202-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.151.21:44071/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775512033, "uuid": "2c1420f2-3202-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-core.explosionjunip.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775512043, "uuid": "323d3ab2-3202-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.148.182:58793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775512269, "uuid": "b8fa654a-3202-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://plant-api.explosionjunip.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775512633, "uuid": "91a46b1c-3203-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://boom-logic.explosionjunip.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775512988, "uuid": "65615c13-3204-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://waste-node.kokotkasquand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775513348, "uuid": "3c05d3ac-3205-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://loss-monitor.kokotkasquand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775513590, "uuid": "cc4e385f-3205-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spend-api.kokotkasquand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775513784, "uuid": "3f72d7a2-3206-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.245.149:33591/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775513784, "uuid": "3f919a30-3206-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.8.123:35319/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775513947, "uuid": "a09a835a-3206-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://track-hub.kokotkasquand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775514373, "uuid": "9e939ac8-3207-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://limit-gate.kokotkasquand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775514429, "uuid": "c0211fb5-3207-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.170.147:52941/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775514429, "uuid": "c02b38d1-3207-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.225.141:49227/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775514674, "uuid": "520edcf5-3208-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://user-pool.kokotkasquand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775514918, "uuid": "e3911289-3208-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.37.20:57984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775514973, "uuid": "0437d6a2-3209-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wave-point.beckonuncert.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775515327, "uuid": "d75c8651-3209-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.118.240:45045/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775515332, "uuid": "da26b4d3-3209-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://risk-check.beckonuncert.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775515344, "uuid": "e1adff57-3209-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.92.71:34106/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775515626, "uuid": "89a90c59-320a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.118.240:45045/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775515630, "uuid": "8be3d04d-320a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://call-sign.beckonuncert.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775515928, "uuid": "3dadc8fa-320b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.225.141:49227/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775515987, "uuid": "610b7af9-320b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hint-node.beckonuncert.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775516350, "uuid": "396b04f8-320c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://guess-api.beckonuncert.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775516469, "uuid": "80482e66-320c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.37.20:57984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775516651, "uuid": "ecaf6814-320c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-end.beckonuncert.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775517018, "uuid": "c712aa14-320d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rule-block.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775517260, "uuid": "576943b8-320e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.92.71:34106/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775517314, "uuid": "77fb09fc-320e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-audit.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775517317, "uuid": "79c4330d-320e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.195.247:48735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775517668, "uuid": "4a9e0c7a-320f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hard-check.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775517861, "uuid": "bdba2338-320f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.123.174:56631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775517920, "uuid": "e10719f4-320f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.84.137:54139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775517970, "uuid": "fe7fff7f-320f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://test-engine.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775518028, "uuid": "21078926-3210-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.244.133:57725/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775518038, "uuid": "272aba33-3210-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.39.19.233:33556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775518328, "uuid": "d3eff214-3210-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.93.176:50053/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775518338, "uuid": "da492889-3210-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.99.250.185:40861/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775518390, "uuid": "f8db341a-3210-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stop-logic.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775518519, "uuid": "4627469c-3211-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.92.12:47602/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775518689, "uuid": "ab70b9f5-3211-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-api.drillobjection.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775518927, "uuid": "393c2367-3212-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.125.8:36772/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775519048, "uuid": "81936f07-3212-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bio-trace.bactergreat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775519349, "uuid": "34f0bcd6-3213-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cell-logic.bactergreat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775519354, "uuid": "376d2855-3213-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.197.154:41343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775519417, "uuid": "5d2d683e-3213-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.195.247:48735/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775519709, "uuid": "0b16b5d4-3214-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://growth-hub.bactergreat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775519780, "uuid": "35c1eedf-3214-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.39.19.233:33556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775519781, "uuid": "35f33e51-3214-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.99.250.185:40861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775519826, "uuid": "51414954-3214-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.125.8:36772/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501540, "uuid": "bda339fd-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.50.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775491086, "uuid": "669a5329-31d1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.68.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775487906, "uuid": "ff083a30-31c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.186.230.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775458507, "uuid": "8bfe27bf-3185-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.225.173.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775455685, "uuid": "f9f4ed60-317e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.118.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471108, "uuid": "e29c8cfb-31a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.80.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775470267, "uuid": "ed4b88e2-31a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.145.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775470506, "uuid": "7c0c1c08-31a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.163.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775493008, "uuid": "e0018da5-31d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.120.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775488325, "uuid": "f9234f28-31ca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.46.83.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775467925, "uuid": "79b9732c-319b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.65.222", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775481125, "uuid": "3520fcc3-31ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.19.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775455926, "uuid": "898bcf11-317f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.201.148", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775514425, "uuid": "bdbe9faf-3207-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.225.141", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775491385, "uuid": "19102204-31d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.53.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775517306, "uuid": "73252145-320e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.195.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775455265, "uuid": "ffec3822-317d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.96.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775449745, "uuid": "2566f35a-3171-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.78.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775453045, "uuid": "d434efae-3178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.248.121.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775451725, "uuid": "c1bec11b-3175-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.143.132", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775505185, "uuid": "3a8d3a2c-31f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.142.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775455745, "uuid": "1db4ebbb-317f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.142.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775453226, "uuid": "4027ed73-3179-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.26.227.108", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775482925, "uuid": "6602a8f4-31be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.125.7.77", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775474885, "uuid": "adc936e2-31ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.156.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775518025, "uuid": "1f670bfd-3210-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.180.244.133", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775438466, "uuid": "e27f61c4-3156-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.242.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775518326, "uuid": "d2d6377c-3210-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.99.250.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775496187, "uuid": "471dc992-31dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.2.196.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775438706, "uuid": "71d5c099-3157-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.156.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775498284, "uuid": "28e0f1aa-31e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.171.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775440624, "uuid": "e93bf062-315b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.203.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775434145, "uuid": "d2f06184-314c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.5.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775445125, "uuid": "637962e8-3166-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.234.155.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775494626, "uuid": "a4e76c25-31d9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.130.5", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775466607, "uuid": "67e0be63-3198-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.190.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775495226, "uuid": "0a1bdda2-31db-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.129.91.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775467025, "uuid": "60e0d8f4-3199-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.24.7.61", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775476625, "uuid": "bb2b43e5-31af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.231.44", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775493726, "uuid": "8c1bcf16-31d7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.36.108", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463725, "uuid": "b2316b29-3191-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.64.192", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775506266, "uuid": "be6449c5-31f4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "150.255.55.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485445, "uuid": "44993cf5-31c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "167.148.195.30", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775438884, "uuid": "dbf992f1-3157-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.57.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775510344, "uuid": "3d82820a-31fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.104.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775446925, "uuid": "94a319b7-316a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.226.235.173", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485445, "uuid": "449a5f19-31c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.144.108", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775446024, "uuid": "7bb19eb7-3168-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.244.11.1", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442425, "uuid": "1a5a8185-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.244.15.38", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775461925, "uuid": "818f8ab5-318d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.161.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775492526, "uuid": "c0f85af9-31d4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.122.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775443745, "uuid": "2d06c237-3163-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.153.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775513765, "uuid": "346cd107-3206-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.245.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775464807, "uuid": "370ad17f-3194-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.67.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775461506, "uuid": "87c96b59-318c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.170.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775458025, "uuid": "6c91f010-3184-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.87.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775470326, "uuid": "10d896f1-31a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.127.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775493366, "uuid": "b590e775-31d6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.52.205.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442364, "uuid": "f62585fb-315f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.26.192.157", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501407, "uuid": "6e4f6600-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2026yifanyi.oss-cn-hongkong.aliyuncs.com" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775518925, "uuid": "37b8da6a-3212-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.125.8", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775466545, "uuid": "42d80540-3198-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.155.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775513765, "uuid": "34713da0-3206-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.8.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775460365, "uuid": "df6d03dd-3189-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.17.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775472545, "uuid": "3b7f8e33-31a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.134.172.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775504406, "uuid": "6a261a48-31f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.23.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490546, "uuid": "2493b4c0-31d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.44.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775478366, "uuid": "c8e16d6f-31b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.76.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775448425, "uuid": "12a70091-316e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.195.127", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775467324, "uuid": "138a1245-319a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.223.164", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775437206, "uuid": "f3d98337-3153-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.180.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473386, "uuid": "308f4900-31a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.78.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775476625, "uuid": "bb2b4c34-31af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.219.44.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775460306, "uuid": "bc07cb8a-3189-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.101.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775487906, "uuid": "ff085193-31c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.25.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775442724, "uuid": "ccebe247-3160-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.34.25.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463605, "uuid": "6ad1bb29-3191-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.52.149.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462525, "uuid": "e6bd4da4-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.49.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775452985, "uuid": "b0bd8ac5-3178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.87.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775519345, "uuid": "323e7582-3213-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.197.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775507225, "uuid": "fa0067b9-31f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.224.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775504825, "uuid": "63bd19b6-31f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.176.25", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775472126, "uuid": "4156a776-31a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.135.87", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471944, "uuid": "d5503a8c-31a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.146.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775447406, "uuid": "b31b728d-316b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.236.150.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775514425, "uuid": "bdbed5b3-3207-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.170.147", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775486165, "uuid": "f16d7231-31c5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.231.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775444525, "uuid": "fde0ad1d-3164-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.232.62", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775457605, "uuid": "72604f85-3183-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.59.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775435525, "uuid": "098665a9-3150-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.145.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775492887, "uuid": "981daec6-31d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.164.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485808, "uuid": "1c77958d-31c5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.101.82.22", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775511065, "uuid": "eb045c4a-31ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.17.74.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775502725, "uuid": "800aa2fa-31ec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.215.22.234", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465645, "uuid": "2aa194d1-3196-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.19.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775514906, "uuid": "dc3066fe-3208-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.37.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775515325, "uuid": "d5f97f5d-3209-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.118.240", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471165, "uuid": "049b218e-31a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.121.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465406, "uuid": "9c6866ab-3195-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.159.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775517907, "uuid": "d8f12dd1-320f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.84.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775479689, "uuid": "dd6ba3f4-31b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.247.92.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775515325, "uuid": "d5f912c3-3209-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.247.92.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775518326, "uuid": "d2d6474a-3210-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.247.93.176", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462345, "uuid": "7b66928c-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.25.56.112", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462407, "uuid": "a088016a-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.168.110.191", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501045, "uuid": "9680423b-31e8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.11.167.101", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462525, "uuid": "e6bdba05-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.190.156.14", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471586, "uuid": "ff6e983b-31a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "abstract-io.theoreticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775505906, "uuid": "e8030ffd-31f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alert-node.exhortshelk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775466125, "uuid": "48b22628-3197-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "anti-node.dialecticflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775476807, "uuid": "27f84b50-31b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "archive-hub.systematiclayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775488386, "uuid": "1d1f8926-31cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "axis-portal.formalisticcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775517312, "uuid": "76657da8-320e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-audit.drillobjection.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490071, "uuid": "09ed6058-31cf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-extract.deductivegrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775464506, "uuid": "83ef2c81-3193-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-matrix.axiomaticgrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775499786, "uuid": "a818a5d6-31e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-support.structuralcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775487066, "uuid": "0a5c0f7f-31c8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-syntax.formalisticcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775499186, "uuid": "4267fc0a-31e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "beam-logic.structuralcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775460785, "uuid": "da0c27e8-318a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "being-node.ontologicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775519045, "uuid": "7f50f14e-3212-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bio-trace.bactergreat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775492709, "uuid": "2e20ef9b-31d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bit-weave.logicalfabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501540, "uuid": "bdad379e-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blank-space.abstractlogic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775510945, "uuid": "a3a34cd3-31ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blast-zone.explosionjunip.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775512630, "uuid": "900afdf4-3203-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "boom-logic.explosionjunip.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462408, "uuid": "a11762e9-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bot.cdnlivechatinc.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775496131, "uuid": "25e9e57b-31dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brain-api.cognitivematrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775477585, "uuid": "f74189db-31b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brain-weave.cognitivefabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775482444, "uuid": "47d55cea-31bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "break-down.analyticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775481906, "uuid": "06e762de-31bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "calc-logic.rationalmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775504885, "uuid": "873bf81a-31f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "call-center.exhortshelk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775515627, "uuid": "89e99d43-320a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "call-sign.beckonuncert.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465048, "uuid": "c6e4a03d-3194-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cccimg.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462407, "uuid": "a0e4908b-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdnlivechatinc.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775519345, "uuid": "324b363c-3213-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cell-logic.bactergreat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462345, "uuid": "7b9aba10-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "change.alikerwater.life" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775487725, "uuid": "93965134-31c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "check-point.formalisticcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775481246, "uuid": "7d620f4d-31ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-head.rationalmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775510286, "uuid": "1ae5d3a5-31fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "client-gate.howaskfor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775503566, "uuid": "7565191f-31ee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloud-draft.conceptmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775508307, "uuid": "7ef3db36-31f9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coat-logic.enameledtack.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462944, "uuid": "e0997607-318f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "core-logic.axiomaticgrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775494451, "uuid": "3c9c2592-31d9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "core-net.logicalfabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775510652, "uuid": "f4d036e1-31fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-form.howaskfor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775491031, "uuid": "45ab4eda-31d1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-guess.inductiveflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775483585, "uuid": "efcda29f-31bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-split.analyticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775467205, "uuid": "cc55a332-3199-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "debate-log.dialecticflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775482088, "uuid": "73438f07-31bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "decision-svc.rationalmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462345, "uuid": "7b8b9322-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "djasdajnsdnjgjg.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462407, "uuid": "a092aec2-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "e-ifanyi.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775502785, "uuid": "a400dd28-31ec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "entity-hub.conceptmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775461925, "uuid": "8194d518-318d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "exist-api.ontologicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775440445, "uuid": "7e212b4d-315b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fdsafa.best" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775476267, "uuid": "e5b7ccd5-31ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "file-stack.systematiclayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462345, "uuid": "7b87cc71-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "filehost.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775511550, "uuid": "0c42cb1e-3201-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fire-wall.explosionjunip.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775508545, "uuid": "0d11f373-31fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fix-node.enameledtack.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463965, "uuid": "411c743b-3192-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fixed-point.axiomaticgrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485086, "uuid": "6e9da34c-31c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flow-order.methodicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775492051, "uuid": "a5f8978b-31d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flux-scan.inductiveflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775474170, "uuid": "03f9cbe8-31aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "frame-api.theoreticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775498826, "uuid": "6bf8d0c5-31e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "frame-build.structuralcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775493067, "uuid": "0341b9b5-31d6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate-secure.logicalfabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775502485, "uuid": "f0e2cef4-31eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ghost-api.abstractlogic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775506864, "uuid": "2322ad4f-31f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gloss-check.enameledtack.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775512030, "uuid": "2a4ef675-3202-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-core.explosionjunip.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775519706, "uuid": "099c9e96-3214-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "growth-hub.bactergreat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775516348, "uuid": "37baeba9-320c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "guess-api.beckonuncert.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775470512, "uuid": "7f472bd6-31a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "guess-node.inferentialcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775517666, "uuid": "4977bd98-320f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hard-check.drillobjection.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775507225, "uuid": "fa099c23-31f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hard-point.enameledtack.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775509567, "uuid": "6df18fcc-31fc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "help-desk.howaskfor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775470030, "uuid": "60777671-31a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hint-api.inferentialcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775515985, "uuid": "5f997d45-320b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hint-node.beckonuncert.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501106, "uuid": "bb12d43f-31e8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "idea-vault.abstractlogic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473150, "uuid": "a42caea8-31a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ideal-node.theoreticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775468469, "uuid": "bdb4cf77-319c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "infer-unit.inferentialcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462345, "uuid": "7b947ba2-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "job.recentbox.life" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465045, "uuid": "c52f71a0-3194-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "law-check.axiomaticgrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775489766, "uuid": "53ae920b-31ce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "law-verify.deductivegrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775469191, "uuid": "6c4f1fbd-319e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lead-trace.inferentialcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775491749, "uuid": "f1eeac1d-31d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "likely-hood.inductiveflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775514365, "uuid": "99e1bc53-3207-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "limit-gate.kokotkasquand.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775477164, "uuid": "fcaabfe9-31b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "line-secure.systematiclayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775498165, "uuid": "e1f75f12-31e1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "link-trace.semanticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775500448, "uuid": "329ec692-31e7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "load-api.structuralcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775469491, "uuid": "1f317147-319f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "logic-vault.inferentialcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775513346, "uuid": "3ae9da5f-3205-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "loss-monitor.kokotkasquand.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501407, "uuid": "6e2b084e-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "maiqiaqia1.s3.ap-east-1.amazonaws.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775472609, "uuid": "613428ca-31a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "map-project.theoreticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775504527, "uuid": "b23899c9-31f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "master-index.conceptmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775497508, "uuid": "5a4e3cf1-31e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meaning-svc.semanticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462407, "uuid": "a0997798-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "media.base44.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775493430, "uuid": "dc07620d-31d6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mesh-router.logicalfabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463545, "uuid": "472ce6b5-3191-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mesh-static.axiomaticgrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775498526, "uuid": "b953a868-31e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-point.semanticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775484246, "uuid": "79945aa4-31c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-track.analyticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775494750, "uuid": "ee8f7659-31d9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mind-stack.cognitivematrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775478922, "uuid": "147f385c-31b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mind-web.cognitivefabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501286, "uuid": "2612cc08-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "model-check.abstractlogic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775472069, "uuid": "1fd9cd05-31a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "model-check.theoreticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775467925, "uuid": "79c2e1a4-319b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "motion-svc.dialecticflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775464627, "uuid": "cc01530c-3193-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "msedge.vg" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775463787, "uuid": "d6eac904-3191-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "msgrouppolicy.vg" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775495466, "uuid": "99347bd0-31db-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neural-io.cognitivematrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775478502, "uuid": "19d5e057-31b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neural-link.cognitivefabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775488085, "uuid": "69d25359-31ca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "norm-engine.formalisticcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462351, "uuid": "7ef2c38e-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ok-vsefotki.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485448, "uuid": "46169fad-31c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "one.immortalday.life" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775516645, "uuid": "e92146f3-320c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-end.beckonuncert.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775474645, "uuid": "1ec6de73-31ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "order-logic.systematiclayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462407, "uuid": "a095887a-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "paper.recentbox.life" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485689, "uuid": "d5a504a7-31c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "path-logic.methodicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490846, "uuid": "d7795869-31d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pattern-dev.inductiveflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775479629, "uuid": "b9da67e5-31b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "perception-svc.cognitivefabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775507586, "uuid": "d12ed2df-31f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pin-storage.enameledtack.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775512267, "uuid": "b788d894-3202-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "plant-api.explosionjunip.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775518685, "uuid": "a91487ec-3211-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "point-api.drillobjection.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775492466, "uuid": "9d3464cf-31d4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "point-drift.inductiveflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775483287, "uuid": "3e042e80-31bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "point-scan.analyticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775489411, "uuid": "8036d393-31cd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "proof-static.deductivegrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775487365, "uuid": "bd08c3dc-31c8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "proof-vault.formalisticcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501407, "uuid": "6e2760f4-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-3f298b361d774ae0a68be902f3ed9d89.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462345, "uuid": "7b7c81c4-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-429e5192f69c4021acef9add7ed1790a.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775502124, "uuid": "19f9ee9b-31eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pure-node.abstractlogic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775505549, "uuid": "1346f34e-31f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "push-notify.exhortshelk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775508907, "uuid": "e4aec267-31fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "query-hub.howaskfor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775475726, "uuid": "a3964cd9-31ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rank-index.systematiclayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775480049, "uuid": "b43377b2-31b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ratio-point.rationalmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775460905, "uuid": "219764d2-318b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "real-time-io.ontologicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775506567, "uuid": "72178ef5-31f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "relay-svc.exhortshelk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775509266, "uuid": "babadfb5-31fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "request-io.howaskfor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775489049, "uuid": "a86fa37b-31cc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "result-node.deductivegrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775515330, "uuid": "d935dabe-3209-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "risk-check.beckonuncert.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775503207, "uuid": "9f712b89-31ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "root-source.conceptmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775517015, "uuid": "c562c059-320d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rule-block.drillobjection.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775486045, "uuid": "aa3e1c10-31c5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rule-monitor.methodicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462525, "uuid": "e6d55811-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rule-set.axiomaticgrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775509925, "uuid": "43bcad5f-31fd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "search-svc.howaskfor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775479326, "uuid": "052b98c3-31b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sense-data.cognitivefabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775495770, "uuid": "4eafde52-31dc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sense-gate.cognitivematrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501412, "uuid": "7125b090-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "seonn199.bj.bcebos.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775486345, "uuid": "5cf754ab-31c6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "seq-manager.methodicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775467385, "uuid": "37f25783-319a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shift-point.dialecticflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775504226, "uuid": "fef1b19b-31ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sketch-node.conceptmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775480526, "uuid": "d03c78fe-31b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-node.rationalmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462407, "uuid": "a0bf46b9-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft2down.oss-ap-southeast-1.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775499485, "uuid": "f4c70a44-31e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solid-store.structuralcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775461444, "uuid": "62e5122e-318c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "source-data.ontologicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775473627, "uuid": "c0534b32-31a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "space-time.theoreticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775513586, "uuid": "c99f5320-3205-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "spend-api.kokotkasquand.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775482806, "uuid": "1f8e990d-31be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stat-render.analyticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775475245, "uuid": "84b1630e-31ac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "step-monitor.systematiclayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775484907, "uuid": "037cec5f-31c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "step-sync.methodicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775471051, "uuid": "c0c3ea7c-31a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "step-wise.inferentialcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775494086, "uuid": "62e32cb2-31d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stitch-api.logicalfabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775518386, "uuid": "f692adcb-3210-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stop-logic.drillobjection.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775500145, "uuid": "7e146c3e-31e6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stress-node.structuralcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775486707, "uuid": "34a7a91f-31c7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "strict-code.formalisticcore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775507884, "uuid": "83516313-31f8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "surface-api.enameledtack.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775506268, "uuid": "bfb005cf-31f4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sync-logic.exhortshelk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775466607, "uuid": "67efe176-3198-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "synth-portal.dialecticflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775497807, "uuid": "0c653cb5-31e1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tag-portal.semanticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775497145, "uuid": "824a580a-31df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "term-index.semanticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775517965, "uuid": "fc00de0b-320f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "test-engine.drillobjection.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775502308, "uuid": "8787e552-31eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "theory-svc.abstractlogic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775465585, "uuid": "0702ad46-3196-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thesis-sync.dialecticflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775480886, "uuid": "a6ccff81-31b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "think-tank.rationalmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775478308, "uuid": "a61d4a9c-31b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thought-api.cognitivefabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775495112, "uuid": "c68e1e29-31da-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thought-hub.cognitivematrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775493726, "uuid": "8c255e35-31d7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thread-svc.logicalfabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775488685, "uuid": "cf76afd7-31cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "top-down-io.deductivegrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775462345, "uuid": "7b90c27b-318e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "top.recentbox.life" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775485325, "uuid": "fd086c5d-31c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trace-audit.methodicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775484425, "uuid": "e484b965-31c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trace-result.analyticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775513945, "uuid": "9f72a763-3206-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "track-hub.kokotkasquand.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775491452, "uuid": "410a9ad3-31d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trend-sensor.inductiveflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775490671, "uuid": "6f75550e-31d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "unit-logic.deductivegrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775514671, "uuid": "505314b6-3208-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "user-pool.kokotkasquand.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775503870, "uuid": "2a7cacff-31ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "view-port.conceptmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775496444, "uuid": "e07e9d3d-31dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vision-node.cognitivematrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775505245, "uuid": "5dcd9800-31f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "voice-api.exhortshelk.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775512985, "uuid": "6396a5fd-3204-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "waste-node.kokotkasquand.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775514969, "uuid": "01df6c0b-3209-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wave-point.beckonuncert.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775511730, "uuid": "77b5aeff-3201-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wood-trace.explosionjunip.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775496788, "uuid": "ad0e4a2a-31de-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "word-map.semanticvector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775474947, "uuid": "d2f6aa3c-31ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.globalchat.site" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501407, "uuid": "6e5590ca-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yifanyi-67349x32.oss-cn-hongkong.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501407, "uuid": "6e6a6ecf-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yifanyisetup32.oss-cn-hongkong.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775501407, "uuid": "6e893417-31e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yiyikxcmasndfaf56433145334461asdas.oss-ap-southeast-1.aliyuncs.com" } ] } }