{ "Event": { "published": true, "date": "2026-03-24", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-24", "timestamp": 1774397722, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "ddf050cb-0a41-45a9-adde-24335b868f25", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774310526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774310526, "uuid": "f37ab82a-e345-4089-a84d-98945acf76e7", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774310526, "uuid": "85fec456-45c9-42e1-a055-0b43e15d62a0", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774310526, "uuid": "43358622-6503-4001-ab8d-c38055eccf6e", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774310526, "uuid": "13633de7-15d9-47df-b847-fd87051224d3", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774310526, "uuid": "5ff8758d-7cd6-468e-a09b-b2c2bd6b938f", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1774310716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774310716, "uuid": "fcbf94a2-382e-406d-ae75-3dffbc530458", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774310716, "uuid": "3cd6c833-9dbe-4971-95ad-b3a9acb09cff", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774310716, "uuid": "87abc060-2342-46b1-910e-79695140b2d7", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774310716, "uuid": "daa24821-145a-4a67-9e37-a70978d9bd1b", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774310716, "uuid": "03ea99fe-be0f-4962-9a7a-4bcff93631c7", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1774312028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774312028, "uuid": "70745027-d2e4-47ca-a037-a2e9ef64194f", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774312028, "uuid": "872442ef-9878-4243-8cf3-a6946d862f0d", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774312028, "uuid": "2c23c6b9-3460-4fb4-bedc-2ade6a3de961", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774312028, "uuid": "8a0a6705-0779-441e-b9a5-67eecaf19d96", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774312028, "uuid": "cc7c5828-37ec-4a7a-9529-05ac65367786", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a594d103-272b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774320384, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774320384, "uuid": "bacb7d4f-9fea-45bd-993e-3c3c929bf207", "comment": "Malware payload", "value": "0dd2f00113b9db701d38a5faea525d84", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774320384, "uuid": "bbd92ca3-a6d1-4866-a6f5-ba0ec37c8039", "comment": "Malware payload", "value": "aecfb8f29d829793a84b0963352a7c9cc952b8cc9dc0eafb7b08fe66c690878b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774320384, "uuid": "4a92d602-dbf9-48fa-ab78-c262dc31d4cb", "value": "T1B0931A3174AF052A166F836E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774320384, "uuid": "1ea04c5c-08b7-468d-ab28-b5175dc3a47f", "value": "1536:9Byp1tF/uwMmAIa14oXflIcepeV7tb73WdxCrCitkb5fv2v05xuNr4ivxsCZKy6x:98gI70GitkbFv2v05xuNrXxsCZN6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774320384, "uuid": "c2c7bb06-7675-4ff4-959c-b339080e22a0", "value": 94599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774320384, "uuid": "29fe802e-9fc8-4b47-a05f-19c8b5dd042b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5ee1c8d-272b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774320491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774320491, "uuid": "5f5ee1c4-2a8b-4dd0-b015-d62c9b86a963", "comment": "Malware payload (Mirai)", "value": "bb4084d94b46fa745408695522476508", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774320491, "uuid": "6dec755c-1796-428a-b11f-d81c92cd1df5", "comment": "Malware payload (Mirai)", "value": "d301dd6d3cdfbf249f78b803575844f5cbde6762ad96c6708d2c7962a3550072", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774320491, "uuid": "2c8018bf-1b4f-41a8-a81d-19a83493b02f", "value": "T1D1636C42B31C0943D6625DF03A3F17E183BFE99021E4FA896A1FAB464171E72158AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774320491, "uuid": "60b4f1d6-3b09-420d-aede-cca897fa6fcf", "value": "1536:419x0iGn9FnuVNAF3vi17h+PxuilkJ45aPG:GYC6F3vgEuukPG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774320491, "uuid": "f844bd2b-3681-4dbf-be40-9e98ad84e07f", "value": 71200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774320491, "uuid": "a104445f-e082-458a-a2f5-9533e12e7740", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7753f501-272c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774320735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774320735, "uuid": "d3704766-0c89-46c8-9c7f-a17b20127eb7", "comment": "Malware payload", "value": "1e93b4bbc2dec3b675f72921c12cde1d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774320735, "uuid": "532c5e1e-7639-40ec-993a-a286f88dbd7f", "comment": "Malware payload", "value": "95e6c6c13f65217f41c371abf6d03594b2bfed2259a1813bb4222fb2d3c32745", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774320735, "uuid": "53d2a1de-fb65-4135-8e35-e487e65421d5", "value": "T146D57DDE194555E2D3FFB7A0C2B42E2E267173325C67691BA2FCA1C8CE103A66D43B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774320735, "uuid": "a97612e8-e06a-4db1-ab92-0ca443a4cd9e", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cG0dAtVJlzFrpf0:8UixbItdTrJoFVPMvXGlVTFrRid3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774320735, "uuid": "c0c01f01-ac4e-49c5-bda9-fb61d04b9e54", "value": 2939045, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774320735, "uuid": "3b3cb47f-d85a-4f2e-a1a3-8293c4b278d9", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c803ffc6-272d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774321300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774321300, "uuid": "1f81cb4e-15a5-4d13-bc29-541cb0da90af", "comment": "Malware payload (Mirai)", "value": "140afb39fe69e25219f701fbb4d36246", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774321300, "uuid": "ea238b75-e427-4fae-bd9f-354566f1de24", "comment": "Malware payload (Mirai)", "value": "55f2f0f77550a9627c8bc18f81d5d996f9278d4f63a29fe5170376c125bad5d4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774321300, "uuid": "d94197c4-918b-452c-9014-c6da3aded3df", "value": "T1BF539E7AC436ADA4C28946F461748A741B63E28881A72FFB9555C369D04BEFCF50E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774321300, "uuid": "3a3d1712-7cee-4a75-8d2f-c7603ffc6531", "value": "1536:ugSwtPHVFF/fktvfQneXK8oRU7nLt6CuKFz6Na0u:ufC/Ionea8lnt6wz+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774321300, "uuid": "7971cf33-e792-4a97-ab24-a1a46dc0579f", "value": 62908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774321300, "uuid": "f7e87496-de78-4fcd-a307-20e8a6173639", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9710eac-272d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774321330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774321330, "uuid": "e38063bd-fd32-4ad1-affc-65f2a075f094", "comment": "Malware payload", "value": "27b3ea6f626f91691f76d9f953f93cf5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774321330, "uuid": "52880227-9815-4611-b2b5-1e0f4aa23543", "comment": "Malware payload", "value": "f9b25d57b9d96cb2345460423ef173b7fb0aa566a66deca10dd9f3613761df0d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774321330, "uuid": "5cbe3594-3f15-43d5-880c-f108d27aa6bd", "value": "T12234CE09C296213EFE9AAF43B96231485752B5D1615C2C31D8F83CCB44A7A57FE8B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774321330, "uuid": "7a45befb-d918-430a-9e4e-e9c5b58a22e4", "value": "3072:er2xGb/tz7IFTFKkDeMxiP78e9CW4Bze9djk0PCrifStOBohwpv6IL:e5uFTFzKAk9gg9lPCr7tru", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774321330, "uuid": "ccaae16a-0488-4e2a-9cfb-8b4a3b2ddb0f", "value": 239683, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774321330, "uuid": "d1c0aba8-7e49-4155-8e65-b68f0691061d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60cdc72e-272f-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774321986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774321986, "uuid": "56d23312-fec7-4bc2-885c-ec74c008fc76", "comment": "Malware payload", "value": "daa1b75169360e5721b2e63b32b0a854", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774321986, "uuid": "9a58a3c0-00b0-49a6-a885-a6919b3ac2de", "comment": "Malware payload", "value": "c4a1e6ef4742e8a96bfa9bf6998e0688b969167bbcdcd536e736512bc315b5e5", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774321986, "uuid": "924f7087-d78e-4c53-b111-b5d648b117b5", "value": "T115C423195942D2CE83D43F7E8EC0BBA03E7990EBEB0DFA0416DA35917C95251B3D49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774321986, "uuid": "ee115b43-8823-473c-9697-43fe8ce0a091", "value": "12288:MdevMEkFmHkH6wlOMWROC/FTeHo22Qm7NzofOrAHmf:IemH4MQOC/gHozN7NzomMi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774321986, "uuid": "0a3538f1-dfc8-4c56-a692-7a830c7189f4", "value": 585382, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774321986, "uuid": "4a6a7169-2ec0-467a-b3e0-16818a92b822", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db4675a7-272f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774322192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322192, "uuid": "fd44f0a9-f07b-4a6f-9adc-4dcbc65f27ab", "comment": "Malware payload (Mirai)", "value": "8b0bd8ea1893b90106f8388d6c23a43f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322192, "uuid": "7f90b4fa-7465-4f6c-be44-7df107dbed5a", "comment": "Malware payload (Mirai)", "value": "03096b594d91f602f7ace0f16dca473e38af6f43ee33e7c2b713e169c70eff73", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322192, "uuid": "d35366e2-618e-4ac5-a529-8d90d6ee7c17", "value": "T1C71308B42515F7ACEEE10079F04331E629530A1C36DCE3D3B1A34266EEB4B4C7999E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322192, "uuid": "3b969f91-749f-4908-807e-fe4ca983d571", "value": "768:3e4TKdmtcP+5Fe7BMVGLD0PqSAJ6ba7A5aTlw:3e2S+4tmGf0PqlEa7A5aW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774322192, "uuid": "38cf511f-90b9-4826-af03-7279e577c412", "value": 42776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322192, "uuid": "c2762a64-60cd-4f98-acd5-2c8998b830c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1450ce5e-2730-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774322287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322287, "uuid": "c11bc1f1-56d7-4872-8c7b-9200943d4777", "comment": "Malware payload", "value": "3a96f50135a5c4b32328fed9b5d0b047", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322287, "uuid": "92246f37-e6c0-444b-979c-3332ae41d419", "comment": "Malware payload", "value": "bfae3bc5850d113cf4c362e2ae91e87a9044cbbd5c276648c3ac06a343f327f0", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322287, "uuid": "8d8394d3-4cd8-4b03-8ba2-c856e65c241b", "value": "T13AB4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322287, "uuid": "1ecc9db7-bc48-4c18-ba9c-938bcac49a1c", "value": "12288:B4lhhLoVDI2FLmMJKleqO3g/ALyYG0ZaDajTCXMO8xzDOeDBP:+xopIAmMJJA/f0Za6TCXKBxFP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774322287, "uuid": "712fc080-2f08-431c-94ab-89485c53708c", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322287, "uuid": "100edf38-a784-4ff2-9618-82a910b230be", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1451e31d-2730-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774322287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322287, "uuid": "ffc37aa3-87d1-43dc-b6ab-e826715508c3", "comment": "Malware payload", "value": "e78131c5563ad9363dc0995a9d9628a5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322287, "uuid": "d5f3b001-6139-4a32-8ce8-0049d38f3ade", "comment": "Malware payload", "value": "55c7856d52cc9a181854bb27b7d6ab08fc64b38f482fb4981a4f612bdfb7cf0f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322287, "uuid": "b5c30492-0f26-4de1-9a61-be4976112959", "value": "T15EA423F366B1D54717685FF9CB66CF73129FA640321C83208E98DA89D84932EB7D84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322287, "uuid": "c14ae9e6-1398-45cd-a480-fb51f7783dfc", "value": "12288:p4lhhLoVDI2FLmMJKDCCH1oHF9nJ/qJDk5LchPNNtl:2xopIAmMJqH1ELnQA+hPNNtl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774322287, "uuid": "f6e49f49-d256-4719-aa5c-4849258e0717", "value": 487650, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322287, "uuid": "361b68c0-6067-4b10-ba0c-9a275fbaeed7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1464dc7c-2730-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774322287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322287, "uuid": "36a7e803-1df9-45ee-bb81-4ac9ae8dcfbe", "comment": "Malware payload", "value": "d931a8049f9a72108a0411f65fc5da20", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322287, "uuid": "f52fc264-a2f8-4aed-b9f3-ea5cf3c360f8", "comment": "Malware payload", "value": "61e9be0dc1d5d2b33baf8df364782d5e8888ef3ce5dcfee0ba14fe0bf04afcc7", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322287, "uuid": "8dedc555-2b69-430d-a100-b741823cca37", "value": "T1DDB4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322287, "uuid": "ec9bcb00-8b5e-4bf8-ac49-762eda63ffd1", "value": "12288:J4lhhLoVDI2FLmMJKpeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBL:WxopIAmMJdA/f0Za6TCXKBxFL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774322287, "uuid": "552b998a-f476-404f-b833-4e4b6cb6ec46", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322287, "uuid": "31703fb2-ffb4-4db3-8426-6c0ee474803e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14675c13-2730-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774322287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322287, "uuid": "c0e9b9f8-c9d7-427f-9843-2dba69121be0", "comment": "Malware payload", "value": "33b1e1e160a73abc012f213240d6a068", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322287, "uuid": "cba1d149-976d-4905-852c-655ca620c970", "comment": "Malware payload", "value": "2b29cdb5a36f0bf1d8b00c774f4956bad538d4f717697418952f706960333c78", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322287, "uuid": "e31a4a31-2c78-44a0-82f0-6b730c00153a", "value": "T107B4237B0A7F70D00C6A43BA8B468611A43D9C621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322287, "uuid": "3def72d8-59ef-4d01-b8e6-2f2ecce3818d", "value": "12288:J4lhhLoVDI2FLmMJK6eqO3g/ALyYG0ZaDajTCXMO8xzDOeDBq:WxopIAmMJWA/f0Za6TCXKBxFq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774322287, "uuid": "9c303449-3b35-499a-a406-191becba035f", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322287, "uuid": "0447a3f0-fcdc-477e-b814-66ccee3cd7e0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14795722-2730-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774322288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "6d809c6d-adcf-4f55-9e6f-108aa6d6f4e0", "comment": "Malware payload", "value": "43f4966007163f7dabe9d618d8477394", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "0345cc20-d32e-4f44-8702-132ffb2c866a", "comment": "Malware payload", "value": "1ddb7411a3cbac646d5cf5cd48496b3f579181d0a06681d93de1e2e962a279c7", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322288, "uuid": "925405b0-52a1-4074-807d-cf885627e5e5", "value": "T1BBB4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322288, "uuid": "dfdfb2d6-43c8-4808-991b-b48e00d806c5", "value": "12288:J4lhhLoVDI2FLmMJKreqO3g/ALyYG0ZaDajTCXMO8xzDOeDBZ:WxopIAmMJnA/f0Za6TCXKBxFZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774322288, "uuid": "f5febdf2-ac5f-4f87-a0a1-ba2f47ddf22d", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322288, "uuid": "419e2d24-3851-4a4e-8ff7-09917af8f26e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "148b7eaf-2730-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774322288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "7989938c-14ae-46b5-abd1-d8ed60322f35", "comment": "Malware payload", "value": "d5c80c354f75b09b0395753a8f53a280", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "37c3e070-5988-4ccb-8fc0-7ed169636efc", "comment": "Malware payload", "value": "f07c6c6b99bf723d9d925135045e66b47e0fada7f98a664af3d53a08299bfaf1", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322288, "uuid": "0585391d-ae4d-487c-b635-a47830fa7fa7", "value": "T15CA42397E39997EC88C47ABA8B2C0D08B27CE7745CCF06A8537E5335D1688A29E075", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322288, "uuid": "3c6070b7-2bf6-4576-9fc8-e4d9af3b82e4", "value": "12288:6sS5lyFd6/+6sVXkvgSe5yxqr++rVOje+yH5G:6sgxm6sSvP0y+6eTH5G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774322288, "uuid": "1d080cca-2836-486b-b16d-6acea0856f18", "value": 492541, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322288, "uuid": "01d9ec87-8cdc-443a-b47b-faed6e11210e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14e41101-2730-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774322288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "9643b9f7-6e3f-4c5e-849a-86808a82d1af", "comment": "Malware payload", "value": "abde8fbda8df6cd1e735d485ebeefbc3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "1f072800-6905-4d18-90fc-03dbf40c275d", "comment": "Malware payload", "value": "7e85eb9ad3713d715e3f73d115f53399a8214935b0acf043ddcfde5ef4684202", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322288, "uuid": "7a7f7eac-bade-4fa4-9a94-ff6e986ac2a3", "value": "T1E6B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322288, "uuid": "cd8617c6-2a8a-4b43-9335-348ccdbf91aa", "value": "12288:B4lhhLoVDI2FLmMJK9eqO3g/ALyYG0ZaDajTCXMO8xzDOeDBH:+xopIAmMJhA/f0Za6TCXKBxFH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774322288, "uuid": "d2290434-d896-44c2-80ca-b2ea033dcf01", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322288, "uuid": "f6c54289-8530-4f32-98b4-1173b41a57bb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774322526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322526, "uuid": "1d29f9ac-2707-4a13-a292-d6b215957d4f", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322526, "uuid": "ac6b3e2b-929f-4506-9422-dfe966cc34be", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322526, "uuid": "a4725cfd-96ce-4023-b526-f0daf8b4e58d", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322526, "uuid": "31d0b337-1395-4d0e-997d-56cc92455397", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774322526, "uuid": "20b860b5-107c-45cf-b6ea-7e1697a1237c", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "508c3486-2732-11f1-ba1a-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1774323247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323247, "uuid": "35af2688-2f48-4fc0-ac77-b7533c5777f5", "comment": "Malware payload (AsyncRAT)", "value": "863caa37394927dafc0ee3b33ab0b88e", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323247, "uuid": "95a49f57-5e00-4298-ae6d-f7bb84e004ea", "comment": "Malware payload (AsyncRAT)", "value": "d001b653d2bffac353ef0213053577a0bae90e53b857e17fbdcd64942e1c64a9", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323247, "uuid": "11c42829-c7af-4627-b764-42945cf33de1", "value": "T173753305E1B1E361DCF3437969876B8BBB7899544B4F3150328EABA2831B3C361C26", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323247, "uuid": "37c3d646-be8e-4592-8477-729ca4c95833", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323247, "uuid": "e3fb7ba9-2d8f-464b-a9a2-accb38fd2949", "value": "24576:HvKr4mCZbKJbWSlrbaMU6FNfQtfKp5p01tgyCk7k+HVuzEHMKv0AcczQ1kQYIdLn:PBZbKJ5+MN8j8yTVFBvDdzGYELM1cR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323247, "uuid": "8e975fc4-77be-4e2d-96c0-07b24b91a223", "value": 1703936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323247, "uuid": "e06ad87b-f2ba-4708-a9cf-60f22eaf0fda", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be359fd0-2732-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774323431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323431, "uuid": "a97527d8-579a-4161-abe4-92e965f0f798", "comment": "Malware payload (Mirai)", "value": "2b22f89c9b1629f44bd26e6f2e6c457f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323431, "uuid": "f85e3ae2-9dd5-4988-b420-54008e19ef0a", "comment": "Malware payload (Mirai)", "value": "729a26fcec39465c2819287818a9c5111debf73a520c0fcfcc17d9e4da3b9044", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323431, "uuid": "23823898-e888-4f90-b13b-83e026ce1248", "value": "T1BE93E506BFA11FF7D8AFCD374AA92B0525CC550B21A53B357974D828B64B24F09E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323431, "uuid": "6281f1d1-44c7-4d4d-866e-8d15ff6da2b6", "value": "1536:Yin9mZ1+71GOpDeiOb1HVPsFPqTrK1EEm28vD3Xqqofah:ZmZKzeiy1xW1m28rRp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323431, "uuid": "dc775ff9-955d-4be1-8d38-d15bddd8e722", "value": 93016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323431, "uuid": "95d04132-391d-477d-83bb-a6d110308057", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83d8b8fb-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774323763, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323763, "uuid": "9d4f40b4-b10d-45f8-ad96-484d88d392fb", "comment": "Malware payload (Mirai)", "value": "f72d3c1e522bd63632006b4fc4975644", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323763, "uuid": "f1b96a86-28ff-40a1-b8f7-dbf03193d3c9", "comment": "Malware payload (Mirai)", "value": "afb17921f416180d1c1382c60915edb91b436c4fbd1f599074b993830d46aea7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323763, "uuid": "9617e51a-78ff-4451-ac74-e41e6e383f3d", "value": "T1A3633B56BC815A12C6D122BBFA6E028C372653F8D2EF3213DD256F1177C691F0E6BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323763, "uuid": "62e40765-a383-4ddb-9ed3-43f3459f703b", "value": "1536:O6ZldTguLBB/1FpxGitq6HqPy0TI+jGchWi8sQJ9OK3qaQaH:O6ZldpBHpHxQT8s213T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323763, "uuid": "73ee1974-a672-427f-8354-90cc9d56a2bd", "value": 71644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323763, "uuid": "d2d49296-7539-4811-8404-24b9af1460c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6ed8803-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774323849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323849, "uuid": "21460fc0-d68e-4f64-b7a9-15037d3725e8", "comment": "Malware payload", "value": "90c608113e856c28683897aeffe219c6", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323849, "uuid": "7abf9800-63ac-4ac0-98c8-617dadb248cb", "comment": "Malware payload", "value": "64b02e352efaf2663ab64c07ba8ece6486e4ca8fb7b5553a12a434d9e12e68ed", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323849, "uuid": "477df39f-1d1f-478c-b4b8-f2c0f1813a29", "value": "T1F0B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323849, "uuid": "8eab4689-12e6-4847-ace6-e0f971e64aa3", "value": "12288:x4lhhLoVDI2FLmMJK/eqO3g/ALyYG0ZaDajTCXMO8xzDOeDBJ:OxopIAmMJnA/f0Za6TCXKBxFJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323849, "uuid": "bca6a59a-26cb-41e2-bedd-23f2bdce75c6", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323849, "uuid": "d9209121-59df-4cf9-acaa-a73e969c079d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7180225-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774323849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323849, "uuid": "7f5219d7-9fec-4180-8a3f-e4c516412127", "comment": "Malware payload", "value": "6418cc85fc7e679f785e9f6333d4a9fb", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323849, "uuid": "1f9d7776-5c94-404d-a2cc-989b2102e01e", "comment": "Malware payload", "value": "1087d30b88dea89634db3532e4385b61a344af98c36a90c80b7f4ea8a070b828", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323849, "uuid": "c5438105-e70c-4ea9-a087-72d5571d8e50", "value": "T1EEB4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323849, "uuid": "b8f74734-0cf5-423a-bc9d-30bde1d91c02", "value": "12288:Z4lhhLoVDI2FLmMJKBeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBX:GxopIAmMJ1A/f0Za6TCXKBxFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323849, "uuid": "718f600d-85fe-45c8-83f1-b2eaf47a669a", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323849, "uuid": "ca3a7ccd-fed4-4e7c-9004-4570e1d4db86", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b79ffc34-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774323850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323850, "uuid": "1e26a492-3c15-4a26-8f25-3a71505a98da", "comment": "Malware payload", "value": "152474089732e9a7acea3be0473a0258", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323850, "uuid": "96425800-9a2a-4837-8599-c6100b778c8b", "comment": "Malware payload", "value": "695d6445459d24f6389135c9c3a209e669fe760c77bc7782c5d382398a789fe0", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323850, "uuid": "bd2fc548-38cd-41d5-a2ee-db8249c86222", "value": "T1A8B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323850, "uuid": "09dc870f-8cb1-4ead-a9df-e59354d9c36f", "value": "12288:B4lhhLoVDI2FLmMJKdeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBL:+xopIAmMJhA/f0Za6TCXKBxFL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323850, "uuid": "dbd69bbd-b8af-41f5-8ca8-a4d893d3ae20", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323850, "uuid": "6ad2b16e-c6b9-4f84-a14f-ac1cbff7ef3a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7c4e1d1-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774323850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323850, "uuid": "0db982c5-c1db-47ff-9dff-365ddad9e4c6", "comment": "Malware payload", "value": "1c480d2e78f2db1139cdbb547045187c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323850, "uuid": "5f656959-07a4-4783-b14e-7443e8ffa7e2", "comment": "Malware payload", "value": "0500f25b3b96ec8ca1e816ee194480825d84d1a91a2cc165d8b62829847fb731", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323850, "uuid": "9b6397dc-8187-4230-8721-4d651c31cc97", "value": "T197B4237B0A7FB0D00C6A43BA8B464611A43D9D611628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323850, "uuid": "734bf767-a5b4-44e8-814a-40c8070f15d8", "value": "12288:V4lhhLoVDI2FLmMJKMeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBQ:CxopIAmMJ8A/f0Za6TCXKBxFQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323850, "uuid": "adeb01b9-e117-4c19-81f1-4d59d80fec52", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323850, "uuid": "79bb7578-a13a-4c28-9226-3ceb0c945b7f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7e5a6fb-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774323850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323850, "uuid": "85a3c9d7-0c50-4bb6-a588-2ef129783bcb", "comment": "Malware payload", "value": "c8c4c9db02aa3384e0ec7ead541366c3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323850, "uuid": "2caeb151-52f4-4ff7-a7dc-a4cc343d53c7", "comment": "Malware payload", "value": "ac531c304a74fb29763236150364431d0ec1ea748c992abdf3a754c7d479eff9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323850, "uuid": "6d37f4e0-e85c-4022-8c75-aa64e01bb965", "value": "T1ECB4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323850, "uuid": "69a4679c-ee3e-4a99-87b5-d669229fe54a", "value": "12288:h4lhhLoVDI2FLmMJK9eqO3g/ALyYG0ZaDajTCXMO8xzDOeDBT:exopIAmMJhA/f0Za6TCXKBxFT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323850, "uuid": "83155a13-e647-4593-a570-b786a792f4f1", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323850, "uuid": "dadc0543-3f5b-411f-a995-617556557eb7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8074d1a-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774323850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323850, "uuid": "66c1ad2b-78f5-4eee-89e6-1b846c8ac9e1", "comment": "Malware payload", "value": "263e5b4000b22344ab3241ae94aadb3b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323850, "uuid": "57f4a5b3-591c-47aa-b0c3-ab498c4af3e2", "comment": "Malware payload", "value": "440e783a3e264aebcbf7251cda971c3b746a0049298270f54253581ef9921893", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323850, "uuid": "239e7896-21af-41a3-94cd-e507ddf2eaeb", "value": "T1B8B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323850, "uuid": "d4d25d95-0bbc-42e8-8c49-5d9b88ca389b", "value": "12288:Z4lhhLoVDI2FLmMJKBeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBz:GxopIAmMJ1A/f0Za6TCXKBxFz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323850, "uuid": "ee20b29a-81df-45ba-b4d5-0acb63524b22", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323850, "uuid": "948244de-e8e9-4842-a7a4-eccbc7c4dc86", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8520a1b-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774323851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323851, "uuid": "81c56049-7019-456d-8ad5-ba356d0e5fa1", "comment": "Malware payload", "value": "007ca7d6b014aea350720d2bea2662cd", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323851, "uuid": "840af21b-b427-449f-b1d0-b5d6f9fd3444", "comment": "Malware payload", "value": "b853bc2d11751ba14f8fc4b75e9a942e75fab7aac3f3da3f45d97a037afcc3cd", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323851, "uuid": "83f24d33-259d-472a-a9b9-b5cd77f4e8d2", "value": "T161B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323851, "uuid": "c1c75840-0419-4eb1-8a46-70e2b591527f", "value": "12288:Z4lhhLoVDI2FLmMJKKeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBO:GxopIAmMJKA/f0Za6TCXKBxFO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323851, "uuid": "cbef4cc9-f3d2-401f-8d02-91eda52bceac", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323851, "uuid": "8313f217-aec4-415f-b212-a1e8591ccc18", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b85b764f-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774323851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323851, "uuid": "09ca591d-dce4-4684-af36-d3afde90551e", "comment": "Malware payload", "value": "fefba6833a97606e7ff98d9e32b3168f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323851, "uuid": "2cc93095-8869-4249-ab3c-622b7b72552b", "comment": "Malware payload", "value": "b3265eb5269a96a2ed3544a5ec4ee05158b33dac4f6e19b125b6b88a026c7c1a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323851, "uuid": "c9431416-e6e9-48b9-8d0e-5edebdabab95", "value": "T1D1B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323851, "uuid": "3a6489a7-a1c4-4406-affd-60d0c97bdff3", "value": "12288:Z4lhhLoVDI2FLmMJKSeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBW:GxopIAmMJ6A/f0Za6TCXKBxFW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323851, "uuid": "b37dc296-9c27-4c42-bcb9-76df5ca91246", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323851, "uuid": "96c795d0-0e79-4709-bd8c-8a742790d840", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8762cbb-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774323851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323851, "uuid": "35a68cd1-290f-486a-a534-25da3e44e6ee", "comment": "Malware payload", "value": "f6d5a69938904d4e4962b4f0aa61b3fe", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323851, "uuid": "44efe314-fa4a-4e98-9d61-eff7537d03ae", "comment": "Malware payload", "value": "3ae35d7dd202f65b3496913a7011a0360b5b0b52395ae3092932718b85fbd6eb", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323851, "uuid": "34847d09-b80f-467f-b897-06bcd86b704f", "value": "T151C4239603289664787407B197BF9F8DC6028E5329921BFD9FC8BF0CA1356489D5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323851, "uuid": "e75d29c6-742b-469a-a523-d700373c0e3a", "value": "12288:6OCBcIqBjliubzqtYBpfsz4TKPozt4CTo4Pl/2Ar5k:6Z+cubzqyB9sz4TKPE1l/ZrC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323851, "uuid": "51e378de-5f2c-47cc-aeb8-fc4c1f77aeff", "value": 546982, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323851, "uuid": "96b03caf-8206-4cef-80f9-6420d78e4215", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b896cdd7-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774323851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323851, "uuid": "8ec72fa6-57f6-4656-a405-7a3a32b27955", "comment": "Malware payload", "value": "61f542eb4a9651c61841ba039f939df6", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323851, "uuid": "e0833204-00d9-4c3f-b4bf-0ce9be5aef90", "comment": "Malware payload", "value": "dfb6346147f2bb6f0db99d083d3971d786aff292b7f84151d124abda42c71218", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323851, "uuid": "c00084a5-3cfd-4fa8-b5ec-6b2254652931", "value": "T115B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323851, "uuid": "d02ee6a1-5e2d-4c33-9e45-5e9e5bbb54cc", "value": "12288:l4lhhLoVDI2FLmMJKZeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBL:yxopIAmMJJA/f0Za6TCXKBxFL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323851, "uuid": "09072f2b-b40c-45c8-95d8-34d645f1756e", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323851, "uuid": "2591e93e-9cb0-416e-aaf4-fc8b9148f83f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8ee0694-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774323852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "c71bba6d-d768-4e1b-b9b9-77abc389cf7a", "comment": "Malware payload", "value": "970bf050aaeef0c1b36a448b74b9134b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "15bd8064-3996-485c-b005-bdda6faf101a", "comment": "Malware payload", "value": "cf54b7ac35cebfb8458ec4e309cadf6fdc09a2ef4ab1776c2bee5f777a186d05", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323852, "uuid": "c81fe7f9-7a99-4c21-9e67-09c5cdb8d696", "value": "T13AB4237B0A7F70D00C6A43BA8B468611A43D9C621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323852, "uuid": "a0cd951f-1329-4e1f-9939-6a26fb920878", "value": "12288:x4lhhLoVDI2FLmMJKTeqO3g/ALyYG0ZaDajTCXMO8xzDOeDB9:OxopIAmMJrA/f0Za6TCXKBxF9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323852, "uuid": "bd39d4dd-e980-4ae5-b394-fb5610fd1325", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323852, "uuid": "8ade6a26-d44f-4e98-933d-a94226d4425f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9057e33-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774323852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "de52445f-9301-40b7-9661-b54be777ce07", "comment": "Malware payload", "value": "c5080a477e5010f1a282fa7ff181a644", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "8f1df2fa-3f4a-4fcd-9d12-b6ee6434fcc9", "comment": "Malware payload", "value": "4a84c6538a8a381b3f1fdca20c3326021bdb8c74223a2b8d40bedcd87d2500bf", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323852, "uuid": "e329e0b8-2f92-4d78-a304-50bef869b5fc", "value": "T16DB4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323852, "uuid": "2835592d-30e1-42b1-afc6-0d2b16b905c6", "value": "12288:54lhhLoVDI2FLmMJK5eqO3g/ALyYG0ZaDajTCXMO8xzDOeDBr:mxopIAmMJtA/f0Za6TCXKBxFr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323852, "uuid": "ca3fce4c-b2c2-4883-9aef-f83262db472f", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323852, "uuid": "e1b15466-04b2-447b-af6a-769a2381aebb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b91420d2-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774323852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b07b2dd9-185b-4b75-af15-20eb60e19479", "comment": "Malware payload", "value": "5e16c8e0658f61e732fc60779063bccd", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "4195daac-6411-4b7c-acdf-5c7fbbe1e164", "comment": "Malware payload", "value": "b4ab285a97bc11ca83d3ab8a74ae7a1a42193c5a8308e436022193eeaa44f5d2", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323852, "uuid": "49cdaace-c62b-4fbb-a36e-86519790a195", "value": "T1D0B4237B0A7F70D00C6A43BA8B468611A43D9D621628AFBD47DCE6CC8D0E51EBF14E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323852, "uuid": "aac9ab17-426a-44e5-a32e-314ebf8527fc", "value": "12288:l4lhhLoVDI2FLmMJKJeqO3g/ALyYG0ZaDajTCXMO8xzDOeDBb:yxopIAmMJ5A/f0Za6TCXKBxFb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323852, "uuid": "ecd8d39a-a4b4-436d-9b45-60eb2114bf99", "value": 541353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323852, "uuid": "cabdbca1-9713-4007-a949-c636a3534cc1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c813f10e-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774323877, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323877, "uuid": "90e8d64e-9c82-43d0-ba87-69fc5ba65f67", "comment": "Malware payload", "value": "906643fda63e9f3facd4b9dd0ed5324d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323877, "uuid": "651fbbda-a461-4137-b680-fc2ebdd72c65", "comment": "Malware payload", "value": "12d21a05761d45451811d19a624fdbdd9e046ff01bb44c3e117149a6ab15ea4c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323877, "uuid": "aeba6a13-f337-41eb-9b93-8d77aded9119", "value": "T15A011BDF01A11F71D30CCF8CBB6548245056A9E0F6633A88994B447A4DC478AB725F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323877, "uuid": "e410d055-e760-451e-bcc0-d6372714eddc", "value": "12:xyx9weZNIjlT8KCiKl2PF5At99UFG109f6ChJKJjhsjBMln:4xCiNIpBKl9fo6KsEiln", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323877, "uuid": "53aa4b29-91e8-40aa-8018-cbbce2b2a309", "value": 813, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323877, "uuid": "292eba4d-c85a-46f2-a94f-86adfacf511e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "022af383-2734-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774323975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323975, "uuid": "233c207b-f02a-46b6-8c3f-4f6e75742250", "comment": "Malware payload (Mirai)", "value": "8915e6f8cf52febe62e928e7b1189c99", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323975, "uuid": "0e4f4dc6-8777-4b89-a80a-16f8933ed138", "comment": "Malware payload (Mirai)", "value": "c6c92abaa5e6089d5d6fa626481fe6d2318124a7ba6781843d98515dfe914bf1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323975, "uuid": "4d71e1b2-8192-42c8-885b-f8a49b34f18d", "value": "T101731856F8818F11D5D512BAFA2E118D332317BCE3DF72129D20AF24778A92B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323975, "uuid": "4c069ad1-6802-4103-88e9-b12b9baed0b2", "value": "1536:USnY7JfS2eMM+AFAFrxN3wTbLIomYgDzgas62R3XM0ig1wAMkY5YYSava:UFS5M7Ac/g/LdKDzgasn1w3kY6Oa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774323975, "uuid": "a5fcfd30-3f54-480f-b61c-ca047f04877d", "value": 80592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323975, "uuid": "a8ed4865-1d37-4633-84d1-c866da0ec699", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ca0e42b-2734-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324234, "uuid": "0309039d-a5e1-406f-80cd-08f737a041f2", "comment": "Malware payload", "value": "6fa990e7a3d62a5e0280ca01ed0d4ff4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324234, "uuid": "3d56e561-2cd8-4507-b306-ccd65aa016e6", "comment": "Malware payload", "value": "2aa16dfa715c400f26482e06c0f0193391d15521ed22feb1eb54e5a02420dd6e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324234, "uuid": "3989e5e2-13b5-4d41-a6bd-04f37a6d5eb0", "value": "T13F14E0E7695989BDF19DE85B4BC0A8CC711652A0AD08763FFC352B2E620D35B6F1C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324234, "uuid": "bd1d989f-9693-4d96-b8e8-1bab8d3f8814", "value": "6144:u0cTgyye6nefGcTng31Xgluhy2cc5VD4Imdgj3eMmxea:uXTgyyeWqTngFwluhy2cEVpreTz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324234, "uuid": "cc7dd92a-1e81-48f8-8d48-223dd33a127a", "value": 208470, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324234, "uuid": "49bebd52-323b-48e5-b626-1204aa3945b2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "363d523e-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774324492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324492, "uuid": "d85b2d93-ea2e-4c5c-838d-b87fb041d0e2", "comment": "Malware payload (Mirai)", "value": "f27097859d09235a57bc6df2958ef322", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324492, "uuid": "6efd2c99-c458-4fe5-9ad9-51e7f663efe0", "comment": "Malware payload (Mirai)", "value": "c2730e947a040529c26bfdac395bdd563dcc505317b1e6e3967b196c8a9de69e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324492, "uuid": "846c26bd-c658-4933-9788-aa2392912350", "value": "T1CB93C80E6E319FADFBA9833047B34A21979C33D626E1C685E19CDA011E7034D745FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324492, "uuid": "bba4995e-7c59-436a-82bf-bc7de5589ea0", "value": "1536:okpSZ796xrSdeD6WD6F0vuRIbiNsHW5cZ8zHq3ICAGYUXAg6iq5LCoH1xJepUlaR:bSZ796xphZGq3ICvXAg6iq5LPHnjp7VW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324492, "uuid": "5002081a-919f-4190-a642-61ffb69ab6bb", "value": 93016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324492, "uuid": "a7b29c35-084e-4cd2-a629-4f2aca71b8d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7aa04061-24a0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324571, "uuid": "eb9d27cd-1103-4f5a-b793-227b3bd74a91", "comment": "Malware payload", "value": "8920caea6cf6eb90de1d399c29d54b37", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324571, "uuid": "c60b0fff-3937-4ae6-a50c-8bfc79270624", "comment": "Malware payload", "value": "481d7882f204c97d8912ed74051233c4f429bec1f172262c42e872d511c32a9c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324571, "uuid": "35475e57-0b01-4136-8ea3-525d5a93a74a", "value": "T11AB423816C6C2B73F541F59C1AC4342CD4202C3B9AB763DC5E8844D3687EB66BD6A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324571, "uuid": "040cb60f-e379-4e98-97b5-2d9e7b24772a", "value": "12288:LjXlNMiiXBZTPViRziobl9jcr91+rTY3r8qmfUhurE:vXR2BZD0RLbl2rKY3IF8ME", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324571, "uuid": "39a07284-7385-4d0a-9d35-cf21158ff4c4", "value": 530766, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324571, "uuid": "69c6b4dc-451b-4cfc-aaa8-9d0a884b9615", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b66f59df-24a2-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "c1505930-844e-4444-885e-853d54c3a349", "comment": "Malware payload", "value": "dc631d0b479e7f00b54c87ff3d3fba4d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "5757229c-09d2-41a6-a671-c1eb3415ed8c", "comment": "Malware payload", "value": "fc8942de5a8bef4979c2ef5df36d7b70af34db1b113ab84d9a59d3260aacf32a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "b9aef1ea-c862-4de2-b61b-841ae529a060", "value": "T10AB423856C6C2B73F541F98C1AC4342CD4202C3B9AB763DC5E8844D3647EB66BD6A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "bc196214-3cf0-4beb-93ff-e6461b13e8b6", "value": "12288:mjXlNMiiXBZTBViRziobl9jcr91+rTY3r8q/fUhur2:6XR2BZF0RLbl2rKY3Ik8M2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324572, "uuid": "1bc4a65c-e367-4b7b-a274-4439372a129d", "value": 530766, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "905d9513-23f7-437b-aa35-011b4c12a7a4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65f3c1f5-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "758abfa1-9723-4888-98f2-3bb318504fa8", "comment": "Malware payload", "value": "340d9780d8e3dd7ea5693bcd87451d2f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "31ca8a8f-5fc0-41bf-949e-aa645b576cd6", "comment": "Malware payload", "value": "7c1d6845f6381c19391e60aec993b1f5327730313037a3822f58ba3d57b8d0f1", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "525c9ffb-d129-4387-9d45-09218b469d84", "value": "T161A423A35253A2D7ABA19F74E40D93D1E2CFCF0D3D9AD2F423B6F904F66518944484", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "354a697d-0843-4267-aaac-45204e499033", "value": "12288:j1TGoqqMj4uEU5P1RIfMiZ5d6AfLGsjukmtrYFo:j1TGoOjrPEfMiZGrtcFo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324572, "uuid": "c9de5034-4e34-4c77-8cb9-bb4beed0caa1", "value": 491961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "b045a637-49e9-4fea-b747-75af87ccc589", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65fe3dfd-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "1ecd33d7-7f77-43f5-8f9a-388a68a7fbeb", "comment": "Malware payload", "value": "71b9dd3822aad74a4aa28cd3f9cd40d7", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "695143c9-a7cc-4aea-b946-d23cb00faa18", "comment": "Malware payload", "value": "f3de2408f2072cce3856e762da34541dcf36d3c5f87b0949b26b6473fead6ac1", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "ea5e9b79-5fea-4b01-9dfe-fcda65106683", "value": "T147B423856C6C2B73F541F98C1AC4342CD4202C3B9AB763DC5E8844D3647EB66BD6A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "dcfaa25f-0b53-4d56-b543-2f21a1678a1a", "value": "12288:FjXlNMiiXBZTnViRziobl9jcr91+rTY3r8qcfUhurg:FXR2BZ70RLbl2rKY3Ij8Mg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324572, "uuid": "324f97a1-83fc-4578-959b-d28fe46532dc", "value": 530766, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "0d2da6c9-0853-4033-b34f-ad0b25347085", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66077b7d-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "9d0866ec-2c37-4649-8a6f-98e0ff84f209", "comment": "Malware payload", "value": "a08538431870fecbfd5804a2d00610b5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "c7fc1a6c-ebee-4984-b898-d2d0a9b7dac0", "comment": "Malware payload", "value": "5e1b0eb1aaabb66d8c088cb2669b029f35534d82a75e3d3c47ff34c276004034", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "0f88bfba-b6f3-482e-8e3c-aeadd6183a88", "value": "T1CEB423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "ec2d08b6-30c8-4799-94aa-7dab1b50afce", "value": "12288:lkmht7DrvdyiZCCH1oHF9nJ/qjuyugoJrrzTPwkD:lkmHzMKH1ELnKugoJnnX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324572, "uuid": "88dc7d58-3e01-45e7-b5c4-5f77d6b5f307", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "465297d9-0666-4de9-8257-f7a4d17964ea", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "660e1e55-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "d392db1a-2ad3-415b-9b97-3f69f0bc9d03", "comment": "Malware payload", "value": "62c1e3adddc62d364e24ed322e868c10", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "e0893bd9-7711-4ab6-b7a2-084db30958ca", "comment": "Malware payload", "value": "2c4e30a90a1c8b4c98c6f99bf88bc938e5c7794e3915dc1784276524a09c1202", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "512d5bbd-4c4a-409e-8ee8-6d5c24b45460", "value": "T123B423855C6C2B73F541F98C1AC4342CD4202C3B9AB763DC5E8844D3647EB6ABD6A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "4a919c9b-1c81-4b1a-89db-b273ad7e73b4", "value": "12288:cjXlNMiiXBZTdViRziobl9jcr91+rTY3r8qJfUhurC:0XR2BZB0RLbl2rKY3IK8MC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324572, "uuid": "58cf4f89-2fd3-438e-b650-ac2d7a97b861", "value": 530766, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "5570f43d-6eeb-4508-bab0-bdd0084a969d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66153caf-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "db808a66-a47b-46f4-8a02-2079cc6c4468", "comment": "Malware payload", "value": "aea2b025608f7358037b0946244da7ed", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "f58200ec-be75-4bd0-b9e8-deec82c8b72d", "comment": "Malware payload", "value": "b0c213c886df1edc08bc0947d8c26a2ef4b18cd53e0c2ff7b86bdb5784e4e72d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "3bc93ae8-8fe9-440b-9505-c1a128c06bcc", "value": "T173A423A35293A2D7ABA19F74E40D93D1E2CFCB0D3D9AD2F423B6F904FA651C944484", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "6a8ac363-b24f-404c-b97b-b133e65acd7b", "value": "12288:B1TGoqqMj4uEU581RIfMiZ5d6HfLGsjukmtrYFg:B1TGoOjr8EfMiZGYtcFg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324572, "uuid": "d44282aa-fe12-48a0-8c87-051ebeb41bc5", "value": 491961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "7d4554e3-f9d7-49ca-9378-9a380bafc13a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6618796a-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "144b4343-500b-4aaa-8fb1-2eb6a1eee756", "comment": "Malware payload", "value": "402e577e68fdcf0091e95f188eb3d49a", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "85349749-8935-4f42-bc46-46d5ade416fd", "comment": "Malware payload", "value": "c3da03d1194372ebf30cbc9fd18c2a72d39999475333e5246756858863d745de", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "2cd2b721-c37b-4063-9d2f-6389f53c3097", "value": "T158B423816C6C2B73F541F59C1AC4342CD4202C3B9AB763DC5E8844D3687EB66BD6A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "bbf8971a-0e04-494f-a5db-a95c2ba768ef", "value": "12288:ijXlNMiiXBZTBViRziobl9jcr91+rTY3r8qrfUhur2:eXR2BZF0RLbl2rKY3IE8M2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324572, "uuid": "158781dd-5854-4202-9956-1398da1ade13", "value": 530766, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "caf29416-3ce8-49fe-bb53-b655a9552cb3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "662bfeaa-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "f7733a48-7a54-4dec-b3d0-6b7b96501301", "comment": "Malware payload", "value": "4470dc3874b03cb8b35755864bb4e6a4", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "e9306540-3a2f-4d14-a58c-40e69c255808", "comment": "Malware payload", "value": "f7f1c24745a2e722e2eee22cec4bfda37fc720426b8fbe02abc97c98403b9ea9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "1ea3fc01-735b-4ba5-bcd3-640e2e7a7319", "value": "T17DB423856C682B73F541F58C1AC4342CD4202C3B9AB763DC5E8844D3647EF66BD6A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "bf4a72e7-7ff9-4417-8a36-8d9ac1578864", "value": "12288:mjXlNMiiXBZTBViRziobl9jcr91+rTY3r8q/fUhur2:6XR2BZF0RLbl2rKY3Ik8M2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324572, "uuid": "22044f88-b185-46ca-9d9e-613f79b23073", "value": 530766, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "57e5effa-c62a-4565-b2fb-aedd44c31d2e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "663f5b73-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "06f1cb33-45b3-4139-bea7-abd80da7ed17", "comment": "Malware payload", "value": "b5ab472cbb35b1ac9de3c64eb0a19af9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "e249fe7f-668b-4fca-851f-2a7cc890cdde", "comment": "Malware payload", "value": "e2e706130303559aed05a3f4a9e2a9dd07f5220b991c393f80d3764ca5876781", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "4189f1d5-4afd-4987-868c-cf8178d23f24", "value": "T1DAA423A35293A2D7ABA19F74E40D93D1E2CFCB0D3D9AD2F423B6F904F6651C944484", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "dbed66b3-f99d-4836-873e-c30671ac04fe", "value": "12288:J1TGoqqMj4uEU5G1RIfMiZ5d6FfLGsjukmtrYFs:J1TGoOjrGEfMiZG2tcFs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324572, "uuid": "83855d0d-f34c-4792-aba3-b03580347c59", "value": 491961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "26a8268a-ead4-4917-a636-dd961be02852", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66455861-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "4965f1b1-37d0-47e4-af2f-b16dcecffee6", "comment": "Malware payload", "value": "41fc5b345e1a0d5672c3d4f1bdb65a0b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "9b78a569-e955-493b-ad25-53f0b3709faa", "comment": "Malware payload", "value": "f9c37e3d7d35cbe10849736319d99e22769f2a35ddf9fe712de380327172f5d6", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "c5705835-a842-4c38-9b75-4f79f908e5af", "value": "T1A9B423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "c4705c8f-0a5b-4dd7-b619-45e5c4d26648", "value": "12288:8kmht7DrvdyisCCH1oHF9nJ/qjuyPgoJrrzTPwkS:8kmHzMhH1ELnKPgoJnn+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324572, "uuid": "0f15fd75-3b44-436b-a7ff-27b1d5b0e240", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "4b32109e-d574-4f9b-8ef2-9cf55f11f70d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "664b0396-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "239b818a-775f-4496-8cf4-488a29bccf5c", "comment": "Malware payload", "value": "a76ce84c7b939f34a8d7a76faf8fe726", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "9110bd23-1927-4221-9d8f-cc35315d8146", "comment": "Malware payload", "value": "ea0543bdb669ad55792bec07af206c2ee5c63b11619650e5b3ab8e69266a0794", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "3bd8694f-0df3-4512-a281-3113479731f9", "value": "T122A423A35293A2D7ABA19F74E40D93D1E2CFCB0D3D9AD2F423B6F904F6651C944484", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "bc767bad-b057-44d6-8045-fac2b4be15b6", "value": "12288:R1TGoqqMj4uEU5U1RIfMiZ5d6ffLGsjukmtrYFw:R1TGoOjrUEfMiZGwtcFw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324572, "uuid": "ca82a6a3-4814-4c43-acb4-cbf31212880d", "value": 491961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "33527e7a-0eeb-43e9-95f8-b1af66992e74", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6659ac84-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "a9f0a7ab-1238-49e4-84b6-f3a12106a7ca", "comment": "Malware payload", "value": "29200bcf4fd7a3997c2829390bf2372c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "a0c8883d-7d82-42fd-9185-a25aeac62bfe", "comment": "Malware payload", "value": "9edfb2b43ef1737f896f87aa52b4d5e57a5fa26343cf67e5d87c66804c68d3a1", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "0ea7ae66-3463-4f02-93ec-702d493759cf", "value": "T1F2A423A35293A2D7ABA19F74E40D93D1E2CFCB0D3D9AD2F423B6F904F6651C944484", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "1dc519bb-7b80-4a8d-892f-64b04063557c", "value": "12288:D1TGoqqMj4uEU5L1RIfMiZ5d60fLGsjukmtrYFE:D1TGoOjrLEfMiZGPtcFE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324572, "uuid": "d377d55b-cd84-42f6-aefd-44a5769d1e20", "value": 491961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "6e9242ab-9598-468b-a9e0-a8746390e5dd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "665c9031-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "7faad9a4-e7f7-4c79-a4de-09f45e14dd72", "comment": "Malware payload", "value": "6681caa8ef2e879ff6454e97ab99b5da", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "82277985-7594-48b6-916f-4a31e24473a9", "comment": "Malware payload", "value": "e57aee2a20b82e3752f71b1aa66e90dde05eeb8d17f23445f1ede19b4d4ff0ce", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "8993d5e8-4613-4ba5-bdbf-7e27b31cc69b", "value": "T1B7A423A35293A2D7ABA19F74E40D93D1E2CFCB0D3D9AD2F423B6F904F6651C944484", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "a80aac46-be5e-4111-a0ff-cdbf01e121da", "value": "12288:11TGoqqMj4uEU5k1RIfMiZ5d6vfLGsjukmtrYFM:11TGoOjrkEfMiZGAtcFM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324572, "uuid": "7e97deba-2edf-4699-b771-b81f6cfdf9b1", "value": 491961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "028c8e6f-aa9e-4404-a182-a7b0a8f10880", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "666214bd-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "0510d47c-788d-47be-9649-9787d5359c96", "comment": "Malware payload", "value": "e84c55da7d9267da3874c89f0adc5285", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "88573b20-03b2-411f-be4d-34213e9c8d39", "comment": "Malware payload", "value": "fd4fa2e17a43e60ca27ffdba9097605703c6c10643972a208fb101ccdcfb0d06", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "8c6320cc-aab5-40ab-a42c-e89a5c224035", "value": "T1BBB423856C682B73F541F98C1AC4342CD4202C3B9AB762DC5E8844D3647FB66BD6A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "a47345b9-a12a-490e-86a3-fef0c5b058c9", "value": "12288:4jXlNMiiXBZT5ViRziobl9jcr91+rTY3r8qNfUhurq:YXR2BZN0RLbl2rKY3Iq8Mq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324572, "uuid": "8036f1b9-70a5-4cdf-8587-2117aecf4b86", "value": 530766, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324572, "uuid": "cd02d32b-93c8-4612-93e4-2de043b52901", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "667384cd-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "fa714d5a-c876-426a-95dc-45c2f0304f52", "comment": "Malware payload", "value": "4bafb922b8d3f01225e1609f6f03c964", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "b793178c-f31e-4c88-8a04-0db10f374fc9", "comment": "Malware payload", "value": "c4b3a6ddbd33ad6ccbc1886fed2a22be5babd114c371263b61f46425ad1ce400", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324573, "uuid": "45f22fff-c721-4091-bdbd-9483a14c4481", "value": "T166B423816C682B73F541F98C1AC5342CD4202C3B9AB762DC5E8844D3647EB66BD6B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324573, "uuid": "92ed89b7-2b8e-4275-a0ea-69f5d5bb07f9", "value": "12288:8jXlNMiiXBZTZViRziobl9jcr91+rTY3r8qBfUhuri:UXR2BZt0RLbl2rKY3Iu8Mi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324573, "uuid": "194e06af-5ef7-4615-a9b8-ecf1461b9c40", "value": 530766, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324573, "uuid": "fab610e3-0d15-4a78-b6ea-a68247a8fbe1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "668c58ad-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "6530a103-3874-4ce1-9111-10f0892bbd79", "comment": "Malware payload", "value": "c96b177f6e3e3239919e82de89bb8e4d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "ae5ce8e0-94cc-4455-aae4-1b4c12c962d7", "comment": "Malware payload", "value": "c9b2715a42f32cbbf900da5025ea0bed70447719b4e7681d4df9d23b54672f3b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324573, "uuid": "eed92b17-b9ff-4f4d-bab4-d930c5d4b777", "value": "T182A423A35293A2D7ABA19F74E40D93D1E2CFCB0D3D9AD2F423B6F904F6651C944484", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324573, "uuid": "dd574fd5-2e99-454e-a6e7-257db22736d4", "value": "12288:j1TGoqqMj4uEU5P1RIfMiZ5d6AfLGsjukmtrYFo:j1TGoOjrPEfMiZGrtcFo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324573, "uuid": "701ecd3b-d9ba-415e-a813-dba5ccac8d80", "value": 491961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324573, "uuid": "0f1d12d1-9640-4ff9-8d80-1ce32e848063", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66911f47-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "2c8dc2e6-b08f-4a70-8131-95dea68feb8f", "comment": "Malware payload", "value": "40b9acb7fdb3a4b6170c08a4fbf16ac4", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "5f269e1e-3456-4a4d-a5ae-26afce75224e", "comment": "Malware payload", "value": "961167a715e32e48d292ddc50609b2356889f8b475e9a6482f01ed0b8e134b75", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324573, "uuid": "a7d22811-aeb8-42ab-94ed-7d438fd9feb0", "value": "T143B423856C6C2B73F541F98C1AC4342CD4202C3B9AB763DC5E8844D3647EB66BD6A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324573, "uuid": "54511a00-8a62-4199-8730-77d792a0bbe8", "value": "12288:MjXlNMiiXBZT9ViRziobl9jcr91+rTY3r8q5fUhurC:EXR2BZh0RLbl2rKY3Ia8MC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324573, "uuid": "e28ce90f-26b3-4ba6-a3c4-2c6465f9343b", "value": 530766, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324573, "uuid": "f8f4318a-0f45-480b-8578-8f6ff12a80f6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66d6c3ec-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774324573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "e3206664-e13c-4027-b0a3-9962ce4c2e14", "comment": "Malware payload", "value": "4cd607bed4858980ffed0a2775b7cfdc", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "0ccbb4eb-4e21-4c9b-9c1f-004ee6b4bf23", "comment": "Malware payload", "value": "d106963e5f6bfdc04703377ef785816915cd975ebf1e8e40650dbc539a9a0a9e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324573, "uuid": "9cd65a49-e6a1-432f-9169-26cddff57881", "value": "T10AB423816C6C2B73F541F98C1AC5342CD4202C3B9AB763DC5E8844D3647EB66BD6A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324573, "uuid": "88a556b4-2837-4d57-87d6-d4649e404980", "value": "12288:BjXlNMiiXBZTnViRziobl9jcr91+rTY3r8qAfUhurk:pXR2BZb0RLbl2rKY3Ir8Mk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324573, "uuid": "75a0cc9b-0292-4100-8c93-a10bafde0771", "value": 530766, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324573, "uuid": "3619dc71-dad9-4a42-a4a9-305c7f6aa024", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68a48b58-2735-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774324576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324576, "uuid": "45e39a3c-eaac-4fb9-a59e-c9acf6a03485", "comment": "Malware payload (Mirai)", "value": "fbf5d3fa7a58b89e334d7a2d9254a77f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324576, "uuid": "ee8f6e6b-220a-44f7-9606-7dd80c73d406", "comment": "Malware payload (Mirai)", "value": "531b33dd1a79c4a57ca2aed8a2ecd97df05974c84d39d35b8ca4f568edba1ecf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324576, "uuid": "c588c772-4e8b-4370-ac83-ba41b51f349a", "value": "T154E34B56EB818B03C4D61775BAAF424533239B64D3DB73069928BFB43F8279E0E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324576, "uuid": "9f542e38-cf30-4c9d-b04a-eeb6a7c04a0c", "value": "3072:aufh1cc4RRye0MKazEdXIZAF3G2Ov1WCWUc1M/9fl:auffxEtKazEdXIZk3GcCWUWM/9fl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774324576, "uuid": "97c52b34-4444-42a0-adc1-5772dd0fdd48", "value": 152266, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324576, "uuid": "623b0441-0069-4cae-ae90-680c8339e955", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bcb291b-2737-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774325279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325279, "uuid": "3712b94e-bf3b-4d56-9057-0df7874f9686", "comment": "Malware payload (Mirai)", "value": "d3762ceffa02c5f1b9573a2a154ef288", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325279, "uuid": "75bb3d06-63c3-48ae-82b4-f546895da868", "comment": "Malware payload (Mirai)", "value": "0588790ffddd8154f1d1ea6bd11464fa8ab1116f5418c11b5e5c82a923379b63", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325279, "uuid": "61588357-54a6-4f13-9d48-f04f20bcdf18", "value": "T145733A65BC815A13C6D112BBFB2E428C372613F8D2EB3203DD25AF11378692B0D6B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325279, "uuid": "70a30d14-abcf-4821-a11d-4c2ebde18fb6", "value": "1536:iOl5kza01lp3eF/x9MkdD/xlFG6sgE+R3SwiFou0VL9M1vFaP:iOl5kTpQnD5lFT5Swru8AG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774325279, "uuid": "7de5a7fe-b842-4fb1-8f92-ccad458dadd9", "value": 75200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325279, "uuid": "af98830b-1b21-4b5d-b396-51af17fe910f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2eff2a8c-2737-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774325339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325339, "uuid": "10d1560f-3a3a-4cb6-9aad-495544ce7970", "comment": "Malware payload (Mirai)", "value": "e2b571aa36d82e4825a0df4e1e2b013f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325339, "uuid": "29874399-5298-4d2e-875f-64f49f436fd0", "comment": "Malware payload (Mirai)", "value": "e3060223977da8f21e95f6df338863429d0d547e68063658c875b629e27d4b6f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325339, "uuid": "38330ae3-d21e-487d-90be-d1631ed13593", "value": "T1AF536CC5A687C8F5E81605756133AB374B37F53B1029EB97CBDCAA229C42B01E2173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325339, "uuid": "2ab00ed2-1ab8-41b0-8d61-77cf9d24e32e", "value": "1536:yFTEDQhVTerheQ+ebAJMUAlUhCA7ALMurVQSPqs:yFTyQh1eHpbAJZAqhb74MYnqs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774325339, "uuid": "90d391b4-2aa6-4b5b-8409-746491c020b1", "value": 62700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325339, "uuid": "78866b27-f84b-4218-8cb3-c82a9d42dac2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68046112-1a39-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1774325469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325469, "uuid": "39a63c5d-f329-409d-b20c-3a955e82a6b6", "comment": "Malware payload", "value": "c4374912473cd42cfe4e1abab51af40e", "object_relation": "md5", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325469, "uuid": "d271e9ce-d178-4902-86d9-819b50751926", "comment": "Malware payload", "value": "212c76daf355ede116eb04d4f9d08a112d07940a14dc248bc568ff1ba0a64e18", "object_relation": "sha256", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325469, "uuid": "901b913a-9041-435f-ae93-a73af506473e", "value": "T13DD4F8B462047880C4AAA7729D74AFA8E23D11A9DFCE3ECC1194FAD01FB37557A0D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325469, "uuid": "c05bbaa5-1413-47b2-8781-3defcc7cfcab", "value": "6144:ZJSveutXkgEoCqT2741a3LywBTwjMtxwHVMeOF0buUwKB:qeuhra7T42MMQf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774325469, "uuid": "b4b440a0-84fb-4cc0-bff9-791c5d0bf596", "value": 617316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325469, "uuid": "e0655cd7-2896-4145-b11d-de42811b3660", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cdcdc20-2737-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774325469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325469, "uuid": "a60c2c64-553e-4a9f-8f83-50b68c671787", "comment": "Malware payload", "value": "725d4d48e46685d1a8aeaaea87432698", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325469, "uuid": "8e9685f4-528b-4a41-a7f7-4c0ce85d01a3", "comment": "Malware payload", "value": "6bdeee55a726fcc750140320b4ad5dbb3ae0c473391a426b0e64ddbe7f4c748a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325469, "uuid": "b258f840-84f8-4f08-a7c4-d4db8793d403", "value": "T1C3B423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072986DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325469, "uuid": "3ee44cfa-2ef1-4f55-93b2-fc1ef3c0eccd", "value": "12288:jkmht7Drvdyi7CCH1oHF9nJ/qjuyIgoJrrzTPwkZ:jkmHzM8H1ELnKIgoJnnV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774325469, "uuid": "0233ca5d-a796-47a9-948a-b9a289eb29ec", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325469, "uuid": "c39d000d-b4f3-4151-9e1a-3fa59a7beaa3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d17a7a4-2737-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774325470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "a47e34ea-e3e5-4e26-9372-f3ae9af3f137", "comment": "Malware payload", "value": "56d059d67b0d071dbd792da61ab172af", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "d0bc0e42-34a8-49c3-bf0f-ee4ff353297a", "comment": "Malware payload", "value": "40b143333b81014e23059c08a3e2ca67c94dc88ce8c3ba6373ddf63703b0da67", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "6a9b0a80-72f2-4ab1-a5d0-8db2713118b9", "value": "T1E4C4236D7018EB38E9076174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "45872c9c-e353-49f2-9f54-8e470b9e7843", "value": "12288:1MU+0xq75aS9iYIp6cP/G2Bku82tNvC28c5/VTUPkYy/:B+J71vI/G8Yc5/pf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774325470, "uuid": "6d951666-2c6c-4df8-8205-5d084746a225", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "10831df8-f923-4968-bfab-610179e6ff66", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d4bfb04-2737-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774325470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "6117004e-09d9-45a3-8970-b83920afd8cb", "comment": "Malware payload", "value": "40d9d6c369e57575a910dbf3e1196e22", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "746ee8e5-593f-41d4-9022-1a4f4d47735a", "comment": "Malware payload", "value": "8e85631f3e9ebbb5c6d9088f419d1bc713433d4b3d6b6c2dcae3f2170af6bef2", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "5b442429-761e-474c-87d6-f7774c2c12fc", "value": "T19FC42367226F72500DFE92ED4E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "bcb4942d-8f6a-4602-b0fd-31d66cb3c714", "value": "12288:yeCEht59qO3g/ALyYG0ZaDajTCXMO8xzDOeQakT:VtnA/f0Za6TCXKBxlU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774325470, "uuid": "d728ae34-ca78-4a58-829b-92d4204d8dfb", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "9bb628e8-9557-4c59-a967-fe211a993ea1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d58fe36-2737-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774325470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "b8881d6c-f316-45a5-83ab-c398873a0b7f", "comment": "Malware payload", "value": "45570511c9d526431711588f59f77503", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "8a48d847-19bc-4ae3-a14d-2d7667447912", "comment": "Malware payload", "value": "9f4cef4f9e12095580c966e21c2c04d1cc9b79144ea4a299abea08ca1a5c348b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "5837f5e7-5cb2-4c66-93dd-ece05f803c89", "value": "T1C5C4231DA0547B51F64B6A78B323CDB09B2AD03FD219C388A0840B399B5BE5769CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "55d91e83-2d0c-45b4-ad26-770e383733cd", "value": "12288:uMU+0xq75aS9iYIp6cP/G2Bku6zXLRHXP427bo:e+J71vI/GzXVftHo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774325470, "uuid": "7f322741-4ac0-4b5e-b3fa-b1b02fc8de2f", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "a7b855bb-479e-4c80-abb3-ee1673040466", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d5994d9-2737-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774325470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "7770a658-7f59-4c92-ad63-46ad9f7458ad", "comment": "Malware payload", "value": "13c37ef2692e0262c5365d3af68c9929", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "8c6b2d67-0b95-462e-b866-1ff10ba56b02", "comment": "Malware payload", "value": "bad099ed129cfe7e9feeb3cc027e91910c33f0388a72d97d2c1c975630121aca", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "583e010f-acfe-447c-ab1b-0287c1d7dfb6", "value": "T14CC42367226F72500DFE92ED4E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "f378f7ae-f7c9-4ef5-b9a2-ee027d71c43c", "value": "12288:AeCEhtE9qO3g/ALyYG0ZaDajTCXMO8xzDOeQaks:HtuA/f0Za6TCXKBxlz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774325470, "uuid": "522fd9bb-faaa-4e9b-b810-bf45952c72c2", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "1e21c12e-a627-4070-9c26-d5982fa18442", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d70823b-2737-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774325470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "157376d8-d8e8-4a3c-a795-a3488ff21efb", "comment": "Malware payload", "value": "bcf5e74805d4654306e6747420eb2b52", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "22fbe92d-01a9-4d0d-a530-19218b64f4f9", "comment": "Malware payload", "value": "b05a7b07b5d676436e09eda90ec5c4d7a1076401d60894002d7cd134d699879d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "316aaa35-74ac-42a2-9e75-0f67aa0b0895", "value": "T1E8C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "8c4d54e9-1f8a-407f-b75c-5766285fd725", "value": "12288:X+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byjH9I1P0QKw6FEb:X+QqldA/TSO713u7xnjH9IaQKHK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774325470, "uuid": "9b2ab873-4ca3-49e4-88a9-b0ebd00a31cc", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "8f4753ba-1f3b-4687-ad78-3442d91ed394", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d91c76c-2737-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774325470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "1f8c6317-92ad-438c-bd68-f9eb48dfc3aa", "comment": "Malware payload", "value": "67f905aed9eb1275538442fce30ec0a5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "223258fb-a1d6-4a57-aca3-cd3f8f2b2d06", "comment": "Malware payload", "value": "9a3e6d2ddd6d7230964d093a6c686ede9556b7741578069943c6766fd2f667d3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "feed3941-93b2-42d3-b9b8-2faa79fa3965", "value": "T153C42304340741D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "ffd2a414-23b7-4cc9-b245-638fdfbafd1a", "value": "12288:X6wlOMWROC/FTeHo22Qm7NzofOr68mheA924EwCr:v4MQOC/gHozN7NzomW8rA9Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774325470, "uuid": "b3e83a1b-704e-4c99-89bd-2e2a26e7dd38", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325470, "uuid": "6adf40dc-5a64-45ea-b819-abb20b70bd77", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dad7a82-2737-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774325471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "6e869e40-bf52-40b0-846f-a14cc96e1a85", "comment": "Malware payload", "value": "0a98e45bc457f26235687135b47157ea", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "c38cc573-5a38-4372-aa92-53bc9b7e33e8", "comment": "Malware payload", "value": "f4eaf8c291dd06f6512acf38683d4d2a3fbf39f470e92713337dd94f3dae61eb", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325471, "uuid": "812e719b-4024-4e24-842b-49ffec481392", "value": "T17DB423F5A7506BCC9D20522F2F4A2BCE29274B41B403C54A1AD2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325471, "uuid": "1abdccf3-9287-4801-abd1-c19ed6e3ef0e", "value": "12288:0BRdpQ73iBVYWPCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUY:0HUw2WK9XgbM0azTHiQIouDE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774325471, "uuid": "07f66af3-76b4-4e37-857c-def30c8fc015", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325471, "uuid": "fd1de716-5850-4ba4-9d65-0ad7eef2c1c9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dcb2de9-2737-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774325471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "219a17c4-2214-4654-b13c-3296edb2dfcc", "comment": "Malware payload", "value": "7d4adcab5ba38b25cc681e34f53c7264", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "1c81a54b-0357-4605-8bf8-1b3d015dc2fa", "comment": "Malware payload", "value": "383c2e321dab0d2606999600d52a776e57ed500e03511b7a8bb28a0b208e0425", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325471, "uuid": "ad382e35-5fbb-470e-b62d-f7d97f24727e", "value": "T1B1C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325471, "uuid": "9e839149-fb32-4631-b3e3-54c7e51d776d", "value": "12288:mA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWySFyorOIic/7MPP:5m6Jj6ESfUxZ91kmY/99z8zFXicTk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774325471, "uuid": "cc16f763-a126-4feb-8c89-373a11aa4c76", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325471, "uuid": "4aea4487-30a9-4f5a-a370-c81a7596840c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51368d80-2738-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774325825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325825, "uuid": "b83d7422-073a-4670-bf42-a89c6e3ccf42", "comment": "Malware payload", "value": "7a29acfb81ff9d1335b475b7acb1651d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325825, "uuid": "3ce73b9c-cf68-491f-ab09-719c64de72a6", "comment": "Malware payload", "value": "81c18787148d07547851e1834b43e5a5b24c25c3eeb118da7379c17e40b442f9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325825, "uuid": "c21a260a-5cfc-4816-935a-a0a671e39364", "value": "T135B423CD64BED0A87B658DDA9FDCFFD30CFC003A6D7526F2A51C1A13A1C404B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325825, "uuid": "6f733618-4da0-4261-b2c5-4648c4d7bc73", "value": "12288:vB/e4pqNFTFbEXkXDoGbDDGIabs/7iiEVwYg2l3/2NyR:vBm4pgTFoGTabs/7iiWw0DR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774325825, "uuid": "f0771d05-d563-4489-afaa-fcdabb02ed69", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325825, "uuid": "0b27a2e3-8938-4967-9d36-a21f22f9e556", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "514b0270-2738-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774325826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325826, "uuid": "21ff8bec-6047-4cc2-b02e-dc8f36b454f6", "comment": "Malware payload", "value": "1aeeb14483df651e17a80d9688432226", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325826, "uuid": "3e3244cc-07dd-4b0e-9fe5-e59760d8938d", "comment": "Malware payload", "value": "f12ad83dd733ccefbe943df369afbb98a44594ff35bec807fe19cf4a308d532c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325826, "uuid": "2c21a9d2-8e25-43ee-93b5-84a9025769e4", "value": "T1F8C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325826, "uuid": "62eed675-b678-423d-8dc6-e34a9059c28f", "value": "12288:D+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byJH9I1P0QKw6FER:D+QqldA/TSO713u7xnJH9IaQKHY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774325826, "uuid": "9d7ce600-180f-46e8-b722-ec447ab17409", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325826, "uuid": "51361cca-9362-4555-b836-1839f0524153", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6031d407-273c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774327569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "a4e642a7-a746-4895-b75e-46be3397e73f", "comment": "Malware payload", "value": "9a1643076ed4ac4e5cc428dde330a626", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "f3cc0c71-a2cd-4559-adf1-00117c870e6e", "comment": "Malware payload", "value": "7f9a0b0c2fec3304e4c0bef3b600516fbb6ebec8274cebab69a4b12c3b1f30ff", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "6ee7f070-971c-43bc-97e4-533cffccbc91", "value": "T112B423F5AB506BCC9D20522F2F4A27CE19274B41B403C54A1AD2875A421FAFF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "f6ddaacb-4844-4df7-93e1-814665807335", "value": "12288:oBRdpQ73iBVYWXCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUI:oHUw2WS9XgbM0azTHiQIouDk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774327569, "uuid": "2dd68fa9-f472-472a-80ef-e30b4ca58043", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "fa948f55-0859-4872-ba9a-512f31c11657", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60322ab2-273c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774327569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "58e860dd-645e-4f88-9f95-b32f55b30fdc", "comment": "Malware payload", "value": "147c0587eab65bd5037b2ba343f36799", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "b5a67280-c887-433e-96c2-e2dd811cb3b8", "comment": "Malware payload", "value": "ce03a64a374cc19648e84ca3590e08fc18453633dc6498ec87456bfa0e0bbb75", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "e8605960-c5e6-49d4-b064-3d43f3d21557", "value": "T1CBC4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "f32029ff-f7b7-49c7-8ba4-a53761ecbdb2", "value": "12288:hMU+0xq75aS9iYIp6cP/G2Bku8ltNvC28c5/VTUPkYyS:l+J71vI/GnYc5/py", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774327569, "uuid": "da3034af-eef3-4bca-a8a8-3d78382512f4", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "9a889d29-bcce-4657-9769-6273d8ac8df1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "603ce5f2-273c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774327569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "3b99711b-5b35-4c69-a07f-31f2a909c4a9", "comment": "Malware payload", "value": "f4974b6dda10c799d88518717d26f301", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "108e7a80-341c-4f94-abd6-2994ca426e4b", "comment": "Malware payload", "value": "a4ee30c8a0078e93b6269b46cc0655a58f8f11b5e2de7c886224c8eb65f4492b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "de8c9df0-7899-4044-ab5a-f06557fe5460", "value": "T18BC4236D7018EB38E507A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "0762cf78-db69-4dbb-b321-727404ddb35a", "value": "12288:VMU+0xq75aS9iYIp6cP/G2Bku8LtNvC28c5/VTUPkYyE:h+J71vI/GJYc5/pk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774327569, "uuid": "3d802ecb-a38c-446d-939b-98cdf381f17a", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "c36bad99-6be7-4776-9cc9-9ae6db1ff8c8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "604a5ab9-273c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774327569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "83d0f563-3198-4cc0-8e1d-237480effd0d", "comment": "Malware payload", "value": "3a6410d6025571b2dc1ce771f5d542d6", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "850864e5-516a-4120-8cdf-69a1f2e2d984", "comment": "Malware payload", "value": "315e79b48b009f8ed88b21c818cf784bb8badb5514c2fc40cefb52a584649e71", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "eb6ea06a-08a2-466d-bc2e-6c92beeaa5bb", "value": "T1D8C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "d89da27c-4bf4-4636-b36d-b7527352c528", "value": "12288:UA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWVSFyorOIic/7MPw:/m6Jj6ESfUxZ91kmY/99z8kFXicTz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774327569, "uuid": "7ebac92f-02c2-4ce4-a3e9-575bb4e84c04", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "d58216af-eb38-4118-a573-d8535f7e40f8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "606b7d6f-273c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774327569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "5474c454-76fe-4418-ad4e-050cc2f4da9a", "comment": "Malware payload", "value": "ff7ecedde6e39610896e091f30bb5e18", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "ff8bf53a-9ebc-44a2-8308-bc19ce74936b", "comment": "Malware payload", "value": "830183eb99688b59c1b4745a518a0f73e31b3844711453efe1fe3d7c28efbfb8", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "785fa6a1-6b89-4a50-a09e-142c3cf3a9bb", "value": "T17AC423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A8D9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "0a35a3ba-521d-49c4-94b2-471848224702", "value": "12288:dyBXIs7rM1PcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5o:IImQ1vEA/f0Za6TCXKBxeO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774327569, "uuid": "bafa1762-91f4-41b3-a4cf-edb01b21dba7", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "105bc02c-0613-40b0-ad30-a00f70ff11b5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60741f7f-273c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774327569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "1db9e7d7-7e04-491d-8b5d-2ea38b52124d", "comment": "Malware payload", "value": "8c6553f79bd5326888115b1bb1bf3123", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "26949c6b-663c-4bf9-9284-c97117991c5e", "comment": "Malware payload", "value": "a2912fb61302e8519131b6bbc8f47b293cdf24696b9962c7d73d9e68d3031f10", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "8d2fda83-42cf-4309-b73f-e195a8b4c253", "value": "T112C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "1d6eaec6-63e5-461a-ba09-68330cdadfc9", "value": "12288:P+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2by5H9I1P0QKw6FER:P+QqldA/TSO713u7xn5H9IaQKHE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774327569, "uuid": "b354b13a-f1ae-4120-8101-44d37b9e54be", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "c0a1ff05-0605-477b-8b39-134e0c7f0711", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "607429b4-273c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774327569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "9e1b89e7-3045-43fb-833d-5007407e39bd", "comment": "Malware payload", "value": "c0d4ef2892cf44e19a627919d197ac89", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "e93a06df-f1c7-4ddd-9a1a-d4eb834ddc67", "comment": "Malware payload", "value": "49ec68a26c186d60654deb0b98008e2eac14d4f9783d9e62356ac2ea7d2f6cb2", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "8c1694ea-5cdc-4429-9fb3-b34157d2d55a", "value": "T1CCB423F5A7506BCC9D20522F2F4A27CE19274B41B403C54A1AD2875A421FAFF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "42e8fe41-6a6b-4812-ada2-5d310fed6c82", "value": "12288:EBRdpQ73iBVYWNCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUO:EHUw2Wo9XgbM0azTHiQIouDi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774327569, "uuid": "2fbe33f3-499a-4097-af0f-eeaedc5cb0b8", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327569, "uuid": "a1607341-f48d-4f5f-b20b-74b79ff67f8a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82dd00ef-273c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774327627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327627, "uuid": "dc711cf0-1669-464c-b932-028670f7a157", "comment": "Malware payload", "value": "973c5211ac2a84cb7ec9d1ef1c8745f5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327627, "uuid": "0d6b98a4-8687-4860-b20d-0d328dee6caf", "comment": "Malware payload", "value": "fcf4bb1b47567bcf8907af543fccdd38a6ce00449d79fa557773ef42b29039ce", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327627, "uuid": "2b444b42-737a-4a33-9400-7fd0bda30c53", "value": "T1F6B423CE5A286CAC5BE85E834F5DBFDA2CF8413F862415F3F3581A14D4C95A672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327627, "uuid": "b3608fe0-fc81-4ae2-940c-4233be2b1a64", "value": "12288:rGRl4nbDDGIabs/7iiEVwYg2l3/2NHey+wK8+:TTabs/7iiWw0Kpx+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774327627, "uuid": "4fdef819-3b95-4160-8f2a-abc80d20ddd8", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327627, "uuid": "6db653ad-72d2-4ea7-bf2b-9be2c64b2a0d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "694dd5fd-2746-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774331879, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331879, "uuid": "71bbeeb1-f764-455b-9939-de4cb70e28a6", "comment": "Malware payload", "value": "6243322a7cf01950526a325cb9779723", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331879, "uuid": "ef776a93-a62d-46ff-8d90-0a529e5003de", "comment": "Malware payload", "value": "7a9b54682416d70a26b242117d43e511bfcb9bcf85ada8dd9c8a96e93eeadf30", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774331879, "uuid": "e9d573ec-d873-4cfb-850b-093626104b3d", "value": "T13934BDB5BCF305971831A3AE2ED1EA335478E236BEB1883945939DD3558C104BBD63", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774331879, "uuid": "d6619097-2ae0-4aba-bcb7-65c935e8b3f2", "value": "3072:WWqja1m8exIBenO7LbOQSf+G5dvLKVk/ZwfJ++TVMsg4nepTj+kk5xQzANEn5DzU:DBcxIBnOx+Q1LZ/Yv3gQ+kz0bDjeqQh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774331879, "uuid": "8aef0d1f-4a54-43d8-9c2b-85b5850a5091", "value": 239686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774331879, "uuid": "7b8cc2b5-c9bb-4a23-b17f-2ff83b56fbd0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e2af950-2746-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774331887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331887, "uuid": "9731f9f0-6b10-4020-ac08-708b608a3cf1", "comment": "Malware payload", "value": "da4609da01e6be5ec40f75249d9ba242", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331887, "uuid": "46846fef-1f36-44fa-b826-dc5999ab30d6", "comment": "Malware payload", "value": "7dae522c37c9b665d65049a6cbdaef6609c8149140fc4f14a2fbdc0c1c51f8ab", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774331887, "uuid": "2891f966-4583-4f06-a023-eb8720c7b7d1", "value": "T1E9C4231DA0547B51F64B6A78B323CDB09B29D03FD219C388A0840B399B5BE5769CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774331887, "uuid": "a94ddec6-7361-4bba-a560-7612771540ec", "value": "12288:eMU+0xq75aS9iYIp6cP/G2Bku6zXLFHXP427bM:O+J71vI/GzXBftHM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774331887, "uuid": "24f86939-4fc1-4980-87cb-1c028b3b992f", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774331887, "uuid": "f87d9b0d-0bc5-497c-9cd0-d56a3a78a26e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ebc7df8-2748-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774332666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332666, "uuid": "3383da01-59c5-4efb-b27c-add2aa1208a3", "comment": "Malware payload", "value": "50b07c6a322c1e582a185cae69c0cd6c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332666, "uuid": "6f97143b-a14d-4edb-899d-8eb09fdc67ab", "comment": "Malware payload", "value": "06bdd761d27722e4e8f1b6843ec4239910dad0c282d87758f0419f0c7d01f2c3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332666, "uuid": "99812afb-ac50-45bf-837b-4255d2b27d74", "value": "T152B423CCB6CB88CC55A63134E6A20A4154DBBF33B2DF7391B5BC49700DA6A6710297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332666, "uuid": "bfa35790-b37f-4ea1-b509-d14254f74742", "value": "12288:VwsK8MG1KnyC/G76u6M0gXar5qdu5ct2ien3P+beF:7KGcGmuwjxQen3Pww", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774332666, "uuid": "5dc3e0f1-2849-4566-96fc-6dde54a792b7", "value": 515391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332666, "uuid": "b18fbf32-6baa-410f-aec8-04f6d81fcce2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ebf532a-2748-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774332666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332666, "uuid": "289cc517-c919-4a48-b086-aa782845026c", "comment": "Malware payload", "value": "dd5405ef5c31fa28caa3f9cb42fc7f14", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332666, "uuid": "aacbdab2-0124-405b-8ca3-1d714ae734a1", "comment": "Malware payload", "value": "60ceed81ec82aa3a54306f1498798bc235857fd6b07948f6a7ae81dd5b5fc540", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332666, "uuid": "5adc9471-bf8d-42a8-805f-0ca007171ea5", "value": "T1D4B423F5A7606BCC9D20522E2F4A27CE19274B41B403C54A1ED2875A421FAFF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332666, "uuid": "60a84a6c-6f30-45e2-8dbe-44e4c10fa5b0", "value": "12288:wBRdpQ73iBVYW3CwvEXgbvM0a4OTHiQIIFzuK9Gd9IUU:wHUw2Wy9XgbM0azTHiQIouDY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774332666, "uuid": "8f1987fb-f61c-4786-87ab-599e84111d18", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332666, "uuid": "3d2b809f-73b1-4a1f-b42e-65d36d017148", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ed71262-2748-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774332667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332667, "uuid": "65baa990-818e-4aab-bb49-ff31b07d8513", "comment": "Malware payload", "value": "c34dd9f054c19d08759849c8c8a15702", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332667, "uuid": "a8ebbbbb-70ba-48d2-a97d-cfcaccc6b1b4", "comment": "Malware payload", "value": "1393163e4c959305b30716904b5f5af42a0370e53c2a0b045ff4893190e5ef31", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332667, "uuid": "31081283-0a2d-44d7-a3f6-37654051d38d", "value": "T103B4230A85D01FFF899ECB9946D4A4672FF467952F93565BC0CD20700AEA203E6EFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332667, "uuid": "3eaa1893-7158-4478-a3c8-2dfc0c2ae4ae", "value": "12288:jvOi3UDYXndLQ/jJOjB89RitlR0XjuIkVp69d3iY829uhBbbY7vPpCkI7:jWiEGnlQ/jwyil0X7kWv3icYbb9T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774332667, "uuid": "76c90c61-ef9c-49a4-9437-800d02dae7aa", "value": 540419, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332667, "uuid": "3adc1546-10d5-4d1b-a880-4f52e57705c5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3edf211a-2748-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774332667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332667, "uuid": "b4a6a9b7-76ac-48c2-8a5e-5b11a6aeb5a2", "comment": "Malware payload", "value": "00c0e56c42c511f6953cc4ae1525b18e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332667, "uuid": "ba4e197f-2ac1-43e7-9151-caa01c4b6877", "comment": "Malware payload", "value": "99834bdd8a5ebbc5c957ba7f9ca6eab8311597c122cbc507cc12e3475e5a3014", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332667, "uuid": "a7c9a452-93f6-4df0-8f02-15d054d43e03", "value": "T1BAC42304340641D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7FD06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332667, "uuid": "38573d7b-38ff-4a91-a099-efc8bba85875", "value": "12288:z6wlOMWROC/FTeHo22Qm7NzofOr68mReA924EwCH:r4MQOC/gHozN7NzomW8zA90", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774332667, "uuid": "43ff0c1a-db42-4188-8bb4-05f0a92c9130", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332667, "uuid": "1d50bdc7-a7dd-4aff-b976-6db25136d95a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ee05796-2748-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774332667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332667, "uuid": "03d81145-9d19-4e7a-b91c-35ef35afe8a9", "comment": "Malware payload", "value": "2a620b3eacdd1346f74dcb06cd4ed32d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332667, "uuid": "27a8810b-4537-4721-a4f4-21be8866a082", "comment": "Malware payload", "value": "8e4427f5fa14f5e39d09da55eaeeee97c06b7ca03ccfee6d992c89c4d11e3872", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332667, "uuid": "f79c6a86-9047-463b-ba26-2290e6a6e350", "value": "T1D6B423CCB6CB88CC55A63134E6A20B4154DBBF33B2DF7391B5B849700DE6A6710297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332667, "uuid": "312dc2b2-c9c5-4ffe-a48b-b4b0f8d2c0e2", "value": "12288:5wsK8MG1KnyC/G76u6M0gXar5qduBct2ien3P+be5:nKGcGmuwjZQen3Pw0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774332667, "uuid": "1021976a-e3ff-417e-8d43-7ef5d6219fd4", "value": 515391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332667, "uuid": "5d8e93a6-59b9-471a-b5a3-8229a5a7f72b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d8963cd-2750-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774336208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336208, "uuid": "82c1a313-23bb-4c84-8502-ae0115535095", "comment": "Malware payload", "value": "cf45251ed9fd032c293038864f15f913", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336208, "uuid": "48aca831-61eb-4c62-ac0e-206c09809aa8", "comment": "Malware payload", "value": "b88687efad70ff114173ec9029c516e96e6255e76a5bae6384a9f8630f99c40b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774336208, "uuid": "9e21da93-fb47-4f50-a13f-174d3f5529e7", "value": "T1A8D56BA688B1BF13B7BA8E4873341E5D101426370FCB150AB4BEE7C67683975346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774336208, "uuid": "8b9c055d-6492-4f64-9f94-ce062ba15784", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTUhvFRBW84FMotR:m0eF4xaDjDONijDG8ZxFTr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774336208, "uuid": "351c157f-644e-40c7-ab7c-04f55457490a", "value": 3000812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774336208, "uuid": "bb2fc6cf-18bf-411c-80b4-9328a8385397", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3489cec-2218-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774336211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336211, "uuid": "ed87bdbd-4a72-4651-8dac-8f6f57e4c426", "comment": "Malware payload", "value": "945ffaa0e5129720438643a5618aac0e", "object_relation": "md5", "Tag": [ { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336211, "uuid": "8a6bdaf1-26ad-4536-b0c6-67784cd0fd3f", "comment": "Malware payload", "value": "d0de65137193402d3b3a4b01068ed1a43a4b7ecdf6bcf3cb0684248ba9395ae6", "object_relation": "sha256", "Tag": [ { "name": "obfuscated", "colour": "#00dd7d", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774336211, "uuid": "fc3b3284-defb-4a5b-b58b-b7dc46c6f3c2", "value": "T140D58CDD098562E2C3FBB360C1B56E2E26B133239C67991B73FCA1D8CB512966D43B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774336211, "uuid": "c5bb8abe-d60b-499d-a4df-b116e731314c", "value": "24576:8+EhkjiYLXR+bG/f2mtFfsqD+n0tkR5JoiVsgV+PYDlJBK3xrcGMPIUn7CsgelOa:8UiYbI27TGJos+PMeIGMwJsgelriBKP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774336211, "uuid": "7532110e-da4a-486a-bed8-bf678273bb97", "value": 2945174, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774336211, "uuid": "6102f897-5558-4408-b936-931a7e74c740", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7188e780-2752-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337047, "uuid": "e6674375-5b61-41b1-96d7-d1b4cd94bdf0", "comment": "Malware payload", "value": "e0aea4bb6c023962a000a119c7d93680", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337047, "uuid": "95416e80-674e-437d-98fe-92c277d5dc74", "comment": "Malware payload", "value": "436cf53b32e42baadf9e3b0f05240f9fbf8b04a2d85a69eec5b6b9f48cf657b5", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337047, "uuid": "f3612c32-3c9a-4c5d-849a-47f4eaa38986", "value": "T129C42304340641D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337047, "uuid": "04fe83e4-04d2-4992-afb7-e7e05b5dcca7", "value": "12288:j6wlOMWROC/FTeHo22Qm7NzofOr68mXeA924EwCh:b4MQOC/gHozN7NzomW8RA9W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337047, "uuid": "d30f3e1e-81ff-4f66-980a-bc4f6aa60d9a", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337047, "uuid": "142e9714-4044-41e6-baed-6602ece6ce34", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71c7ff6d-2752-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337047, "uuid": "bb630a02-5c90-4337-bc98-cbb9aedd989c", "comment": "Malware payload", "value": "23f548c4c52b62a9a2f4ea4d8c1b284c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337047, "uuid": "44790430-0d2b-4343-8d70-2b404e1bc79f", "comment": "Malware payload", "value": "379722763e519a31da814ef52c2089ce2e42c95689090fc9651339e260adf9d9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337047, "uuid": "f4a103e8-b836-4423-8495-65740c2a8631", "value": "T11FC42304340641D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7ED06DE92A177C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337047, "uuid": "f6009308-d651-453b-b876-dfecd1610c67", "value": "12288:D6wlOMWROC/FTeHo22Qm7NzofOr68mVeA924EwCj:74MQOC/gHozN7NzomW8zA98", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337047, "uuid": "c6874dd4-e39c-4be3-b554-d06fd22e32b1", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337047, "uuid": "0cf6e4a8-2417-4320-8aae-b687e7a84b1b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "965e0c12-2752-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337108, "uuid": "c03c84cc-7026-4868-b356-d3d4d1eadf86", "comment": "Malware payload", "value": "e8a98665acc84d82fc13c9c014b521a3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337108, "uuid": "03997ef3-933a-446a-9ecb-8a8f681947fe", "comment": "Malware payload", "value": "acc905101b97174926546cacb1c67b314c1322c49a2be0beb7379d8cda9851c6", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337108, "uuid": "10b5c8da-e129-4e35-b1f0-c797fb1836b3", "value": "T111B423F5A7606BCC9D20522F2F4A2BCE19374B41B403C54A1AD2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337108, "uuid": "896b767a-0a6c-490c-8820-47184bf27557", "value": "12288:iBRdpQ73iBVYWYCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUH:iHUw2Wp9XgbM0azTHiQIouDz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337108, "uuid": "aad99d1a-e5db-4639-a3c8-5f8901ffac33", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337108, "uuid": "74e896e4-4f72-4508-9e26-8bf493879671", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "965f0642-2752-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337108, "uuid": "0d2c6b66-cd12-4c5f-9949-403e6e8cb6ff", "comment": "Malware payload", "value": "f57118fc6c790cbf7481f2798097f8d5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337108, "uuid": "523739e0-cf3f-4822-ac8c-921a6cf9160e", "comment": "Malware payload", "value": "b603112e59dddbf640ac077d5588a608bacdcf6dbb3ed5657f9efd30c18e5cbb", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337108, "uuid": "bf96e296-e71c-48f9-9e95-76ceeb4da18f", "value": "T192B423F5AB506BCC9D20122F2F4A2BCE19274B41B403C54A1AD2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337108, "uuid": "5ad7a263-aca2-41af-b609-e70c026e7ba2", "value": "12288:iBRdpQ73iBVYWqCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUJ:iHUw2Wb9XgbM0azTHiQIouDl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337108, "uuid": "897c3f63-db7d-4d10-9e4a-18d0c4f90f6c", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337108, "uuid": "2a77a38f-b9f5-4c9e-b3fd-32418c7a184a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d282086-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337469, "uuid": "719d141b-0aa9-4f49-a09a-07554c893a15", "comment": "Malware payload", "value": "c17321365cf04d4f34967d2d484615d8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337469, "uuid": "452c6b3f-d3eb-45d7-99bf-6904ebfdc0d4", "comment": "Malware payload", "value": "cc2b02c36e9f9da50df46cdccfdc486d6f554096e4c6fcffd6a21251ba868572", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337469, "uuid": "c2bf0eb1-84ba-4620-909d-647a15de5c3e", "value": "T1A2B4231AF4D078CFD68ACDA394292C785F6C96C9CD126B7247C4EE9312442F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337469, "uuid": "58c3b4b2-8e9c-44d2-90ce-84a4ad0cb89c", "value": "12288:pTibgSMFBOBSlqrgKu7FxPbzJTVBU+8JM9hAC8Z33VOBRkbKQDiUbpKa:AcSMFYKKkxpTKJM9mCw33VOMWAPbpx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337469, "uuid": "39cbb0dd-dcbf-478e-a865-6e39ce2fcc09", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337469, "uuid": "4bf54525-5e1f-49e0-8dc3-f8fd23dde42b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d7c0b92-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337469, "uuid": "b62d4455-7265-4f43-b969-fabab7edfc17", "comment": "Malware payload", "value": "3f31c194c4fe1929e9e939cabcebcf71", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337469, "uuid": "60bf2659-8190-4285-8855-16cd3ec67bd4", "comment": "Malware payload", "value": "7371d990fe28c985417363f6835698fea49c3f6ab7902a69533b6c9c7a3e1548", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337469, "uuid": "a8f3ed21-0b33-46b1-a40e-0021cb260ef2", "value": "T185B423CE5A286CAC5BE85E834F9DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337469, "uuid": "9208e1f9-3d01-4c08-83c6-284640fb6f7a", "value": "12288:zGRl4nbDDGIabs/7iiEVwYg2l3/2NHgy+wK80:rTabs/7iiWw0KLx0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337469, "uuid": "6a6ab0ca-3635-4b21-84a8-a64e878620f3", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337469, "uuid": "dd1ea91d-e97b-4a7e-9c2c-3f05a3d86e99", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d7dcc68-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337469, "uuid": "0919062d-b4bf-448f-a390-bae636eaf284", "comment": "Malware payload", "value": "cc5099e6c2370b4f2704199ccb619087", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337469, "uuid": "37fd0f0c-cb8b-454e-aa0b-a28561e18ca9", "comment": "Malware payload", "value": "3803f00107cce91b8e7917ec0740bd1ad5a0813e43cd461442383bb2f2118763", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337469, "uuid": "ee1bada5-10c8-4724-a3e0-5cbfd4683774", "value": "T12CC423B7179AB0897503E3E4854C6D9489AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337469, "uuid": "3b885842-26af-4aa4-bf5d-98cc3b936e77", "value": "12288:GeElNtIBB2gX3U5rA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezQ:GeSIBBfHBm6Jj6ESfUxZ91kmY/9Hek", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337469, "uuid": "faf2aed0-3bde-45c6-b4a7-ebe821fa122c", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337469, "uuid": "8101bce5-133e-4db6-8384-0e80cda79654", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6daba352-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "0434c37b-fcd9-4da9-9ef3-eb994481ccea", "comment": "Malware payload", "value": "607e04fab645e894592274a984c3f043", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "e8dc8454-6b56-45fb-9d8a-f70769b70838", "comment": "Malware payload", "value": "9b544d929777e81fcb1c6e37548555ad92a981303e2ef2b27523450d79342e19", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "406428ce-7fa2-4204-ad9d-a7b023b16c4c", "value": "T139C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "3899c41c-a8ef-4a02-9da4-3f1e73f6d996", "value": "12288:X+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bypH9I1P0QKw6FEh:X+QqldA/TSO713u7xnpH9IaQKHM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337470, "uuid": "cb2ca898-d7ab-4865-88bf-9e760b1bfb18", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "51585d88-998f-47e0-ad43-b2f5dd2dbdaa", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6db79821-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "da15a572-2ecb-4da9-b230-cb82644291da", "comment": "Malware payload", "value": "2e52597168a3ed394483335089f3b545", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "d50d86a7-e746-4332-8c83-15df41176059", "comment": "Malware payload", "value": "132c1437a52a6d37a7aa277a96e538b6a7b5f937ba6c9547752bed8a97e65c72", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "0e5be4fe-8f46-4a67-a0f5-680cfcff6d31", "value": "T166B423CE5A286CAC5BE85E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "cf72b17e-480a-44a4-b008-f25f75405904", "value": "12288:zGRl4nbDDGIabs/7iiEVwYg2l3/2NH4y+wK8s:rTabs/7iiWw0KTxs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337470, "uuid": "ea6dca2b-6017-4338-aea6-12c1f9ea07b4", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "5b33ec71-0980-4fae-bf7a-5d76023b4257", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dd627c0-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "f766d008-6e22-489d-9847-a93cefb0c6d7", "comment": "Malware payload", "value": "757b03732769e15983c514afb949e58d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "2cd20d0e-473b-4bdb-a997-2dd799194208", "comment": "Malware payload", "value": "5b9205994d6723f7fb28afec119a2120919c11f606a3fccb4bd58e668eb9b923", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "e31198e4-cc52-4d72-9f93-6702b6de7b3c", "value": "T167C423B7179AB4897503E3E4814C6D9489AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "bc0505e9-17f0-405b-bcb4-8c23cbbda6a2", "value": "12288:aeElNtIBB2gX3U5vA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezQ:aeSIBBfHdm6Jj6ESfUxZ91kmY/9Hek", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337470, "uuid": "f4352104-65f4-4d2c-923f-eca8e0423bb7", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "fe814401-f5e8-4130-896e-4e79f7d228c5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6de9d403-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "5d4ea4eb-b781-445b-a8ed-0f170f494387", "comment": "Malware payload", "value": "503cc41d43faa09360b9fb3db81da385", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "8d460b27-9531-4c99-ba1b-4e217f7e938c", "comment": "Malware payload", "value": "90fbbed69b6b5572b9289f957544dc596ebd4b2cfdfd18d714e522ce6ce5686c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "e9a38501-9b8d-4952-b043-a4b323868c86", "value": "T1B9C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "aeef0375-f26f-491c-aad1-1b81952d0b7d", "value": "12288:j+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bypH9I1P0QKw6FEx:j+QqldA/TSO713u7xnpH9IaQKH4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337470, "uuid": "c48b8285-5fbf-41a2-a319-697eed74ae96", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "7e591fb6-b7bf-4ba4-9e9e-895fc2cb8a22", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dfc5994-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "6bb5c216-39f8-4f9e-8404-3d6ed4e828b8", "comment": "Malware payload", "value": "77076d79366d822d88155a6965535780", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "044539dc-f661-4f91-9f97-faa9d5098cda", "comment": "Malware payload", "value": "e8036aaef1849b3318c788733a8e3fdf65d862baf288d067e7f5c75ce2a24ec4", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "ba376561-0acd-485a-bf8b-d9ace6f81ae5", "value": "T1D0B4231AF4D078CFD68ACDA394292C785F6C96C9CD126B7247C4EE9312442F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "dcec1cac-0bca-4a94-9093-b623a23502f4", "value": "12288:xTibgSMFBOBSlqrsKu7FxPbzJTVBU+8JM9hAC8Z3bVOBRkbKQDiUbpKq:4cSMFYeKkxpTKJM9mCw3bVOMWAPbpx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337470, "uuid": "b7f38612-143f-4b07-a01a-0e894fe70e0e", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "d10304bd-dee9-4e7d-ac52-4c0d97dfab23", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e00c4a8-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "b8ff86ff-8579-49e1-b7c6-333dd3fdba59", "comment": "Malware payload", "value": "79fd49dcddd87cdda4aa21debc6c5604", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "a9a4a3b5-0982-4175-bb59-092addf14a1a", "comment": "Malware payload", "value": "b93266c0795e3575d5269239837006f495b50f585c73eff7ef89e1108572d409", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "c999eaf7-67fe-422a-90bc-84736c92e14f", "value": "T16EC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "5a413606-d171-4624-9a3e-599777ae3717", "value": "12288:b+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2by6H9I1P0QKw6FE4:b+QqldA/TSO713u7xn6H9IaQKHh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337470, "uuid": "39b1bff2-ab8e-4bd4-b0e4-399cdd8a790a", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "d7358752-b101-4f17-82f6-f0c34b4390f6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e107a0a-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "f8c424c9-c619-4af2-a6e9-941304d861c6", "comment": "Malware payload", "value": "5fce356992a44cbdf1a9f15fbf10792e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "0aecdae8-c3ae-419a-b338-5d9d40e27753", "comment": "Malware payload", "value": "763d201539c6a2009bc88e4768cbf5b16dde83348a5f17520cab6fadd6d3df69", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "05505d15-edc6-4fdb-9291-80949d2b58ec", "value": "T10AC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "239b73e9-621b-4e8c-9da5-bd88fdd3a698", "value": "12288:n+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byBH9I1P0QKw6FEJ:n+QqldA/TSO713u7xnBH9IaQKHE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337470, "uuid": "ad190505-e80c-447b-8d7a-f7b10988f508", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "2fb7dced-9d7e-4001-93ab-2ad61fccba84", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e2db214-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "49dcb59d-0fb2-4660-87b7-79973f84b38b", "comment": "Malware payload", "value": "27135f7f56986e2df42bb57e9678047d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "ad040578-66bc-4679-a588-b58d6301de1f", "comment": "Malware payload", "value": "4c0464373a4da1ce2509f3ea5698686bd7dba06b7e3c05e5b932ca91a464d1ff", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "a4471412-b375-4b2c-a77e-7c997b28b0be", "value": "T1A4C42367226F72500DFE92EC8E4156156D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "4c559a4a-4521-4c09-b4d8-9df23425bbe4", "value": "12288:4eCEht+9qO3g/ALyYG0ZaDajTCXMO8xzDOeQake:PtgA/f0Za6TCXKBxlt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337470, "uuid": "e825f886-d3f3-4306-879f-b00fdd0d51df", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337470, "uuid": "6aa3934e-caca-4ef5-8f2e-bd1e4f76ca44", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e6b300d-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337471, "uuid": "c062113c-a9c8-483a-9fe7-4eb4ccef2b15", "comment": "Malware payload", "value": "1033f766325b8e250df6d35a61114ae7", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337471, "uuid": "12e0d1a3-a138-4c02-9fea-65146120c656", "comment": "Malware payload", "value": "04de83d418f5c67c00aa08b9606c568e17437352f3e89e18f06f49491fd0131b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337471, "uuid": "58c9d7df-3dc4-4330-b88d-37d2dd250722", "value": "T1DAC42367226F72500DFE92ED8E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337471, "uuid": "20f611b6-9ca8-43d1-b9c7-1afc06928eb0", "value": "12288:keCEhti9qO3g/ALyYG0ZaDajTCXMO8xzDOeQaki:Lt0A/f0Za6TCXKBxlN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337471, "uuid": "6afcd812-7684-4653-916c-c521c32f6837", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337471, "uuid": "776c5581-014a-4239-8dce-2401b91d3a9b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4307aae1-2754-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "cd2810ba-1304-4180-a5aa-4bbc4e95cd80", "comment": "Malware payload", "value": "ffa61d6610d05d73260a5682641a4831", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "1ab89993-a2e5-4a0a-8a69-3b0dc9d62969", "comment": "Malware payload", "value": "6b4308b28f26cc9d879e38d5a00b8404b21991eddd2d31aee961380d75deb8bd", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "383e3194-761e-43c6-af65-f8eab049fc30", "value": "T1C8B42369227F71900C7543A84B468124FC3E5EB2AE04DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "84801888-6339-4e8a-916c-0564eff2d705", "value": "12288:c7JZAaFpeHqO3g/ALyYG0ZaDajTCXMO8xzDOe3WA:YLperA/f0Za6TCXKBxmA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337828, "uuid": "1719b4d6-31ee-406a-941a-e5723b543200", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "28437b8b-510f-48c7-9c1e-10a7a04d228a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "430a4453-2754-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "21781485-eb80-489d-912a-310de12256f8", "comment": "Malware payload", "value": "675ce4e5f0069df880718a9f54b597e6", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "ebd0c88b-66b5-4cf5-b9e3-1c808400145f", "comment": "Malware payload", "value": "005e699aaec2fdd5f713cb2c1348dc02e88eea10f688eb84b8e2f04ce01cc624", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "bfde93a2-6f42-48c5-938d-74694d662234", "value": "T112C4231DA0547B51F64B6A78B333CDB09B2AD03FD219C388A0840B399B5BE5769CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "3b7fed1b-2525-48f5-b967-acc3a64e554d", "value": "12288:OMU+0xq75aS9iYIp6cP/G2Bku6zXLnHXP427bq:++J71vI/GzXjftHq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337828, "uuid": "2519e1ec-d549-4e11-95e8-f07d43c5041e", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "bb88ba37-ce7f-4ca4-9b82-3a6166270f13", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "431a341a-2754-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "b857116f-6c52-4afc-b2c8-12c8572a24e6", "comment": "Malware payload", "value": "0e201089af1c3d73ed05c3e39f80095d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "cb58d90c-8c48-4dd4-bde6-075cdd9e30a2", "comment": "Malware payload", "value": "f1b22b8b887521884ea6fde7b951898305967c2322259562e5d2da6f65b05cae", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "3ad05299-252d-4bb2-9e13-f4207888ff3f", "value": "T1EAB4230A85D01FFF899ECB9946D4A4672FF467952F93565BC0CD20700AEA203E6EFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "414146c1-7db0-4096-9629-946cf24a42ac", "value": "12288:bvOi3UDYXndLQ/jJOjB89RitlR0XjuIkVp69d3iY829uhB5bY7vPpCkId:bWiEGnlQ/jwyil0X7kWv3icY5b9V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337828, "uuid": "7ba6deab-5fb7-49e9-8ce8-0bd8c4f13652", "value": 540419, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "8175c3f9-8107-4565-8547-302b36fe322d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "431a6eef-2754-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "94496330-af20-44bc-ade8-84e240da8aef", "comment": "Malware payload", "value": "9193967a7a9db8a26ef3ab4e9ffe721c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "298dd037-26b7-482d-899d-a64249a6c45e", "comment": "Malware payload", "value": "86a3cb84ca72be079090a45a1e480a2555fb49d84ccc971fc269514f7b86929f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "ea82ee2d-317d-47aa-b8ba-b189cce99ae0", "value": "T168B42369227F71900C7543A84B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "47fc8fd9-c95a-4508-90ab-ef5be22aee68", "value": "12288:U7JZAaFpe/qO3g/ALyYG0ZaDajTCXMO8xzDOe3Wg:ALpeTA/f0Za6TCXKBxmg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337828, "uuid": "55002a10-38b9-4130-8e94-a66c431d0517", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "e6ce859f-359f-411c-9e6e-af6673e6a6ec", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "431eee63-2754-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "bffe2301-b46d-43c2-b7b7-d520fa3347ad", "comment": "Malware payload", "value": "44a748f8e976b8141bf9da7fb27259d2", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "d918d1af-0797-43ea-ad78-78f5b6c9a271", "comment": "Malware payload", "value": "9a3db4d245426266b3783bad578909765a79b47242dae54a89299923893ee892", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "b8437515-6176-48e2-849b-afc1037e2138", "value": "T16DB423CE5A286CAC5BE99E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "17025b7b-95f4-4701-9a69-d9c51af25f85", "value": "12288:ZGRl4nbDDGIabs/7iiEVwYg2l3/2NHVy+wK8/:VTabs/7iiWw0KIx/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337828, "uuid": "1b1d3da6-7500-4a97-abeb-f215498b69e4", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "e6ff3158-dd30-4ef9-9b29-ea82d9a91ee9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43282b71-2754-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "6a2f08b3-0a2a-42d8-9136-ad461504a707", "comment": "Malware payload", "value": "7cb37b73846cab54f1ea0d9a030a4347", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "c007c7b6-9e04-4c57-bec8-a1d2cbc4493e", "comment": "Malware payload", "value": "aac783a0269623b462f597384e32aeb0002fcf0e9b2adf6a82c5812444cdd730", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "806b98d9-9f1e-4d82-93c3-a2a76c53410a", "value": "T1EDC4231DA0547B51F64B6A78B323CDB09B2AD03FD219C388A0840B399B5BE5769CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "25fb6a40-fd5c-4335-bc02-000c2305b284", "value": "12288:8MU+0xq75aS9iYIp6cP/G2Bku6zXLwHXP427br:Y+J71vI/GzXUftHr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337828, "uuid": "202c7675-8eb6-4f20-b649-4d5714e4389e", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "2c84a8de-90c5-4d8a-838a-44bfba3c2d1d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4335ed6e-2754-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "925cb7e1-0e99-4123-b70a-72b7fb023dc0", "comment": "Malware payload", "value": "3c3d6cbbb84737198c7720db8a592e6b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "08640311-529e-43dc-9b5f-7fa8bed99561", "comment": "Malware payload", "value": "1c592206e7eadf828a32a478260648a178e82993e891658f84736427448a0bfd", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "8ce3ddb2-d52a-4708-9c03-393b29da296c", "value": "T1E8C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A8D9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "bc630f04-8a0a-4fb6-a39c-48e5e60e8af0", "value": "12288:jyBXIs7rM19cqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5E:2ImQ15EA/f0Za6TCXKBxea", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337828, "uuid": "2410f41a-2c9e-493a-a7d8-bddbf6968c4f", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337828, "uuid": "f14cd498-dfa6-456b-b0d7-9054701f1492", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43f33d8a-2754-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774337829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337829, "uuid": "5d27c45e-4562-40d0-85bc-1cf494301dc6", "comment": "Malware payload", "value": "905fd93c7432b392f90f875c56be9977", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337829, "uuid": "65eecaa0-b07f-4c81-b544-318db8ee34d1", "comment": "Malware payload", "value": "eae1d1ec9275110c616196e2b9c4681d97ce5acc5e112784600522d1d5b58c62", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337829, "uuid": "f4ef452e-2c7a-4240-a396-cd1fb89fb5bc", "value": "T1C2B423CE5A286CAC5BE85E834F5DBFDA2CF8413F862415F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337829, "uuid": "428daf31-3d6c-4a64-a2e3-50548df59e7e", "value": "12288:pGRl4nbDDGIabs/7iiEVwYg2l3/2NH5y+wK8r:FTabs/7iiWw0KMxr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774337829, "uuid": "cd659148-802a-4aa5-9565-313fb048d837", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337829, "uuid": "8ea55017-cd98-4b22-bf0c-cb06f399e172", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b08d2e62-2758-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774339729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774339729, "uuid": "1f96ac07-ce75-4981-b45e-6d59dbb02d35", "comment": "Malware payload", "value": "75cd55bea9bee10cf1b87062b34d4392", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774339729, "uuid": "92e06fbf-3f4f-4bf0-9859-a952857fb4fc", "comment": "Malware payload", "value": "cac7ece0abd083427cf22e6b943fd28203c6a0537dd2649b6383c5bf7f2b2afc", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774339729, "uuid": "7e8b54d2-3aaa-4a2f-a9f4-12d2268438f0", "value": "T1D303ACA46380E40366CE4B53BF12BEE8E026B97679C4A507D1647FAC68BD507C5B4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774339729, "uuid": "9fb73519-7ced-45bf-afbb-f1381c1dbce5", "value": "768:w2D//mlEl7OCGPKAJ8400ne8TF3UHRF8SN96f7ZkyND0btgjkT+Aa0kTutQgUI/p:wGncZI8TNHkyND6hldH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774339729, "uuid": "e0336b34-e412-4a8a-95af-88b208ddf2ac", "value": 41148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774339729, "uuid": "3c418864-fbec-4ad3-be35-0a8ac79c63f4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa87c309-275a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774340712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774340712, "uuid": "a286e26f-8c71-455c-85a1-f76201828fd8", "comment": "Malware payload", "value": "f31c1f057d07c06380def152b5cc5db5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774340712, "uuid": "e127b2f2-44f8-4b3d-b8d2-0a277b2b9bef", "comment": "Malware payload", "value": "e7c039d29699d98a727f09a3c01d91c79f7c48933253174c0f431815bd123cb9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774340712, "uuid": "e85486ad-d527-412b-aabd-9846f51b94fa", "value": "T17BA633E1F5845FC1A035C93153F840E9E6DE18F270A3EDA578221F9D66826F7A7AF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774340712, "uuid": "1b607fa8-afa6-45df-8a99-9296002248f2", "value": "196608:5t7q6PHFRO5+uWL63x+mb2ZYYLzIPVmzOcLqnDXBLmWUYQrpyhGpDHC0dzBGSc9M:Pq6NpL63Mmb21fhOnn7FUNyhGprLz0hI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774340712, "uuid": "483aa987-9b59-46fe-a17b-98df7131ce1f", "value": 10280201, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774340712, "uuid": "2bb5c4e4-b07f-4d9a-b166-b68e1159c5c8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5be505d-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1774341728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774341728, "uuid": "9807e6b9-3ad3-461d-9e86-c57dd111ac42", "comment": "Malware payload (ACRStealer)", "value": "f36a8dc144012b0fbac9203b5b821c96", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774341728, "uuid": "5c21a13f-d160-4915-8290-7cfc920f6f7c", "comment": "Malware payload (ACRStealer)", "value": "231b14d3755935acbd3292d6b5608dba13685a74cc08655b681c80da3d2c814e", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774341728, "uuid": "cdb087e4-a4bd-43c6-9156-61db74d0e658", "value": "T1C7C54907FCA009F9D1AEA135853395567A717C442F3123DB2BA0B3782EB3BE49978B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774341728, "uuid": "0ca69064-f1c4-402b-a2f1-f7b60c46bbfb", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774341728, "uuid": "093fa8a1-5efd-4f70-9805-d65c12da6c0c", "value": "49152:vVj62dRs8hu7IrKCpHpKqD9gktOjnQc3G:vV4t7Idprxg6N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774341728, "uuid": "5ee2e906-a8ea-4f43-861f-9665f59a4ee2", "value": 2546176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774341728, "uuid": "dd5258b2-77c6-4d9e-9e73-954f471a07c2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd00ce10-275e-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774342327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774342327, "uuid": "c707c035-4577-4b59-8d30-2b400c442419", "comment": "Malware payload", "value": "c0e5b1243e5dc2f3eb7f9eb2bb5b2974", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774342327, "uuid": "7c1e54ae-1e62-4978-ae1e-fd0d7839c479", "comment": "Malware payload", "value": "7d61a10560ac27ca7b6d13ca6e47c4bc14f51964fc192ab66171ccda2b8143bd", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774342327, "uuid": "baca31a9-ae02-4873-a8c6-2a5aed4037ce", "value": "T10ED4230FAB0F38554E158E97BA587179C2D6A6636E1415DECE8C7630EE0F08EC4960", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774342327, "uuid": "612eddbc-df70-4123-818b-a6a37dcb939c", "value": "12288:7hGgcFDtScbuunByyUaQDANA11a63oGDwfvmgv0koQ1Vd+FW:5gYunoySDv11doCb4oQ1Vd+FW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774342327, "uuid": "eafd7522-e10c-497b-870c-6fc2e32ee826", "value": 641088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774342327, "uuid": "b5ca54e9-f552-40f8-8e3d-51a7be1b9c6d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a9f6937-2760-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774342994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774342994, "uuid": "0f9db59e-f8f6-4401-9a7d-d8d2d701ba4d", "comment": "Malware payload (Mirai)", "value": "b6bdd9175bad611340f8a448c9878076", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774342994, "uuid": "4758027a-6f5a-4224-b538-4d3f508b4d41", "comment": "Malware payload (Mirai)", "value": "bf2f32cf70d2783d25d1df96f63a0bb00c6fd8cc12f55339c962e11f08326732", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774342994, "uuid": "99a3bb68-cbf8-4de6-9a2d-9759003c2596", "value": "T16A733A55BC818E12C5D112BBFF5E429D372A13E8E2EB3217DD295F64378B86B0E672", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774342994, "uuid": "f3205558-6c0e-4c74-a782-2e008c035cae", "value": "1536:B/btsS7p+P93m4LsrrO8zu9585DawjETGiu9nzZO1dfFTSEQyEWE:B/bv+oWsrxC95OzjEqisATSyE9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774342994, "uuid": "cff0776d-ff0a-4ca7-b35a-146538e5eb41", "value": 75460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774342994, "uuid": "fb227f33-8bda-4e65-b1fe-46d90d336bda", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab7c19f4-2760-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774343157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343157, "uuid": "34a126e7-d7b2-433c-b8de-8daa892153a0", "comment": "Malware payload (Mirai)", "value": "454d1bcee0f66cb8d99065a8ae44b027", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343157, "uuid": "1c3d8d32-07ef-4fe7-9fa1-214c152f73ab", "comment": "Malware payload (Mirai)", "value": "515fa150dd501477994d59e301e24a5bc61f121709f92a209ce2d5c4ff1c4f1e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343157, "uuid": "8651e002-1654-4325-9c34-58915940547d", "value": "T187A3D81E2E348FADF369C23187B74A31979833C626E1C649D27CEA011F6034D245FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343157, "uuid": "121c9135-422e-487c-be18-b6db07cb97fa", "value": "1536:kFiu8OMgcmljwTjhG9IcPtCrtCnZCsWJ4Byk0IBmmAek+9yEWpTX:wiuHwngucU4BySBma9yE4TX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774343157, "uuid": "41175323-ad89-4013-85d7-fcc374bdd244", "value": 101392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343157, "uuid": "36148d18-d45e-4daf-b677-4e6930276385", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9088add-2760-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774343287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343287, "uuid": "c2a806e3-5f02-4536-a12a-28b3e7250e59", "comment": "Malware payload", "value": "e8d6b873a35d9fb719f86cda88769038", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343287, "uuid": "c6c82411-fb61-4785-ba1c-a27b4157ae2d", "comment": "Malware payload", "value": "4fd28189c826039af56ecee76e9f14b9a178650baf4762385e7bc3a059652dc0", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343287, "uuid": "366e06fe-635f-40f3-b1bc-fb9f597d619d", "value": "T17334128E809F0DC29F737119D9D1846FE1CE25438D968E36FB1896F04E9BAE1A1473", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343287, "uuid": "d7f80b94-e153-46d0-8cd8-b33446ebc8e2", "value": "6144:UHmvLhr/shHsloIrIwAZrZZhsaicz6TTbqwHvq6Kpytvwt2cp+Aok:em69sKIrI/nEc+TTN3mytvxbo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774343287, "uuid": "01cd144d-a971-4aea-91e4-e8d0093276a3", "value": 252992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343287, "uuid": "feb5793d-4344-48e9-bd40-504e3b403cbd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f93462be-2760-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774343287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343287, "uuid": "df498731-c736-406e-8910-040bc9edd835", "comment": "Malware payload", "value": "be112d52b3c637903b7c933c19d19d0b", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343287, "uuid": "b5c606cc-2e1a-477f-8502-9b022a0dcd0d", "comment": "Malware payload", "value": "3a4d5366a8fba79f79185a9fe39e49370046550dbd7b14d9c6ccc67f9c32a504", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343287, "uuid": "6fea8213-e9ea-4fe6-9597-39e8342840ad", "value": "T1BA841272E8542734E694530019BFBC9E5F2B0AA3BD0483806AD490DF962FCE75DDE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343287, "uuid": "f60a1913-ea24-486d-bf13-43aebfb0f276", "value": "6144:YtLnUMVLWus4CfmCl7fvGpuWbyZUnVW9hIuQNi653jPV65t6OFWp2ULMS:iT30aCfmCl7femsMWJiUzA5tip2UIS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774343287, "uuid": "7f71d938-a6ed-42fd-adde-4a1b9e89acf4", "value": 374044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343287, "uuid": "da1fc599-b81c-41c7-9c03-ca7897aa2905", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f934926c-2760-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774343287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343287, "uuid": "c31eaafb-f7e3-4dee-b432-6da77669be33", "comment": "Malware payload", "value": "9d9fce7593ba95dc333b1e7475c3e5f9", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343287, "uuid": "530b5454-1a25-463d-9c5e-ba19216e3819", "comment": "Malware payload", "value": "64e23f4b73388386e85d2c5b1b47ed9fd5c0c06fa979e5dbc94b4742032bef11", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343287, "uuid": "8a5a65cd-c4b7-45ae-829e-0d7899ab5aec", "value": "T137341259F5D26DB42EE54B0C5C06B6B6F4342AB84E8D88F40B386207097E1276FE8F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343287, "uuid": "a0d92fae-c569-4d8d-ba4b-d3902f9cc192", "value": "6144:DLRUhyPRz/Wkd/1vXYTdrpObTpajzwKTxNuVG:nRrJDh1vYTdrpGiwKvuM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774343287, "uuid": "81f4efa0-889b-4c71-9d76-5ea2faf1a1c8", "value": 252992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343287, "uuid": "626cb5c7-52a6-4f33-9b34-dc1800af071c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9388971-2760-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774343287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343287, "uuid": "f530153f-47fe-4938-bacc-2543564399c2", "comment": "Malware payload", "value": "284899419e012f4c6839d1f97c6775f4", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343287, "uuid": "5d07d8a3-07c5-40a3-b955-013b99265351", "comment": "Malware payload", "value": "3aea316797f7c7351d96c5750f40afe2ff3840e0c81612af24479ecd85978846", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343287, "uuid": "6bab9341-1cb0-4a1d-ae92-05a072784fa7", "value": "T139848A3C464F66B5DD9B54AE142B9CDA8D63D68B83162CC22604E9323B05F43F2DE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343287, "uuid": "0b3f4c87-ba91-4dda-8365-b5ce3b1742f7", "value": "6144:8axIyuZUOY3XzyO9cFlmPXQTEGpMHN6ynd6tXe1FlTi2+1Mn:t2HZUOY3XGbFzTE3N6yn4s1j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774343287, "uuid": "291bbd3e-4c7e-47d5-9e9f-7b51c8e0febe", "value": 392140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343287, "uuid": "69675bc3-10a8-4dae-a1fe-ee0cc00f9242", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f93cd10c-2760-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774343287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343287, "uuid": "9778e6e9-8518-4c6d-9965-e28ac29b6f77", "comment": "Malware payload", "value": "0edebe9ff4db8e561396767687dc86d4", "object_relation": "md5", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343287, "uuid": "21a73e5b-bc40-4560-ad5f-89023d55a79f", "comment": "Malware payload", "value": "776cc22eee04cc00e347a47fab1100dcf58a57625c5c20e6c11d449f5f9d52ee", "object_relation": "sha256", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343287, "uuid": "35c90aa6-e931-428e-82d7-1a9407cb11e4", "value": "T15E341276D6A4F7C6D92BE80DA507A25E9AF2E2FC20C31C54D15A4D06CCFF83C9A60C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343287, "uuid": "7e1f3a03-e07b-49f1-ab0e-4ed67f9b4dbb", "value": "6144:LXoZ6IUbOssLXoe+2HOVlhlxbSc9Qbh9oer8jP:g67bkouMvx+c9WLrCP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774343287, "uuid": "dc393455-344e-435b-b6ca-079c65b39ee1", "value": 245312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343287, "uuid": "92d698d7-e7d9-4063-b226-0dda94cb6923", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3019da7e-2764-11f1-ba1a-82aee05be84a", "comment": "Malware payload (WSHRAT)", "timestamp": 1774344668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344668, "uuid": "19d6c20d-592f-430c-a86e-4af35098d21e", "comment": "Malware payload (WSHRAT)", "value": "02144e5fd85f12847d08f57b2533f0ea", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "wshrat", "colour": "#337cec", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344668, "uuid": "9b5837c8-2409-4bb5-8464-ed2b97395212", "comment": "Malware payload (WSHRAT)", "value": "a777bde7397371f85a56f76e3d08fc086517ee9715f9d9afe2fbcc455e2f8b6e", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "wshrat", "colour": "#337cec", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344668, "uuid": "a23f3ed3-6117-423b-ab17-3c7f66a656e9", "value": "T1707554183BBA4EDA4DC4105FFFA7AF0065736392EFB987DD55A260438C0CD845868A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344668, "uuid": "0b647207-37d9-49ef-82bf-6fb733d61b68", "value": "49152:I/2pOrtrB4EMegMMMM64bvUv437MtMMMdr27xyiHMtMMMN7TSHD1JjMAMMMI6OC+:d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774344668, "uuid": "8374a45f-4355-49dc-8a5b-cea5e462d772", "value": 1583367, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344668, "uuid": "eb9b159a-f744-4343-a4c0-eae6379c1dd4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53be3c67-2764-11f1-ba1a-82aee05be84a", "comment": "Malware payload (PureHVNC)", "timestamp": 1774344728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344728, "uuid": "a15aa094-f773-4fbe-84f2-32b4bd3ddbf5", "comment": "Malware payload (PureHVNC)", "value": "b8f93cadec39b27228164c498f0361de", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344728, "uuid": "88ef7515-aec9-4096-8191-4341cb6b0993", "comment": "Malware payload (PureHVNC)", "value": "d9c520ecaef6cba0e1be4c789a63ba67b680da3865441bdee1fd7ae5ae639314", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344728, "uuid": "07f4f59c-6e41-4087-a128-2ae435475382", "value": "T19FD49D7776174E21C3994373C1C74D41DBA89286B6A7E70EB195239B24063FFDE0A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344728, "uuid": "bd3a531e-6f37-4c9f-af89-9e90cce352b2", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344728, "uuid": "72ff1253-7cde-4254-9f85-db46f9e36429", "value": "12288:nmqSvSeG6JMJz5lKcSYqEivmJXP02MIIYK:DeHiz5lKCqEzPYII", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774344728, "uuid": "f7a17219-b7f6-457f-9732-3afa219bfdb2", "value": 641024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344728, "uuid": "62e60fad-c53f-4e16-a449-5117d147b6e5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76c70683-2764-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774344786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344786, "uuid": "24ec4967-56ef-4dee-a4d0-3fa5ed8525f1", "comment": "Malware payload", "value": "97afed6e8d198cf9b114d3e9575e2b56", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344786, "uuid": "4a509d45-ff94-4d0b-bee0-dd0277197f60", "comment": "Malware payload", "value": "c0fab4105b1ebc513c469fce5d03290bbaa3adfbc858a6b57a8a83f92b9e5679", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344786, "uuid": "0a77ca02-b30d-4ff7-9b16-611290d7da32", "value": "T14A0110A8F5201931B779F809BE29F88007F257A708B1FC31235CA94C5BED9911C381", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344786, "uuid": "3621d7b5-119a-4244-a857-327d2539fd97", "value": "12:TyASXAdpcmhA3Xwxcj+GiQrEx2++igqsfuOYXKQ5Yax3BVB3Vvdu6ZMBq:T63XDj+Gi+Ex9+IjObQ5fx3BP3VvBZMI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774344786, "uuid": "b81a4b69-03bb-40d3-8454-90fe4caaa63b", "value": 756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344786, "uuid": "3ebd8c97-8882-499a-99ca-59c59f7e23a3", "value": "application/json", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "770baf95-2764-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774344787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344787, "uuid": "1b84a248-1481-40f7-90b3-1da26f6fb635", "comment": "Malware payload", "value": "2c85efe152a25281f250b3c80380811b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344787, "uuid": "8429d213-9a8c-4d16-aa92-1a4f5c5e9564", "comment": "Malware payload", "value": "e73fa583da7adc97a772826ce26e16ed0b95e4193a36382a2e69e148fbd4dea1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344787, "uuid": "70119248-2466-43ff-b958-74d963a6686c", "value": "T19D6512127BC484B3D47225311BB657901A7C75701F72CA9F63E469ADAB306E1CA32F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344787, "uuid": "1101049b-8384-4d70-afd4-827bb25dde2c", "value": "99ee65c2db82c04251a5c24f214c8892", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344787, "uuid": "bff4e793-b1e8-4088-9e3a-9499f018de96", "value": "24576:KN/BUBb+tYjBFHEPxZswb7CJ3qcm2BY3Zl9YN5zyXITzX1zJ54D+qRfoBan5F30:6pUlRhSEwnCJ3qtE2Zc5+X6zX1zJ5w+R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774344787, "uuid": "8156f355-1741-4b0b-8dab-0cecf6ff7ff9", "value": 1450793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344787, "uuid": "5ac1a733-3f27-4508-843e-188db1d7af26", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77125c86-2764-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774344787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344787, "uuid": "95e59e31-2650-4e56-ab99-645d7473d79a", "comment": "Malware payload", "value": "f0190dcfe0a2c0018b61f440dd8253ae", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344787, "uuid": "d7a34d61-4149-49ae-8228-0a24e1d28a82", "comment": "Malware payload", "value": "3d1b3ea691122f9c332232b8c8e6541c431b74b783e317189e3ddaab8f864b62", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344787, "uuid": "a80c88f2-b672-41a3-82d0-9548d27410d4", "value": "T123652302BBD1C4B3D4B125315AB68B91177C79205F628A9F13E07AAE6B316D0D631F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344787, "uuid": "7b0bd0df-e42e-4850-a878-7948d40889db", "value": "99ee65c2db82c04251a5c24f214c8892", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344787, "uuid": "fa40e079-4ac9-47dd-bfa4-6823a508a959", "value": "24576:bN/BUBb+tYjBFHNuuNVv/8tiAcJRSXWVEFQo0sH2O1z9jkkdULauX1zJ54D+qRfb:JpUlRhNV7v/nArXWVOUsH2BoULauX1zO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774344787, "uuid": "a9b38e70-1418-45fc-8eed-1e1e1a4d80fc", "value": 1510081, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344787, "uuid": "47ddcb80-869a-447c-8ecc-67b6787c9776", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a6fc06e-2765-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774345276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774345276, "uuid": "e988f158-f558-4184-ada1-bfc72a4fb4ca", "comment": "Malware payload (Gafgyt)", "value": "cc8e883cc0ccf4787676760ce747e7dd", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774345276, "uuid": "c0a0989b-0588-4a51-a72a-2755e3f3e031", "comment": "Malware payload (Gafgyt)", "value": "427b8d77e54c2aec1be63174679088fab14c14c8429adc8d81866fa0ac453bbb", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774345276, "uuid": "942a66a9-4134-4a84-8082-0672d4d1fa72", "value": "T1FF534AC19793CCF0F822017214BBA7364B36E5390065EB47EBAD9737AD52602EA577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774345276, "uuid": "5231169d-cb5a-49ab-bd26-562740ce0107", "value": "1536:c/VpEWtUsBzzBQSrgl1bb3vRgczLJ76rxr:SVpEM3PBVro1v3ZgEFAr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774345276, "uuid": "a0ba7263-0ea6-4bb9-9a29-81f6869127d8", "value": 66644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774345276, "uuid": "a1f2550b-4e0a-4020-b5c5-1607ef5376ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6aad1ac-2766-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774345779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774345779, "uuid": "bced6ac6-59a8-4ca4-a949-461d3f4c3291", "comment": "Malware payload (Mirai)", "value": "5652ece07d02d93cef2b99e7abe92335", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774345779, "uuid": "ceb3b7ec-7ee7-489a-b78b-5634cc8a56ed", "comment": "Malware payload (Mirai)", "value": "5dc7e84871af255a0706465eee841ddeb13819d9b1555b6976e3f96d2591521e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774345779, "uuid": "5b831b53-df0a-47f4-a3f1-0b56146b6ab8", "value": "T1F7733A85BC819A13C5D1127BFF6E428D372A13E8E2DB7207CD295F64378B82B0E672", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774345779, "uuid": "2b6535c2-0037-4d42-9bb6-93beac7b1527", "value": "1536:6FCXCUosRbyoww9ZO8ywK5+7PxApQQk7MBz/OHqRsNUPyTvVyEWE:6FC8WbZR93jK5eJAuQkmJwhVyE9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774345779, "uuid": "e045de36-3ab7-4e82-a7a2-4f65f6424bb9", "value": 79164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774345779, "uuid": "ec2c0d45-ee2f-49eb-9296-7821786dad1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83ed313b-2767-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774346097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346097, "uuid": "2634ab53-6d85-4163-beb9-4f2ce6d57b83", "comment": "Malware payload (Mirai)", "value": "6c63623160fb2121697f404fa5ed9948", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346097, "uuid": "fa2f0d06-de8a-418a-b7c7-aefc32e6f96a", "comment": "Malware payload (Mirai)", "value": "54770cc6f92091ece1475548324fe4255f9c2b6002c4285fe34b7dc6f38575d0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346097, "uuid": "1f907245-3f88-4548-888d-9271c22d2c0c", "value": "T129A3F816BBA10FF7D86BCD3786A8470539CC551A22E83B763974C528B64B14F8AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346097, "uuid": "c6f2b2d9-8423-4dbb-9558-72a13bccd609", "value": "1536:PINRUcuspq3Q9yRHC71vHa+fSY48Q4PwMwtsZVyyByFYyEWpa:P3cuspeQMHCoZ8Q4P2sK+yEs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774346097, "uuid": "e5befe05-5ea2-4d74-a204-ffc8a3fb3605", "value": 101392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346097, "uuid": "689a61b1-0e58-4b7a-85d4-75a7764d8222", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9288849-2767-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774346213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346213, "uuid": "ebd6908f-ff01-4e3f-be0b-1c698432a47d", "comment": "Malware payload (Mirai)", "value": "8fd5a1af61aea3c5b50ddf6950a6f38f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346213, "uuid": "046e42ba-19a0-499a-879c-c50b74659a31", "comment": "Malware payload (Mirai)", "value": "aa706e29c04a68054fe8dad260fa432ff05612552ce4ff4a618ee7dbe4a892bd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346213, "uuid": "1c105592-8c9a-4da2-a60a-9af8b0efa349", "value": "T1EB242A55BC415F26D6D126BDFBBE81CE33232BFCE3DE7112EE0057103A8A85A0E264", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346213, "uuid": "fda5e40f-f5e7-4a0a-afa3-ea1f8e4e212c", "value": "6144:LoWxOc657/+LZmpyQPhp/8h7oR7n2S9NVL1ameX6k1GYv/ihMgwmTTql:TM9/fyQ3/8h7oR7n2SvVL1aXX6k1GYvj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774346213, "uuid": "c2c90a09-7ab0-4093-a130-6df1477fa0a8", "value": 212160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346213, "uuid": "8d390baf-1d46-4dce-af7c-4c430c483d18", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c93c46a8-2767-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774346213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346213, "uuid": "22d09ff7-92d7-4a7d-9e14-9670c261ea00", "comment": "Malware payload (Mirai)", "value": "123442c41029fd94b39ce6aeba51170e", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346213, "uuid": "c19bee0f-3595-4687-97cd-261e2cc14d58", "comment": "Malware payload (Mirai)", "value": "e4ad930449f130b22330db4edcdba4d3cc64f73b0fec860372992c0ea05e21d2", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346213, "uuid": "2c1a3865-a7cc-41e3-8775-d1f8ee3918eb", "value": "T16BA31906B9919F11C4D621FAFE9E459D33036FECD7EA3102C8246F94378699B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346213, "uuid": "bbe1eea9-37cb-4274-a46b-4ff4c0191d27", "value": "3072:K86PK0CxdwlS1/caPfaSPhTnpxeXDir1iyEZXH:p6jQMSlcaPfaSPhTnzeCQPXH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774346213, "uuid": "cd46431d-1789-4097-9752-18af7aa3219f", "value": 101320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346213, "uuid": "bf36fe1c-95fa-4e70-a73b-d8fc13ea9e25", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "943fe298-2768-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774346554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346554, "uuid": "c249110c-99de-4ba5-a887-159ae66df6e8", "comment": "Malware payload (Gafgyt)", "value": "2ff43e6dc35900703e552e521ec5c3eb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346554, "uuid": "7afc7cc1-1cf7-4db9-b3f3-64dd30e51da8", "comment": "Malware payload (Gafgyt)", "value": "14fd849bcc64d1acd189dca7dae01578c115002e474dc1b42abeeb970c73f3d1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346554, "uuid": "342d10d6-fc22-418d-988b-64d768e9bf82", "value": "T1AE34175B6E328F4DF671C63582B74861E3A833D766D2C685C5ACFA101E2064F642FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346554, "uuid": "4c58cf52-8b3e-471e-9184-64e7a3c19586", "value": "3072:+/YPSLsRsBO0DJdOLmyn9cCbiz+P/8kWAJ75yBmoayReqE2:CoL6BO0DJdOLNcciz2/P9ycIReqE2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774346554, "uuid": "f6884672-6045-47ff-bdfe-fd60a08e3d8e", "value": 243132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346554, "uuid": "1f26c88d-6a24-4194-ab42-1b30251eaaef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec05b477-2768-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1774346701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346701, "uuid": "2e7ba75c-7084-49f5-8490-de04f1798e4c", "comment": "Malware payload (Vidar)", "value": "2c429673620d767fc32ab8b1f0929154", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346701, "uuid": "bdc14747-d87f-4d15-acb9-29e91cf9f325", "comment": "Malware payload (Vidar)", "value": "5831652eb859271bdb9269aa114d6d599bd7eaee2ec725e8e241da535d3b27b9", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346701, "uuid": "1fb82638-8514-4cd1-9a03-387e9ecc1bdd", "value": "T1CF955B0BACD54AFAC46AA33688B67191BB74F8090B3233D72E9066783F767D05D357", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346701, "uuid": "b096df65-6240-479f-970d-0bab426b54b1", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346701, "uuid": "366331a1-3374-40c1-9b43-a3cb5e75af82", "value": "24576:KdHqG4LQctBj4C0Bb5ALnM48wmsVfz8v+NFheletn92Xb2De:KdK1L9l4Co5qnM48HsF8wCue", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774346701, "uuid": "cacad864-4b1d-4d47-9e69-d86952b158ae", "value": 1891968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346701, "uuid": "470af5b4-6268-428d-9296-b6adbb659207", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29dc7bea-2769-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774346805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346805, "uuid": "0f118cbc-752a-4dcc-aa6a-e9d2ed27d747", "comment": "Malware payload (Mirai)", "value": "42250359ddd022524f8a4336141ec7b5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346805, "uuid": "920a1330-6483-4d6a-bf46-3efb1d92d221", "comment": "Malware payload (Mirai)", "value": "e472983455464d89af3ddb529dc383eb88a275f05174fe207cf5db484622e6f7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346805, "uuid": "4404c85e-277f-4c08-90aa-54dcbc5f7673", "value": "T1680429417E419E37CBD0A77ABBFD42CD731223F8D3EA7112EE018726369A5290E365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346805, "uuid": "bd52b92c-8604-4f7c-a04e-6b040cab50ba", "value": "3072:zolsBRiRy4r+bo02klRZakWnihOQ6yYFH1d2zFeqGDSzWNndp/bl/eXi/Wz3T36n:zoGBRiRyq+bJlRZ+nihOQ6yYFH1d2zFu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774346805, "uuid": "1cf9484b-7ddb-4cf6-a35b-383ed0703c62", "value": 175256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346805, "uuid": "e40ee95c-eff9-47e6-afef-6bd90a931fbe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71db42be-278b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774361528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774361528, "uuid": "581c1541-8709-4ed0-b2d4-24896b2ed70b", "comment": "Malware payload", "value": "2052851267c099a0b09e16e657a13b23", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774361528, "uuid": "b62a456c-d45c-408e-9d19-b05b1d2abc7b", "comment": "Malware payload", "value": "1d699a46339626db299548e32ed3a77eec267840c3de39b49caf38b88aeb150d", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774361528, "uuid": "fb693409-2ca5-4381-a3d8-2d563049ad66", "value": "T143D59E21F682D0B2E4E701B156BFABF64D787631172594CBF3C01E6958206C27B3AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774361528, "uuid": "d16824fa-a56f-4b93-bf4d-dae1f0204adf", "value": "433a5293c6b4d50375bf4bba0bdbc866", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774361528, "uuid": "ca6c985c-5cec-4433-b846-d4928ca78867", "value": "49152:8sUtl5PgbwRocdFGwitnRyjEoxLUQV+i3G+nYE6bW1rAkJKGrUeDU63XYWVCT3e:sabwR0b5R2EoVUQB3G+VUkJ7g6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774361528, "uuid": "682c4d79-f046-48b0-9fd0-17c29c468716", "value": 2747904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774361528, "uuid": "32a7990b-f36f-4bab-87d6-818e4b49856d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52e44dff-2792-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774364483, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774364483, "uuid": "26f90bcf-75a1-42c3-a8fe-b02baa82c1bf", "comment": "Malware payload", "value": "facf46de42200b449959bbebcd873971", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774364483, "uuid": "4e239122-3b70-4105-9b60-d07c4f1d9bea", "comment": "Malware payload", "value": "0e8e4cb0519385d12426f0b0eb2f692a4dd29a7ee4b91d0c47e0ae77983de2a1", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774364483, "uuid": "05357cbe-6c20-48ee-b01b-21ec7bea7eb9", "value": "T1FDB633133E4070B9D1730A371C81B629DC29F86287F86BC7F3AD6B7279E709536592", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774364483, "uuid": "86335a65-dcef-4ef3-a9b3-074ecbdb6ddd", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774364483, "uuid": "c0c42878-ad73-48c0-814d-1207051deed7", "value": "196608:3VNvJBion8QEiM/hlP4NJwvYLfqWi+8orxQM8QfqWbwEiTb2QJY49HQ8QSUy7:/vjionDEi84NJwv69eUfqYwEleH9w8X7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774364483, "uuid": "8b1a260f-31fe-4c2e-b4d7-3b11b254dad2", "value": 11398656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774364483, "uuid": "21ae09aa-31b6-4545-bd20-1c8dd100b31d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3b7a05d-2792-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774364753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774364753, "uuid": "b43bd851-4ed5-44f9-b4fd-49f08d8678d7", "comment": "Malware payload (Gafgyt)", "value": "83ad9c36c151baed0c922ef0ef91273d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774364753, "uuid": "1dda6ef1-0f3c-46ea-981f-e6823ceab1a6", "comment": "Malware payload (Gafgyt)", "value": "2b2c782f7f19304b1ca618eb7b47af5070c3a573047e548f05af8b28ea27b009", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774364753, "uuid": "d96ae111-c494-4dd6-a7e4-c79e19120bce", "value": "T1CFE32817B89584FCC496C2784FEEA226DA65F84CA034B12F2B947F167D5CF20AB1D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774364753, "uuid": "7ca71314-f211-4548-8174-df72d61bf82b", "value": "3072:nwasxuldw2QT5NM+NDQKUtK/7EBsK2gKyS8sJD9LIqwxE:4Amt5NM+NDQKUKQzs3EqO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774364753, "uuid": "b99e48cc-ea22-4e5d-9e3a-064469380ae0", "value": 151584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774364753, "uuid": "d22e20a8-b1de-4800-a0ff-e62887552cc9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa9a8ca3-2793-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774365194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774365194, "uuid": "ce4792a1-96f3-447c-89d5-a6b5476ec50a", "comment": "Malware payload", "value": "7fff5ea1b522f1bcefef82dad08293f5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774365194, "uuid": "20496f72-4a0b-4443-bb2d-e6e21c85b331", "comment": "Malware payload", "value": "b56193b7e81689a451f01dcc5956fc31f20ed8facf59e67da3d59796ee2cb54f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774365194, "uuid": "31221045-e39c-4c86-b061-218b8f4d3d73", "value": "T132A27D7620F08A735A9015C4B37317A15FB2955B45A320B8B4FE2B399F69B03B4FF6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774365194, "uuid": "e1d141ac-5216-4c43-b936-a1920cb6816e", "value": "192:c5uU06L4hvZ5mN9oKNpivjFV3+gukIFzITh5oeyeVeO:6L4hvZ5mN9oKNpivjF9+gukIFzITAXGL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774365194, "uuid": "2dd0b6c4-75f7-483f-af87-ba0bbc021c39", "value": 21938, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774365194, "uuid": "8620ccec-beaf-420a-88a4-01d673a08fe3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8b6c2be-2782-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1774365719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774365719, "uuid": "640e5a7e-5634-487d-80cf-674e116ae12b", "comment": "Malware payload (ACRStealer)", "value": "17cb63d05c9c50f697719ca914526ee9", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774365719, "uuid": "b5e83c7f-6d05-479d-ba3d-98ff1599071f", "comment": "Malware payload (ACRStealer)", "value": "a2bc06f5abd834d9449d55990f79bb1662b048b30a458310872ebe2a096a9440", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774365719, "uuid": "e7185780-0b99-4d99-b62f-4ba019ce581f", "value": "T183C55B07FCA015FAC1AEA1358533A55ABA717C441F3123DB2BA0B7682FB3BE099757", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774365719, "uuid": "720c2f52-4d88-4d35-a6c1-5bf486bd8f15", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774365719, "uuid": "7e3b8202-d915-4216-870b-2190ee296ebc", "value": "49152:/jhvkuKrr+SF06ltzT2BD2SHHjPoQc3EgN:/jUvRzCtdZgN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774365719, "uuid": "1cd8b5b9-d1cf-4382-b8d5-2c61de2d86aa", "value": 2543616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774365719, "uuid": "1cd1716e-bb96-4d4b-8ac0-f3141108a5fb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e58c27ca-2796-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774366447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366447, "uuid": "cf8a3251-224a-400f-8499-7fe70c39f07a", "comment": "Malware payload (Mirai)", "value": "0dd3dd4e938044ed0a965786a31cf0a9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366447, "uuid": "9e231e46-fb60-4d75-91ac-891dcb22c36c", "comment": "Malware payload (Mirai)", "value": "0351b05a8edcf28fef1f9f8865c445f06202cf0c9aa4de49981e971eebf9d0d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366447, "uuid": "186d3287-2ba9-47f2-918d-4660afb9abe2", "value": "T13F536BC5EB83D8F5E81705755133E7378732E43A106AEA93C7A8EA37AC52601EA173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366447, "uuid": "8bc54870-87b6-41ef-93af-05579baacf61", "value": "1536:rB5Yx+3CcxUoU3GnGN+ETURab3PCHPls1lV8rZbC:d2xCLxUok+EIab36HNszk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774366447, "uuid": "f51c00cb-0282-4ab5-be69-423ca01fe737", "value": 62548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366447, "uuid": "512124c9-db0d-4130-a2ed-a9f734d46e52", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6b04e73-2796-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774366449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366449, "uuid": "aeeb7fe4-2d3a-4134-876d-b0341d95d467", "comment": "Malware payload (Mirai)", "value": "9d0ba85fb586f9a305838f8f1f1844d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366449, "uuid": "aa5e4014-0d15-4571-be1b-b56ec1651032", "comment": "Malware payload (Mirai)", "value": "78c44ed61f0916c913bca1995b2313a9d4324f9e7e0f65e5443ff44b70701cd5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366449, "uuid": "f13047df-0c84-418e-aaa3-58a21241d97f", "value": "T1C0B39CDBF24702A0C8624AF007CB4BED3E2723815F27C5E72C6A657969791CF8905F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366449, "uuid": "e6d95bca-a80d-4f15-a771-47d5cb6d0675", "value": "1536:vu27gBY9FSSpj3z5Qxw6YaWWgg1K/LWy:29sSyzz36YaWWgg1Kq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774366449, "uuid": "6f18b29d-71f1-44d8-b4f2-839b2533e5e8", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366449, "uuid": "a00d9f0a-6096-46e6-9ea8-8c67005336bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d72cfd4-2797-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774366514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "c6695f5f-f7c5-47fe-baea-016cf1dc5aa8", "comment": "Malware payload (Mirai)", "value": "1997ae9513f5c25053b51ceba625bf7c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "ba36bb29-1c4d-41e7-b123-81e4161d2d63", "comment": "Malware payload (Mirai)", "value": "e3f41c89c9e8ab283c73c581f9ec430b1bf1804ba5889d6c69201c5d0d489fad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "04b2f510-b352-47e2-b146-4bb61370a5fa", "value": "T16682D034609774F0CB714835D1BE8EC76B460BB8E1FC26E326496B5DDE1340992FA2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "0dc66af3-ccaf-4b02-988f-635a6aecaebb", "value": "384:MnfzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUmJ6eyP75hymdGUop5h5lbY:2dV0P6+kom0tVAoNvm+tFVyPNs3Uozn+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774366514, "uuid": "b47656a5-94a7-4558-81c5-cdcdb10f7f4a", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "980b60bc-6062-47b5-b357-0f39d3b393b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d743a3f-2797-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774366514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "423a4843-b6f2-4bc2-a3d9-cd2e421920b6", "comment": "Malware payload (Mirai)", "value": "d9418fc1818f490e48cad4e9e9651c03", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "a6c27ab0-5925-4609-80bd-652cd60452e6", "comment": "Malware payload (Mirai)", "value": "8e91b4ef4b79a7d4c490983cbac45b46425fb53fa9c11196f781c7cd8412eb4d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "e6531058-cdc7-462a-b2bb-89aa0bfbf2d5", "value": "T115A2E055BF1886CFC832293455D9EAD62256FC72F2DCDC096940C16FB4B33A95830F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "7ad201b0-653e-43f5-b9e3-f3c17775a3d5", "value": "384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkdaqOKV14b+502F2vwA9dWuMW21bAKj:798o08kxofBE+ZkdaqGbp2F2TWul0c5+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774366514, "uuid": "e59a60d8-571f-4737-9b3e-2f3584778703", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "5ad26383-edff-4054-9a60-95597a8f8dce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d82b48f-2797-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774366514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "a85495c5-e879-484b-8f27-65e77c895353", "comment": "Malware payload (Mirai)", "value": "1f3c86c775a1c5c5146721a2110ff685", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "faf93c05-84d3-406b-bb20-2a34bd2ab719", "comment": "Malware payload (Mirai)", "value": "249eeb6bea3f938ee02fad14552d23859b8c60dc162e01837762557d263e0005", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "54d3cc1b-d5f0-455c-a893-300607c6ab75", "value": "T19B330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2757BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "42caf421-78e2-4823-8337-cc84a796da6c", "value": "768:gduPBFnHooqR8qOCKq2CH4Fje+TK806MMUVjzMfQXOtHud2oGj:r/hqaJ2cjeqK806MHdMfQXoHuCj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774366514, "uuid": "816a8f8f-fb27-4115-a581-7f45b9d11d9a", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "4c198b5e-563c-4e78-b699-19e2b8c23537", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8b35e9-2797-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774366514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "ffa7da0f-c977-4d59-940d-1def77e1b199", "comment": "Malware payload (Mirai)", "value": "ef2e22bc9f8969b42aca2b82a8f84545", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "7073c0b1-3d48-4fb6-9db7-6a03b9636250", "comment": "Malware payload (Mirai)", "value": "068f47d1c67aef2ca4a4301fc1f0a4bc27bb3ee6dd0e6dceac3984656cd7babc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "f3af64be-9a44-49fb-8d2c-5ee167c949aa", "value": "T1ABB2D0681B062EE9DE06C07E55E90B5135701FB11581AC0FF276FAE6CE5B0D8B8927", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "b3c60125-742e-4365-8e8e-40ff4bc35f91", "value": "384:neD8ZSH2LLZUYyGZbsOiTNsxCSF74+pU+NB/pVzbN7zp3mdzJgGlzDpH7uNj1JAk:neD8ZSWvZHZbs1NsxCSV1BN9dlizJgGS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774366514, "uuid": "7d431f48-9772-4bec-bd2d-9c96a808f921", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "75fb3297-2708-4cef-a6f2-c220a35216d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8b69ad-2797-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774366514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "8ecfe9c5-6e55-48a7-b9fb-f17a0857249b", "comment": "Malware payload (Mirai)", "value": "fb866a89e9b66366397925c28c7b3029", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "0a9c2e6e-cf1f-45db-aad4-24a8cfc4086e", "comment": "Malware payload (Mirai)", "value": "2a2c1d20daef84c679ee0fd3f29c312a08cfb69859d4b6e2cff3a252d3be5d31", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "d8facd97-79de-4ac1-aa3e-6971725a4803", "value": "T1B5B2D0DE94C87448CDCC2C3E369E93221C5CA1B1F2AA9FBC93208DC957FD949B5894", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "6db3f14d-6921-45a8-ba0e-c24749a550e0", "value": "768:cGrQlS07dEv0UXqUhvQE+CX0lI2/Fj9mpC4ZqUWvi:vQlS07FUXqIYSXY/NApCAq0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774366514, "uuid": "abd35d95-f141-4fb2-8795-8ba7f1d56070", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "376d850e-b7de-47a8-9555-52968253e7da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8c6d74-2797-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774366514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "e7d413e5-b9c0-4a9c-97c5-0b1ee6c34f0e", "comment": "Malware payload (Mirai)", "value": "f58e90979222276e1aa568425d8dcb13", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "e78792c6-c724-4a3f-8bf6-502623c58b08", "comment": "Malware payload (Mirai)", "value": "bc891655e089c845fa3cc0976c42c8559f334888f218906cd171dbf2141a3f84", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "f846e342-43c2-42d8-94ea-2c4ffa3c55d1", "value": "T124432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "0ea1ca9d-2507-4ab9-8ddf-972ca00815ae", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIrQKqgESnmC/xO+KpAwz:RqtmZPuutfbltZFBSJsBcfDSTFI1BEz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774366514, "uuid": "9ce44023-3239-407e-ae38-94d1ac0ca176", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "128c855a-f33b-489f-a0ed-9e23b9dbf29b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8f824c-2797-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774366514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "940481aa-5932-44b3-b974-07de2073272e", "comment": "Malware payload (Mirai)", "value": "5c5470efe6b3309fb69d3b67c7605579", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "2fc63193-4350-4bc8-b2e6-bb42fb050e21", "comment": "Malware payload (Mirai)", "value": "41e750cba85ad9567c235d681e3bf1cd1de57ceeb4bcac1f7df0ee043dc13f47", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "ee7d9116-6d94-4a9a-a568-4e0d538decf5", "value": "T13F336C36E029DED0C6560134A4E88F751F13F1C883536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "c3835b7c-a975-4246-a250-32d67df962b7", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9cm3CZQoV/bnmCozw:Oa4U7G7SvT6ftBVm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774366514, "uuid": "eb4885b8-c4c4-4b8a-879b-0ffb4f1783f3", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "93e8a597-06fe-45ab-80ad-4a9ac999fa3a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8fc5fa-2797-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774366514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "af451595-561d-4f01-bdcb-4be47e15b4f5", "comment": "Malware payload (Mirai)", "value": "65a2c69aec3e0aa3e4eaecc2d1bc2ae4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "c4cb0fc8-36ab-47db-ab0c-f2ddaeec7ad0", "comment": "Malware payload (Mirai)", "value": "1ff0e11c9d4ca267555210703fcad5d7c062990c406fcbbd6c0ff4d77049e9a4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "9b602aca-7e69-4432-a348-016f0e2751ab", "value": "T1C623F174D417DDE0D8203431FF688AC27622BEB7D9FB2113631192686E49AA66BC97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "263059ad-5444-4a9a-a075-5708d4be132f", "value": "768:D/TYCoIxdE//AnTZbi94/AHkhvG6tah9q3UELbUXfi6nVMQHI4vcGpvr:DECF4/uwqoHkpG6tZLRQZr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774366514, "uuid": "08466aea-75cb-417a-8a2a-b4a2df32b964", "value": 46632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "d18befa4-5471-478e-b3ef-f5aa1a64b724", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8ffa5c-2797-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774366514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "43639420-0fc0-47ad-b6cb-d33b98234d1b", "comment": "Malware payload (Mirai)", "value": "1ef6850c316cf7f18cde855635dceb96", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "66addc48-479b-47e7-9332-3270e961861d", "comment": "Malware payload (Mirai)", "value": "1ab59d6ab09cb478a0a5fb713e7a3f6c85a99626c6654083da4fba67dbfbbab7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "e0869e9a-089b-4d64-b093-78cce33dafca", "value": "T1E8A2E128E2403E88EFFDDD28869391C1BBBD4BDB72D4C6A713C64F116042056B649F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "cfa2ccad-2a14-41ee-bca7-0b04936d3d16", "value": "384:m/JywWc84Tp2YshxqlDQ31J4TZ/zKqCgS8AqM4uVcqgw05VxJ9o:mRxsSVsMDF9JCgSlx4uVcqgw09Lo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774366514, "uuid": "8e5707b9-e366-40c4-9a53-13f5d9ed24d2", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "d73e0bb3-318b-464f-8f37-93d7707cc65d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d901708-2797-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774366514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "07caaf96-1c6d-48e7-b6aa-0dcf6446a48a", "comment": "Malware payload (Mirai)", "value": "2ea041ae91dd63c1414c312d902a1a46", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "5474f902-4726-4eda-9abf-d5924152e1c7", "comment": "Malware payload (Mirai)", "value": "c65ec056f6ef6038b5876c1fe21671911556f9e5d7a9fc86f2456401459180f1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "4cacc7df-57b3-4327-8f92-71f6177a8770", "value": "T1DFA2D055A5AB3BA1F6742C3CC9AA850237075FF8A1F4317328406DB2E5893473EB4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "a81a8a16-110b-4ebb-b234-1dc2fbf405ef", "value": "384:TvtIoZxrSniaXs+qx+bwqPXdYBRsirKVooF8hwoQFIqn1vWiwhymdGUop5h7:TvQn4j+ysirK+oFToN8dWiws3UozV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774366514, "uuid": "d5b059ca-246c-48ad-9119-763d389d5315", "value": 22168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "565b7207-b0eb-400e-bf28-ec75e13c16d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d991b99-2797-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774366514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "21f89851-5860-4eb4-8882-3c03fa8665c8", "comment": "Malware payload (Mirai)", "value": "2f0d1f9bc1a063b0f1108384d90f26d3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "09f5e6b6-063c-40ca-b390-0ff25163da47", "comment": "Malware payload (Mirai)", "value": "d2ec32a04fc072cd699f3b347cd5086d9ab74be54e004dd6e0d8b0420b2d1e32", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "c2e61a2e-fa89-4652-8a4f-c3ac3507fbce", "value": "T1AAC2F160FAB05D71CB302EFACEFACFC72D854AB9D16B793714150925A9C501BA7A01", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "c3e20a60-abbc-4457-9a8d-c681373b9393", "value": "768:+MKyhegCCMqfpFPg6G8I3T3bxG0Vihy9q3UELuF:tKy4qfC84nYJhnLY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774366514, "uuid": "18f6f398-28f4-48be-a096-2eef430223b7", "value": 27292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366514, "uuid": "e08debfb-a0f7-48c9-9e9d-9f0017a4c1ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fedc827-2797-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774366652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366652, "uuid": "83c954ba-75dd-4408-92ea-71d5fdeddb39", "comment": "Malware payload", "value": "6dc8f890c682085c1ff98b6f1920dd2a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366652, "uuid": "a8a01572-c1fa-4265-b778-a59db8c3cff7", "comment": "Malware payload", "value": "e4ea8f3d45dd1fe81ef6ef51619d24adae41162d99d1706178d9725dc4f31564", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366652, "uuid": "f47f5087-ac09-4372-8b7b-c365f1ba524d", "value": "T1E08309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366652, "uuid": "ebba2de9-1782-4f57-b939-1586c93f72d5", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnYWadVN/:XEKltp9txAX/yr2pbYWYVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774366652, "uuid": "54f592cf-b0bc-4722-b3c3-ce92e4735223", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366652, "uuid": "d1b06883-e068-48db-964a-c6f30f9fce31", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea8ff314-279a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774368173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774368173, "uuid": "78fd66af-570f-41df-8fb3-c78406cb7672", "comment": "Malware payload", "value": "017c9ae145d2e12fe460ab1756a3349f", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774368173, "uuid": "690b6297-878d-466f-a9cd-99e452bdf229", "comment": "Malware payload", "value": "8089a22e90ca2fa2edc8f673e9dded06f880af95d44e07cdff61650208dc1133", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774368173, "uuid": "905ff003-c692-4725-9177-678dd97dfff3", "value": "T1FEF6CF62BAD0A8A2D7258473DD80C4FD39693D188DABAAC7FAD07B3EF5350721D715", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774368173, "uuid": "3fa913d7-541f-4be4-9bcc-cd3f2e0a954a", "value": "6cc605e1409bd2fd2b29e654ea2af770", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774368173, "uuid": "2d869cc6-771e-4e39-b035-aff5eccf8906", "value": "196608:yl8Qs+IGYYIRCeiAlYujHVMVHnSrt42O55:yqXRCAl1TMHn55", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774368173, "uuid": "78909f85-7711-4d49-b352-986e684ddbf4", "value": 16031744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774368173, "uuid": "8eb55619-a340-4897-9ac3-6482cb74ecef", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1732011f-279b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774368248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774368248, "uuid": "d8f7aaff-cefe-4b6e-8cb1-bcb33d2ee613", "comment": "Malware payload", "value": "c665d18c0c1874b3560f3996b9a676c5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774368248, "uuid": "3d3d819b-7d0f-49ac-b703-e0e3f6711f60", "comment": "Malware payload", "value": "eac568ce085ea601774ff9d9c0bccd05d06ed8a0d12a64200d6837b5b1e80f30", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774368248, "uuid": "dd62419a-d8ec-4ec3-b700-2bd4d0f9fc32", "value": "T120931A3174AF052A166F836E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774368248, "uuid": "f0dbeb93-f37c-4d3c-a594-5f5306bfe013", "value": "1536:9Byp1tF/uwMmAIa14oXflI1epeV7tb73WdxCrCitkb5fv2v05xuNr4iaxsCZK+6x:98gIO0GitkbFv2v05xuNrCxsCZJ6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774368248, "uuid": "9f798e7a-2c11-4d6f-a0ee-17a94055c424", "value": 94599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774368248, "uuid": "7a160c83-abe6-4858-8006-b62dda0fdfc4", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774368551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774368551, "uuid": "eabb3b0d-9a2e-4faa-97a2-17abe84e5436", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774368551, "uuid": "f177db42-a6d6-4555-82e4-ba49819ee487", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774368551, "uuid": "2c369441-8f79-48e0-9720-576e837a9093", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774368551, "uuid": "10b56f1a-99b9-4bff-84d1-111c57875963", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774368551, "uuid": "dff8bc6d-a7af-4bab-a4ba-3a3c059730bd", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29a00341-279e-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774369568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774369568, "uuid": "619d8759-2951-4d31-8941-7e9810cee941", "comment": "Malware payload", "value": "5e44c698f44de71ad4bcd07207a6f104", "object_relation": "md5", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774369568, "uuid": "a73aae88-df46-4315-833d-c349e2bae4b7", "comment": "Malware payload", "value": "c65582f044831b92b37ab52f1b739dc987613a74536f05e4f0cbebac99facf46", "object_relation": "sha256", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774369568, "uuid": "c3c73959-0cf0-4f55-bca4-245db087cb78", "value": "T1E4C374A3D741A55906134F2CB70A6335F51D952772FFD303AB931E02A0FCABA1A76B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774369568, "uuid": "472c3f9e-fd08-4c9e-ac3b-a3c8389a00e3", "value": "1536:4o2SuNvA19MHWuwGhkBD2t0/bohQbacx9xc1ZfM8HYeLaA3QfJvFm2tfTW:4oS+zGhkf/DbQ/W3vAA6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774369568, "uuid": "d592d643-c863-4bc4-9585-187d537bdb13", "value": 120840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774369568, "uuid": "97c5799c-aa20-491c-9a5d-81d0bc5162b7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4de383b5-279e-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774369629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774369629, "uuid": "ac9b1a75-b3e4-43bb-b8a5-65ee113c6821", "comment": "Malware payload", "value": "8c88f979eeeb3085ec3a54185b9cfed1", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774369629, "uuid": "640dc084-db66-4f26-9032-e0aad291a4ed", "comment": "Malware payload", "value": "622697e74d1711e4fdab555f9aa663c8e6cb96021be42a8f32f8cf3bc270bf96", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774369629, "uuid": "7a0a49dd-bc61-4991-9dbf-4093033cb4fb", "value": "T1BDA38196EFA7090A06DD83E2D1E1365F04D2035703313BEEF51DA416A62EFE9FA84B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774369629, "uuid": "d4922623-20af-464e-97ba-65edc460e480", "value": "1536:CxvjdEmonqylk/yLT8yaKSMXi4WK3S1nfwGTGvPGWaCe:CdjdEmonqylkqLTrjZXigC1f9yfe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774369629, "uuid": "1f50040f-d43a-48a3-a65d-bd1a1778c58c", "value": 99855, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774369629, "uuid": "4744e2a4-d700-460f-9ffb-acd49ea40f48", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16009d46-7fde-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774372626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774372626, "uuid": "6c7dac95-72d3-4b05-9520-3d04a70f3c4f", "comment": "Malware payload", "value": "eee31b12107a77ec9f5eed0d7efa17d0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774372626, "uuid": "01a08232-16fb-41f3-9a06-6131fb45e182", "comment": "Malware payload", "value": "5e3b9203246f0faec39c7ea93b46de66411dfae9acedf0a268daf2638b53a481", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774372626, "uuid": "ac491043-7688-4b58-930a-0c567c3c542d", "value": "7A42C007DA3BA09EC0A278F7614C035C19CC9BF4DE652914564A651787490EF093F84F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774372626, "uuid": "b0c3b7a8-bc4c-4e9c-95fb-4023cec04952", "value": "192:EczJ6NpLdASO2hjhA18Vo/SD0U0cEA/zwJRxEaoRB4b5AxH6AwgNkDYnBjrW8TLQ:V+LGSFhAZ/O0cEA/KEaoRC0ugOabHB+h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774372626, "uuid": "863fc601-cab0-4421-b2b1-4bab95b90425", "value": 12852, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16d3950a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774388140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774388140, "uuid": "2630e09a-ab24-42b0-bb4f-d76a74835edd", "comment": "Malware payload", "value": "4e9b89a618e755926424054b4d1a6953", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774388140, "uuid": "bde3ae6b-ea04-40fb-b47d-e609d7f48a00", "comment": "Malware payload", "value": "eaa08f7cedc2ed4a97fdff1e549b54726ae32832f1bcf0294b767f983213a157", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774388140, "uuid": "c68e1062-fcfa-48a7-8661-0c20edbb592a", "value": "9433018623A62EB2D1319DF5A7FCFF89A04A7D949FE91C0A7C213659B47235C28C4C1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774388140, "uuid": "f21103ed-477c-4e9f-ad30-7f15bf29ee4c", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsX:yYI0ARqw1qAEv7UIFM8oJorFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774388140, "uuid": "6404898e-acc3-46a2-bb4a-5b5922781e2e", "value": 50680, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774310414, "uuid": "6f3a1bf8-2714-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl4path.kineticmatrixduct.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774310527, "uuid": "b2601b25-2714-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.228.50:54154/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774310716, "uuid": "2364f1a5-2715-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.229.129:57656/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774310768, "uuid": "42368eb2-2715-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev1proc.atomiclogichub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774310951, "uuid": "af5b2e90-2715-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.140.9.139:54180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774311126, "uuid": "17f62731-2716-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev2outer.atomiclogichub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774311127, "uuid": "17f7aabc-2716-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.169.46:57035/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774311427, "uuid": "caeae501-2716-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.8.92:33925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774311431, "uuid": "cd52f3fc-2716-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev3field.atomiclogichub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774311786, "uuid": "a11980cb-2717-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev4space.atomiclogichub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774312032, "uuid": "3373e8d5-2718-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.67.92:45245/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774312088, "uuid": "5518137d-2718-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1proc.viscositydataloop.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774312326, "uuid": "e2aac2f7-2718-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.76.236:54948/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774312329, "uuid": "e4a09afc-2718-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.167.197:44711/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774312448, "uuid": "2be0748d-2719-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2steel.viscositydataloop.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774312571, "uuid": "74b15211-2719-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.190:42832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774312746, "uuid": "dd47263b-2719-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3core.viscositydataloop.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774313052, "uuid": "9394dc1f-271a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.26.235:57250/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774313056, "uuid": "960edf5a-271a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.166.194:33650/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774313175, "uuid": "dcf5141f-271a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4sat.viscositydataloop.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774313346, "uuid": "4306e1a5-271b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.8.92:33925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774313418, "uuid": "6e094929-271b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.115.234:40375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774313471, "uuid": "8d90a366-271b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1infra.fractalrelaypoint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774313655, "uuid": "fae8ad71-271b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.2:39702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774313766, "uuid": "3d6e559f-271c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2proxy.fractalrelaypoint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774313827, "uuid": "61cf0b2f-271c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.81.141:47511/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774314126, "uuid": "13d039bb-271d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3data.fractalrelaypoint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774314432, "uuid": "c9ffdd74-271d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.190:42832/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774314432, "uuid": "ca6dc022-271d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.235.62.104:49242/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774314486, "uuid": "ea9892fd-271d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4point.fractalrelaypoint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774314787, "uuid": "9db44d99-271e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.58.114:44204/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774314848, "uuid": "c1e5e20e-271e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl1sync.inertialstreamhub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774314853, "uuid": "c53ec3b3-271e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.115.234:40375/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774315025, "uuid": "2bc02633-271f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://avk93cqg.ironhub.digital/?=check&&actmn=kQmNUYzNmHznuFCK", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774315026, "uuid": "2c54bb2f-271f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.235.62.104:49242/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774315153, "uuid": "77bdf5b6-271f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.56.11:55815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774315209, "uuid": "993eba2e-271f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl2data.inertialstreamhub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774315267, "uuid": "bbe260d0-271f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.56.11:55815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774315390, "uuid": "055710d3-2720-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.2:39702/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774315567, "uuid": "6ead19dc-2720-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl3edge.inertialstreamhub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774315627, "uuid": "9251aa4c-2720-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.81.141:47511/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774315631, "uuid": "949372aa-2720-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.58.114:44204/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774315869, "uuid": "228c77dc-2721-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl4static.inertialstreamhub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774316108, "uuid": "b11dc103-2721-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1sync.formicidavortex.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774316415, "uuid": "686b40f8-2722-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.146.128:34865/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774316418, "uuid": "69dbf214-2722-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.136.50.56:59812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774316526, "uuid": "aa3e5e28-2722-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2data.formicidavortex.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774316533, "uuid": "ae4569ed-2722-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.132.131:51769/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774316767, "uuid": "39be5c71-2723-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3edge.formicidavortex.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774317186, "uuid": "336cbcc2-2724-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4static.formicidavortex.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774317426, "uuid": "c2d24771-2724-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:51730/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774317487, "uuid": "e74d119a-2724-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1meta.mandibulateflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774317568, "uuid": "1753dba8-2725-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.146.128:34865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774317845, "uuid": "bcc85538-2725-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2proc.mandibulateflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774317853, "uuid": "c1625c9f-2725-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.136.50.56:59812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774318207, "uuid": "944ad6bb-2726-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3gate.mandibulateflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774318508, "uuid": "47d3b724-2727-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4sync.mandibulateflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774318572, "uuid": "6dba49f4-2727-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.89.54:47420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774318926, "uuid": "40f34437-2728-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl1store.chrysalisbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774318985, "uuid": "63fa7709-2728-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.80.240:55375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774319166, "uuid": "cfa73749-2728-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl2remote.chrysalisbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774319227, "uuid": "f40ba83d-2728-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.61:43412/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774319235, "uuid": "f8df6ce3-2728-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.24.248:47451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774320073, "uuid": "ecac6c87-272a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.75.40:57867/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774320428, "uuid": "bff2e885-272b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.182.166:35901/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774320430, "uuid": "c17fd3b2-272b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.165.146:42232/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774320859, "uuid": "c0f18279-272c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.24.248:47451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774321097, "uuid": "4ee4feb3-272d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.13.0:57090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774321636, "uuid": "901a0f8d-272e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.153.178:36361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774321699, "uuid": "b5903585-272e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.57.249:59488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774321986, "uuid": "60e0cb7f-272f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/hfuhuu/nvidiaCapture/raw/refs/heads/main/embind/nvidia_Capture_1.8-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774321986, "uuid": "60f0a125-272f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/hfuhuu/nvidiaCapture/refs/heads/main/embind/nvidia_Capture_1.8-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322225, "uuid": "ef6988ec-272f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.182.166:35901/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "1485a007-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/lukhanteanini21-glitch/Script-/raw/refs/heads/main/platinize/Script-1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "148ce59d-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/apgmightking/Security-Audit-Framework-Shell/refs/heads/main/AuditReports/Security_Audit_Shell_Framework_3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "14905319-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/lukhanteanini21-glitch/Script-/refs/heads/main/platinize/Script-1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "1490652f-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/lukhanteanini21-glitch/Ushd/refs/heads/main/citharist/Software-v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "14934a62-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/apgmightking/Security-Audit-Framework-Shell/raw/refs/heads/main/AuditReports/Security_Audit_Shell_Framework_3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "149ade5d-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/lukhanteanini21-glitch/Lilx/refs/heads/main/sexannulate/Software_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "149baca9-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/lukhanteanini21-glitch/code-audit/refs/heads/main/references/frameworks/audit-code-v1.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "149f2251-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/1nashiw2/nioh3-trainer-2026/refs/heads/main/src/trainer-nioh-v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "14b5dcb9-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/lukhanteanini21-glitch/Lilx/raw/refs/heads/main/sexannulate/Software_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322288, "uuid": "14f4536d-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/lukhanteanini21-glitch/Jeje/raw/refs/heads/main/foreloper/Software_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322289, "uuid": "150dc980-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/lukhanteanini21-glitch/Jeje/refs/heads/main/foreloper/Software_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322289, "uuid": "1515b6de-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/1nashiw2/nioh3-trainer-2026/raw/refs/heads/main/src/trainer-nioh-v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322290, "uuid": "16106c91-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/lukhanteanini21-glitch/Ushd/raw/refs/heads/main/citharist/Software-v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322290, "uuid": "1621b59a-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/lukhanteanini21-glitch/code-audit/raw/refs/heads/main/references/frameworks/audit-code-v1.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322418, "uuid": "626f72ef-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.74.203:59055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774322526, "uuid": "a2b1cb6a-2730-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.197:55857/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323018, "uuid": "c8093702-2731-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.58:39958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323247, "uuid": "5095aa31-2732-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/6334661508/lzyfkOs.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323495, "uuid": "e458490b-2732-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.57.249:59488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323726, "uuid": "6dcf003e-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.29.50.238:42106/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323796, "uuid": "974b9292-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.74.203:59055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323849, "uuid": "b77005e9-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/forgestudi0s/wagmiwars/raw/refs/heads/main/backend/app/Software-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323850, "uuid": "b789016c-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/57karakalkan/MetaSafe-Guardian-/refs/heads/main/hydramnion/Meta_Guardian_Safe_v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323850, "uuid": "b7d99b8a-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/57karakalkan/MetaSafe-Guardian-/raw/refs/heads/main/hydramnion/Meta_Guardian_Safe_v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323851, "uuid": "b81fe1e9-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/forgestudi0s/clawshield/refs/heads/main/internal/hardener/Software-v2.5-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323851, "uuid": "b830845e-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/saeeed123/1af-StarWars-TheOldRepublicff/raw/refs/heads/main/residentially/af_Star_The_Wars_Old_Republicff_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323851, "uuid": "b84b9b44-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/WileViking10/aws-security-scout/raw/refs/heads/main/aws_scout/core/security_aws_scout_flightily.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323851, "uuid": "b884e491-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/KANKERTJE2/Anti-Shannon/refs/heads/main/src/wukong/Anti_Shannon_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323851, "uuid": "b8854457-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/forgestudi0s/clawshield/raw/refs/heads/main/internal/hardener/Software-v2.5-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323851, "uuid": "b8975d78-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/krypton2355/rust-linuxgsm-watchdog/raw/refs/heads/main/indogen/rust-watchdog-linuxgsm-bahut.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b8a81e94-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/eldenisek/syro-Theme/refs/heads/main/images/syro_Theme_v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b8b74d37-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nerfyjubay/Phitto-phishing/refs/heads/main/lib/src/Phitto-phishing-1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b8b7f407-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/KANKERTJE2/Anti-Shannon/raw/refs/heads/main/src/wukong/Anti_Shannon_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b8bc9911-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/eldenisek/Anti-AFK/refs/heads/main/anticrisis/Anti-AFK-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b8dd6c7a-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/eldenisek/Anti-AFK/raw/refs/heads/main/anticrisis/Anti-AFK-v1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b8e4a50b-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/forgestudi0s/wagmiwars/refs/heads/main/backend/app/Software-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b8e73c1a-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/eldenisek/syro-Theme/raw/refs/heads/main/images/syro_Theme_v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b8ef21eb-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/krypton2355/rust-linuxgsm-watchdog/refs/heads/main/indogen/rust-watchdog-linuxgsm-bahut.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b8f09382-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/WileViking10/aws-security-scout/refs/heads/main/aws_scout/core/security_aws_scout_flightily.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b8fb28c3-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/57karakalkan/face-injector-v2-1/raw/refs/heads/main/face_injector_v2/v_face_injector_Bubastite.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b901c128-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nerfyjubay/Phitto-phishing/raw/refs/heads/main/lib/src/Phitto-phishing-1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b9102873-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/saeeed123/1af-StarWars-TheOldRepublicff/refs/heads/main/residentially/af_Star_The_Wars_Old_Republicff_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b914bb35-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ShaggyT0701/prompt-shield/refs/heads/main/examples/prompt-shield-v1.3-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b914f2e2-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/57karakalkan/face-injector-v2-1/refs/heads/main/face_injector_v2/v_face_injector_Bubastite.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b92613b6-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Zidane109/cloud-honeypot-auto-block/raw/refs/heads/main/infra/terraform/auto-cloud-honeypot-block-3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b92d8c29-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Zidane109/cloud-honeypot-auto-block/refs/heads/main/infra/terraform/auto-cloud-honeypot-block-3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323852, "uuid": "b92e43c8-2733-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ShaggyT0701/prompt-shield/raw/refs/heads/main/examples/prompt-shield-v1.3-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323979, "uuid": "045c2568-2734-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.151.4:51493/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774323979, "uuid": "046f9453-2734-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.151.4:51493/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324027, "uuid": "2137a299-2734-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.197:55857/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324029, "uuid": "22319bd0-2734-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.238.116:37285/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324031, "uuid": "23a1bdac-2734-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.58:39958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324156, "uuid": "6e4200e2-2734-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.14.211:38197/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "660fdcbc-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/B0zrx/b0zrx.github.io/refs/heads/main/bandstand/zrx_io_github_b_v2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "662b22dd-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/orangeok77/chrysalis-ioc-triage/refs/heads/master/docs/triage-chrysalis-ioc-1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "663bd93f-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Fayku57/EeveeSpotifyReborn/refs/heads/swift/.github/Spotify-Eevee-Reborn-3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "6640a1bf-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/orangeok77/chrysalis-ioc-triage/raw/refs/heads/master/docs/triage-chrysalis-ioc-1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "66492b8d-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/IFearNoHost/exo/raw/refs/heads/main/src/middleware/Software-v3.0-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "664adb72-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sabinakhatun14588-ctrl/sabinakhatun14588-ctrl.github.io/raw/refs/heads/main/Aigialosaurus/github-sabinakhatun-ctrl-io-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "664b57f0-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sabinakhatun14588-ctrl/sabinakhatun14588-ctrl.github.io/refs/heads/main/Aigialosaurus/github-sabinakhatun-ctrl-io-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "664c09f8-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sabinakhatun14588-ctrl/moltbook-agent-guard/refs/heads/main/integrations/guard_moltbook_agent_1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "665337c1-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nonamebatbai/Anti_Phishing_Email_Detector_gui/refs/heads/main/anti_phishing_email_detector/data/gui-Anti-Phishing-Email-Detector-v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "6654d256-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ShulpeXTechnology/CalcBookBackend/refs/heads/main/models/Calc_Backend_Book_3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "66614362-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Fayku57/EeveeSpotifyReborn/raw/refs/heads/swift/.github/Spotify-Eevee-Reborn-3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324572, "uuid": "66643eae-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/lowwkezer/bunnytweak/refs/heads/main/.github/Software_v1.4-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "6667d43c-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Fayku57/Aar-Act/refs/heads/main/automation/Aar_Act_2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "66716701-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/lowwkezer/shannon/raw/refs/heads/main/xben-benchmark-results/XBEN-079-24/audit-logs/prompts/Software-3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "66730767-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ShulpeXTechnology/CalcBookBackend/raw/refs/heads/main/models/Calc_Backend_Book_3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "667cf781-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/lowwkezer/shannon/refs/heads/main/xben-benchmark-results/XBEN-079-24/audit-logs/prompts/Software-3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "667e1fe2-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nonamebatbai/INS_Sandstorm/refs/heads/master/Insurgency/Config/Server/Sandstorm_IN_v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "668546d9-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/lowwkezer/bunny/refs/heads/main/src/lib/utils/Software-3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "668be3c2-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/cyrustmods/github.io/refs/heads/master/assets/mobirise/github_io_1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "668e0d71-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ShulpeXTechnology/CalcBook/raw/refs/heads/main/public/images/logo/Calc_Book_2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "6691279d-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/lowwkezer/bunnytweak/raw/refs/heads/main/.github/Software_v1.4-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "6692ae32-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sabinakhatun14588-ctrl/moltbook-agent-guard/raw/refs/heads/main/integrations/guard_moltbook_agent_1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "66947fcd-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ShulpeXTechnology/CalcBook/refs/heads/main/public/images/logo/Calc_Book_2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "669c242a-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/cyrustmods/github.io/raw/refs/heads/master/assets/mobirise/github_io_1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "669c30f5-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ShulpeXTechnology/totp-otp-auth/refs/heads/main/src/auth-otp-totp-v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "66a24809-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/IFearNoHost/exo/refs/heads/main/src/middleware/Software-v3.0-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "66a3adcb-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nonamebatbai/Anti_Phishing_Email_Detector_gui/raw/refs/heads/main/anti_phishing_email_detector/data/gui-Anti-Phishing-Email-Detector-v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "66aa93e4-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/IFearNoHost/ifearnohost.github.io/refs/heads/main/speciousness/github_ifearnohost_io_1.9-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "66ae0ba7-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/cyrustmods/OPENCLAW-SKILL-SAFE/refs/heads/master/grandame/SKIL-SAFE-OPENCLA-v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "66afb30f-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nonamebatbai/INS_Sandstorm/raw/refs/heads/master/Insurgency/Config/Server/Sandstorm_IN_v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "66b69796-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/lowwkezer/bunny/raw/refs/heads/main/src/lib/utils/Software-3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "66c01829-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/IFearNoHost/ifearnohost.github.io/raw/refs/heads/main/speciousness/github_ifearnohost_io_1.9-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "66d2a8a8-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ShulpeXTechnology/totp-otp-auth/raw/refs/heads/main/src/auth-otp-totp-v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "66d8aa3e-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/cyrustmods/OPENCLAW-SKILL-SAFE/raw/refs/heads/master/grandame/SKIL-SAFE-OPENCLA-v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "66e370b5-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/B0zrx/RationTrack/raw/refs/heads/main/docs/docs/docs/Ration-Track-2.6-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774324573, "uuid": "66ebd50a-2735-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/B0zrx/RationTrack/refs/heads/main/docs/docs/docs/Ration-Track-2.6-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325469, "uuid": "7cfc4078-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/tsntizka/23/refs/heads/main/in/23.txt", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "7d2bfb19-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.238.116:37285/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "7d322bb2-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/tsntizka/23/raw/refs/heads/main/in/23.txt", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "7d4ccd62-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/wangyanjun7954/CyberDefenseX_demo/refs/heads/main/Agent/demo-Defense-Cyber-1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "7d76a706-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/juwad65/npm-malware-scanner/refs/heads/main/messmate/malware-scanner-npm-1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "7d77426b-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/juwad65/npm-malware-scanner/raw/refs/heads/main/messmate/malware-scanner-npm-1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "7d8f2b00-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Loczek223/ExileModForge/refs/heads/main/occupative/Forge-Mod-Exile-1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "7d992223-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/B0zrx/b0zrx.github.io/raw/refs/heads/main/bandstand/zrx_io_github_b_v2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "7da678fa-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wangyanjun7954/CyberDefenseX_demo/raw/refs/heads/main/Agent/demo-Defense-Cyber-1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "7da6f073-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Loczek223/fraud-detection-modelling-and-reporting/refs/heads/main/orthotolidin/and_modelling_fraud_detection_reporting_2.6-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325470, "uuid": "7da75920-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Loczek223/ExileModForge/raw/refs/heads/main/occupative/Forge-Mod-Exile-1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "7da7a174-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Feros0/commentcrusader-burp/refs/heads/main/media/commentcrusader_burp_cessor.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "7dab9b27-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/VorexCotusar/revguard-nlp/refs/heads/main/hogling/revguard_nlp_mailguard.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "7daeb597-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Siyahkan0637/safehold/raw/refs/heads/main/.vscode/Software_3.8-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "7db81603-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Feros0/commentcrusader-burp/raw/refs/heads/main/media/commentcrusader_burp_cessor.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "7dbd5892-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Fayku57/Aar-Act/raw/refs/heads/main/automation/Aar_Act_2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "7dbe0e8f-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Siyahkan0637/safehold/refs/heads/main/.vscode/Software_3.8-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "7dc2b09a-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Loczek223/fraud-detection-modelling-and-reporting/raw/refs/heads/main/orthotolidin/and_modelling_fraud_detection_reporting_2.6-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "7dc2c2ef-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Raiz-ui/obex/refs/heads/main/ruby/Software_trickment.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "7dd51ff0-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Raiz-ui/obex/raw/refs/heads/main/ruby/Software_trickment.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "7dd523ca-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/VorexCotusar/revguard-nlp/raw/refs/heads/main/hogling/revguard_nlp_mailguard.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "7ddaecd0-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Karthik-reddy6/aegistrace-threat-intelligence/raw/refs/heads/main/docs/intelligence-threat-aegistrace-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325471, "uuid": "7dff57b0-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Karthik-reddy6/aegistrace-threat-intelligence/refs/heads/main/docs/intelligence-threat-aegistrace-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325475, "uuid": "8053cc15-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.201.157:41801/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325476, "uuid": "80b1f764-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.147.26:34872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325476, "uuid": "8100990f-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.33.173:41720/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325526, "uuid": "9e8cea87-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.29.50.238:42106/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325527, "uuid": "9f74445c-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.99:46900/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325586, "uuid": "c25929fb-2737-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.14.211:38197/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325826, "uuid": "514cdad8-2738-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/varun4gv/pumpfun-risk-analyzer/refs/heads/main/backend/services/analyzer_pumpfun_risk_1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325826, "uuid": "5153774d-2738-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/varun4gv/pumpfun-risk-analyzer/raw/refs/heads/main/backend/services/analyzer_pumpfun_risk_1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325826, "uuid": "5158961d-2738-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Stanayo/s3tk/raw/refs/heads/main/spinnable/s_tk_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774325826, "uuid": "516bfa01-2738-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Stanayo/s3tk/refs/heads/main/spinnable/s_tk_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774326086, "uuid": "eca8c278-2738-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.209.181.97:34049/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774326126, "uuid": "049237e1-2739-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.99:46900/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774326432, "uuid": "bac5c984-2739-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.147.26:34872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774326785, "uuid": "8d0c8d9c-273a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/qVP2lG5.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774326846, "uuid": "b1cc38c4-273a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/qp9GNBx.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774326910, "uuid": "d79bda20-273a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.201.157:41801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774326965, "uuid": "f8a9fb7e-273a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/qp9GNBx.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327093, "uuid": "44954ae1-273b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.193.44:44753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "604e4a7a-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/CaidonW/Electrum-Wallet-Multi-Crypto-Secure-Gui-Multi-Coin-Storage-Web-Browser/refs/heads/main/Electrum-Wallet/Properties/lib/Secure-Browser-Storage-Coin-Wallet-Web-Gui-Electrum-Crypto-Multi-1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "604eb2fb-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/elmamlaka/shopify-traffic-filter-block-bots/refs/heads/main/chernozem/bots_block_shopify_filter_traffic_v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "6051df2b-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/tiagoalfaro2006/AutoPentestX/raw/refs/heads/main/modules/X-Auto-Pentest-3.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "605aadef-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/OviFrn/llmverify-npm/raw/refs/heads/main/src/security/npm_llmverify_3.3-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "60745f83-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/CaidonW/Electrum-Wallet-Multi-Crypto-Secure-Gui-Multi-Coin-Storage-Web-Browser/raw/refs/heads/main/Electrum-Wallet/Properties/lib/Secure-Browser-Storage-Coin-Wallet-Web-Gui-Electrum-Crypto-Multi-1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "6074f832-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/elmamlaka/shopify-traffic-filter-block-bots/raw/refs/heads/main/chernozem/bots_block_shopify_filter_traffic_v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "60803f57-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ayushcsh/advent-of-hacks/raw/refs/heads/main/straightforwardness/advent-hacks-of-1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "608b2521-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/CaidonW/CaidonW/raw/refs/heads/main/thermojunction/W-Caidon-v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327569, "uuid": "608b2b26-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Munem-1/File-Integrity-Checker-Cybersecurity-Tool/raw/refs/heads/main/assets/Integrity_Tool_Cybersecurity_Checker_File_3.7-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327628, "uuid": "83c06140-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ZukoChris/Ebyte-amsi-patchless-vehhwbp/raw/refs/heads/main/HWBP-AmsiBypass/vehhwbp-Ebyte-patchless-amsi-3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327628, "uuid": "83c2106f-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/tiagoalfaro2006/AutoPentestX/refs/heads/main/modules/X-Auto-Pentest-3.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327628, "uuid": "83c21d98-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Munem-1/File-Integrity-Checker-Cybersecurity-Tool/refs/heads/main/assets/Integrity_Tool_Cybersecurity_Checker_File_3.7-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327628, "uuid": "83c22c44-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ayushcsh/advent-of-hacks/refs/heads/main/straightforwardness/advent-hacks-of-1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327628, "uuid": "83c27cc3-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ZukoChris/Ebyte-amsi-patchless-vehhwbp/refs/heads/main/HWBP-AmsiBypass/vehhwbp-Ebyte-patchless-amsi-3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327628, "uuid": "83c287c9-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/OviFrn/llmverify-npm/refs/heads/main/src/security/npm_llmverify_3.3-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327637, "uuid": "88c1ec92-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.103.135:44583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327637, "uuid": "88ca998b-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.103.135:44583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327685, "uuid": "a5cb8c7c-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/CaidonW/CaidonW/refs/heads/main/thermojunction/W-Caidon-v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327754, "uuid": "ceeac4a0-273c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.237.26:44881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774327869, "uuid": "1327d5dc-273d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.82.79:36778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774328107, "uuid": "a11668f4-273d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl3dev.chrysalisbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774328107, "uuid": "a13a0c2b-273d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.239.229:35781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774328234, "uuid": "ecbf3fd5-273d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.92.82:34497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774328355, "uuid": "34d8b52f-273e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.77.120:59043/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774328409, "uuid": "5529ea20-273e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.160.67:39640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774328653, "uuid": "e6cbf6b2-273e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.92.82:34497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774328763, "uuid": "28235bd3-273f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/5XvnGZz.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774328773, "uuid": "2e3d2aff-273f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.239.229:35781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774328894, "uuid": "75f4f53f-273f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.241.63:53022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774329065, "uuid": "dc0046e1-273f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/Cvrbg1F.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774329185, "uuid": "2391641d-2740-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/UpFZk06.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774329195, "uuid": "2972772b-2740-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.237.26:44881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774329306, "uuid": "6bbf7599-2740-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/YbJ7y1k.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774329665, "uuid": "41e428b7-2741-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/BINMSN9.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774329730, "uuid": "68bd2508-2741-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.160.67:39640/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774329784, "uuid": "88aae922-2741-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/v3R9oxk.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774329915, "uuid": "d6821a26-2741-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.250:53103/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774329965, "uuid": "f4bb36f2-2741-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/dRf4qKq.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774330144, "uuid": "5f50bd57-2742-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/n7wmUuF.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774330264, "uuid": "a6fa18f3-2742-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/kO1dv37.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774330327, "uuid": "cc352bd6-2742-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.179.185:58634/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774330575, "uuid": "6056596d-2743-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.29.88:34758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774330625, "uuid": "7dedfa8b-2743-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/kA0qIbf.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774330744, "uuid": "c518b94d-2743-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/Bd1tciM.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331044, "uuid": "77afa085-2744-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/N7aTtDV.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331110, "uuid": "9ecc0215-2744-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev1proc.elytrapointnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331224, "uuid": "e3320d48-2744-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/Ctjb2rQ.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331348, "uuid": "2ca804e6-2745-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev2power.elytrapointnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331527, "uuid": "976b8eda-2745-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.8.207:44960/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331534, "uuid": "9bb6e489-2745-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:40958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331586, "uuid": "bafbd6c4-2745-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.153.145:51082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331766, "uuid": "25e0d3fa-2746-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/APWtDgU.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331887, "uuid": "6e25d9b4-2746-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev3local.elytrapointnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331887, "uuid": "6e40939c-2746-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ModyD/kaggle-AI-agents-google-capstone/refs/heads/master/backend/agents/capstone_A_google_agents_kaggle_3.9-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331887, "uuid": "6e56c10c-2746-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ModyD/kaggle-AI-agents-google-capstone/raw/refs/heads/master/backend/agents/capstone_A_google_agents_kaggle_3.9-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331954, "uuid": "964e5091-2746-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.241.63:53022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774331954, "uuid": "96582502-2746-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.75.40:57867/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332066, "uuid": "d91187dc-2746-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev4work.elytrapointnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332127, "uuid": "fd66ebe5-2746-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.179.185:58634/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332128, "uuid": "fe02d53d-2746-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.220.207:56490/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332434, "uuid": "b4147537-2747-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:47830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332499, "uuid": "daad7b5a-2747-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.49.66:33615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332664, "uuid": "3d785c1d-2748-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/Mwd2F1d.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332666, "uuid": "3ecd9a2c-2748-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Armaan29-09-2005/AI-OSINT-Security-Analyzer/refs/heads/main/.streamlit/Security_A_OSIN_Analyzer_3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332666, "uuid": "3ecdad53-2748-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ombarde12/IX-GhostProtocol/refs/heads/main/core/identity/Protocol_Ghost_I_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332667, "uuid": "3ed29fc9-2748-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ombarde12/IX-GhostProtocol/raw/refs/heads/main/core/identity/Protocol_Ghost_I_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332667, "uuid": "3ed8efde-2748-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Armaan29-09-2005/AI-OSINT-Security-Analyzer/raw/refs/heads/main/.streamlit/Security_A_OSIN_Analyzer_3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332667, "uuid": "3eeb9805-2748-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/JulesJujuu/wpaudit/refs/heads/main/config/Software-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332667, "uuid": "3ef4942b-2748-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ombarde12/OmAESpareparts.github.io/refs/heads/main/uncasked/github-Om-Spareparts-io-AE-v2.0-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332667, "uuid": "3ef5060d-2748-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Rianna113/BlackVault/refs/heads/main/src/core/encryption_engine/Black_Vault_v3.4-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332667, "uuid": "3f03e7bb-2748-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Rianna113/BlackVault/raw/refs/heads/main/src/core/encryption_engine/Black_Vault_v3.4-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332667, "uuid": "3f072c82-2748-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ombarde12/OmAESpareparts.github.io/raw/refs/heads/main/uncasked/github-Om-Spareparts-io-AE-v2.0-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332668, "uuid": "3fa14c14-2748-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/JulesJujuu/wpaudit/raw/refs/heads/main/config/Software-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774332909, "uuid": "cf445c9b-2748-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1infra.scutellummatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774333086, "uuid": "389dd0a4-2749-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2base.scutellummatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774333335, "uuid": "cd10dca9-2749-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.77.120:59043/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774333507, "uuid": "33f010f8-274a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3user.scutellummatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774333817, "uuid": "ec8b4bea-274a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.49.66:33615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774333927, "uuid": "2e51d427-274b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4link.scutellummatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774335007, "uuid": "b1d99291-274d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2core.spiraclelinkhub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774335365, "uuid": "870fd62f-274e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/u2dGgIR.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774335606, "uuid": "16d16b4d-274f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/eDmSwBe.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774335674, "uuid": "3f8e9439-274f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.1:42783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774335727, "uuid": "5ec3dfdc-274f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.19.6:45252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774335727, "uuid": "5f2090dd-274f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.220.207:56490/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774335844, "uuid": "a4d91409-274f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/jbkTj1S.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774335971, "uuid": "f0a666b3-274f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4view.spiraclelinkhub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336028, "uuid": "12437f00-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.49.245:47719/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336034, "uuid": "163d6362-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:47830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336208, "uuid": "7d9be458-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gateway.lighthouse.storage/ipfs/bafybeihpcmwx36nxntrrnwvkb2fdmukrpqtn3qmlxh3ggy2asnfn7xcbrm", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336211, "uuid": "7f907fb2-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://chinasite.com.br/MSI_135401.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336265, "uuid": "9fe8e5cd-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.shrtx.pro/PWZOvm?&%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7%20%E8%A2%A7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336265, "uuid": "9ff1376e-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.150/226/goodhabitsbettertogivebesthabitfo.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336265, "uuid": "9ff31013-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.150/www/irFSrde.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336265, "uuid": "9ff7dd20-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.149/we/knapbij.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336266, "uuid": "a04cd17c-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.shrtx.pro/PWZOvm?&%D0%9D", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336266, "uuid": "a04db651-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.shrtx.pro/PWZOvm?&?%20?%20?%20?%20?%20?%20?%20?%20?%20?%20?%20?", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336267, "uuid": "a0bf47a3-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl1proc.tarsusdatagate.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336267, "uuid": "a10bb114-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.150/44/wcc/weneedbestpeoplesaroundonfromthegreat.hta", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336268, "uuid": "a15ae3ba-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.150/www/img_145800.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336270, "uuid": "a267a493-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastes.io/raw/5K9OAroT", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336272, "uuid": "a3b6a60d-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.150/www/mSckckf.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336280, "uuid": "a8ca8019-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.150/www/img_200744.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336280, "uuid": "a8cc168f-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.101.85/web/ehkkoad.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336282, "uuid": "a9aac65f-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.150/43/withbestprojectaroundtheworldformebestthings.js", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336284, "uuid": "aac601fb-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.150/www/img_150627.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336289, "uuid": "adb0fbba-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.150/www/img_150752.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336291, "uuid": "af0c5d5a-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.150/www/img_150413.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336294, "uuid": "b0cd09f6-2750-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.61.149.150/www/img_215657.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336517, "uuid": "359de674-2751-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.249.57:32858/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336749, "uuid": "bfefb305-2751-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl2point.tarsusdatagate.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336805, "uuid": "e1b6c30a-2751-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/3wPo9Zb.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336873, "uuid": "0a01bec2-2752-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.249.57:32858/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774336935, "uuid": "2f125aef-2752-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.217.97:39189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337045, "uuid": "70c1288f-2752-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/9zrv74X.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337047, "uuid": "71b06b49-2752-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/neyokay1/neyokay1.github.io/refs/heads/main/tragicness/github-io-neyokay-v3.8-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337047, "uuid": "71bcd62e-2752-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/neyokay1/neyokay1.github.io/raw/refs/heads/main/tragicness/github-io-neyokay-v3.8-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337047, "uuid": "71d6ee29-2752-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/neyokay1/Beast-Scanner/raw/refs/heads/main/tropocaine/Beast-Scanner-1.3-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337047, "uuid": "71e04b9b-2752-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/neyokay1/Beast-Scanner/refs/heads/main/tropocaine/Beast-Scanner-1.3-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337108, "uuid": "966fe322-2752-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/govabhai/ClassShield-V2/refs/heads/main/templates/Class-Shield-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337109, "uuid": "96730a4e-2752-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/govabhai/govabhai.github.io/refs/heads/main/bromocyanide/io-govabhai-github-v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337109, "uuid": "967639d5-2752-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/govabhai/ClassShield-V2/raw/refs/heads/main/templates/Class-Shield-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337109, "uuid": "969599c3-2752-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/govabhai/govabhai.github.io/raw/refs/heads/main/bromocyanide/io-govabhai-github-v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337225, "uuid": "dc015102-2752-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/qRJ3dXP.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337344, "uuid": "22aa0840-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/kXJtUWs.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337412, "uuid": "4b19c12f-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl3view.tarsusdatagate.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337464, "uuid": "6a94217a-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/CfThNZ0.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "6db7ceaf-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ItsIndeSkv/AndroidTutorials/refs/heads/master/RecyclerViewTutorial/app/src/androidTest/java/com/androidtut/Tutorials-Android-2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "6deae55d-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/belydan/AH170-Framework/refs/heads/master/.idea/commandlinetools/A-Framework-2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "6dee8a68-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/belydan/belydan.github.io/raw/refs/heads/main/corporally/belydan_github_io_v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "6dfdfd34-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nothi533/Sentry/refs/heads/main/.dagger/Software_v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "6dfe053a-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/enesssyasarr/netGuard-AI-scanner/refs/heads/main/logs/net_scanner_Guard_A_v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "6e1cbd87-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/belydan/AH170-Framework/raw/refs/heads/master/.idea/commandlinetools/A-Framework-2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "6e21995a-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ItsIndeSkv/AndroidTutorials/raw/refs/heads/master/RecyclerViewTutorial/app/src/androidTest/java/com/androidtut/Tutorials-Android-2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "6e2fdc57-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nothi533/Sentry/raw/refs/heads/main/.dagger/Software_v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "6e31dfb9-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/enesssyasarr/enesssyasarr.github.io/refs/heads/main/Wisigothic/github-io-enesssyasarr-v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337470, "uuid": "6e31ea38-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/tililouche/corvina-sigil-standard/refs/heads/main/paper/sigil_standard_corvina_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337471, "uuid": "6e369887-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ItsIndeSkv/Weighted-Fusion-Disaster-Prediction-Mechanism/refs/heads/main/dashboard/Disaster-Mechanism-Prediction-Fusion-Weighted-3.0-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337471, "uuid": "6e3d62ef-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/tililouche/tililouche.github.io/refs/heads/main/Ophion/io_tililouche_github_2.9-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337471, "uuid": "6e3dc4f0-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/belydan/belydan.github.io/refs/heads/main/corporally/belydan_github_io_v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337471, "uuid": "6e3ed3c2-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/mtysedke/security-incident-artifact-analyzer/raw/refs/heads/main/security-incident-artifact-analyzer/core/artifact-incident-security-analyzer-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337471, "uuid": "6e3ef00a-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/enesssyasarr/netGuard-AI-scanner/raw/refs/heads/main/logs/net_scanner_Guard_A_v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337471, "uuid": "6e405149-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/mtysedke/security-incident-artifact-analyzer/refs/heads/main/security-incident-artifact-analyzer/core/artifact-incident-security-analyzer-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337471, "uuid": "6e4063b2-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nothi533/nothi533.github.io/refs/heads/main/aristocrat/io_github_nothi_2.5-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337471, "uuid": "6e478d8c-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nothi533/nothi533.github.io/raw/refs/heads/main/aristocrat/io_github_nothi_2.5-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337471, "uuid": "6e47905b-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/enesssyasarr/enesssyasarr.github.io/raw/refs/heads/main/Wisigothic/github-io-enesssyasarr-v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337471, "uuid": "6e479e96-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/tililouche/corvina-sigil-standard/raw/refs/heads/main/paper/sigil_standard_corvina_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337471, "uuid": "6e5e7d32-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/tililouche/tililouche.github.io/raw/refs/heads/main/Ophion/io_tililouche_github_2.9-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337471, "uuid": "6e6d9f3e-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ItsIndeSkv/Weighted-Fusion-Disaster-Prediction-Mechanism/raw/refs/heads/main/dashboard/Disaster-Mechanism-Prediction-Fusion-Weighted-3.0-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337471, "uuid": "6e9f3b68-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/mtysedke/mtysedke.github.io/refs/heads/main/Calvinistic/github-mtysedke-io-1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337472, "uuid": "6eedee7e-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/mtysedke/mtysedke.github.io/raw/refs/heads/main/Calvinistic/github-mtysedke-io-1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337476, "uuid": "71477c17-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.198.108:35918/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337481, "uuid": "74be32ed-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.199/iran.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337482, "uuid": "74db1ea1-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.199/iran.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337482, "uuid": "74efd64b-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.199/iran.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337482, "uuid": "74efdc30-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.199/iran.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337482, "uuid": "7518cc5c-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.199/iran.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337482, "uuid": "7547bc61-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.199/iran.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337482, "uuid": "754a1d97-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.199/iran.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337483, "uuid": "75699dfa-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.199/iran.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337483, "uuid": "7569aab1-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.199/iran.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337483, "uuid": "757ba479-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.199/iran.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337483, "uuid": "757c35fa-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.199/iran.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337483, "uuid": "758f514e-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.199/iran.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337483, "uuid": "75ab2c42-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.199/iran.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337488, "uuid": "788da892-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.199/iran.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337591, "uuid": "b5cf2e88-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl4path.tarsusdatagate.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337706, "uuid": "fa487ca4-2753-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/8m5apzl.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "4314db44-2754-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Anderh2718/anderh2718.github.io/raw/refs/heads/main/ambushment/io-github-anderh-1.0-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "431b9844-2754-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/HaucaVN/haucavn.github.io/refs/heads/main/purist/haucavn_github_io_v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "43274583-2754-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/HaucaVN/BibGuard/raw/refs/heads/main/src/fetchers/Guard-Bib-bhoy.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "432bfc3c-2754-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Anderh2718/anderh2718.github.io/refs/heads/main/ambushment/io-github-anderh-1.0-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "432c0b96-2754-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/MAHENDRASINGHRAJPUROHIT/OnlyGuardian/refs/heads/tools/apps/dashboard/src/Guardian-Only-1.7-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "432c100d-2754-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/krisp000/howdy-patcher/refs/heads/main/iniquitable/patcher_howdy_1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "433825d8-2754-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/HaucaVN/haucavn.github.io/raw/refs/heads/main/purist/haucavn_github_io_v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "4357bfe6-2754-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Anderh2718/Sentinel-C/refs/heads/main/src/C_Sentinel_v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337828, "uuid": "43716774-2754-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/rehmanbranded/aegis/refs/heads/main/packages/core/test/Software-2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337829, "uuid": "43fd1aae-2754-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/MAHENDRASINGHRAJPUROHIT/mahendrasinghrajpurohit.github.io/raw/refs/heads/main/pettyfog/io-mahendrasinghrajpurohit-github-v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337829, "uuid": "4405e3d8-2754-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/MAHENDRASINGHRAJPUROHIT/OnlyGuardian/raw/refs/heads/tools/apps/dashboard/src/Guardian-Only-1.7-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337829, "uuid": "4405fa73-2754-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/krisp000/howdy-patcher/raw/refs/heads/main/iniquitable/patcher_howdy_1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337829, "uuid": "4425dc36-2754-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/MAHENDRASINGHRAJPUROHIT/mahendrasinghrajpurohit.github.io/refs/heads/main/pettyfog/io-mahendrasinghrajpurohit-github-v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337832, "uuid": "4576dfc2-2754-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Anderh2718/Sentinel-C/raw/refs/heads/main/src/C_Sentinel_v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774337832, "uuid": "45e68e21-2754-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/rehmanbranded/aegis/raw/refs/heads/main/packages/core/test/Software-2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774338784, "uuid": "7d36e1c6-2756-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/4V7XKoC.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774338785, "uuid": "7de98781-2756-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/HaucaVN/BibGuard/refs/heads/main/src/fetchers/Guard-Bib-bhoy.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774338786, "uuid": "7e32b6e8-2756-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev1proc.ovipositortrace.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774338786, "uuid": "7e37061b-2756-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://adderall.rocks/pPnmS.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774338787, "uuid": "7ef61ea1-2756-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.195:40384/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774338787, "uuid": "7ef91219-2756-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev2outer.ovipositortrace.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774338787, "uuid": "7f03a6e7-2756-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.19.6:45252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774338787, "uuid": "7f050b0d-2756-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.210:56548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774338787, "uuid": "7f050c03-2756-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.153.178:36361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774338788, "uuid": "7f77eec6-2756-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.234.125:53887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774338967, "uuid": "ea28d3f9-2756-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev3field.ovipositortrace.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774339206, "uuid": "78e0a006-2757-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/NO0fr1p.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774339454, "uuid": "0c84b4c3-2758-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.18.80:43226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774339508, "uuid": "2c7e6e52-2758-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev4space.ovipositortrace.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774339626, "uuid": "732f4ddc-2758-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.142.38:48068/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774339750, "uuid": "bd1872d3-2758-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.239.99.7:52348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774339926, "uuid": "25d71c55-2759-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1proc.exuviaestreamnet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774339984, "uuid": "48aa1b14-2759-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/4dJolrm.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774340409, "uuid": "4572dbdb-275a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2steel.exuviaestreamnet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774340465, "uuid": "6735aa5b-275a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/PKhCkYB.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774340646, "uuid": "d2ed16f8-275a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://enotbanknoti.co/stabber", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774340705, "uuid": "f6167712-275a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/HlGNNfp.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774340713, "uuid": "facdd327-275a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file_premium/bdb6pss68wq58uu/stabber/file", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774340827, "uuid": "3e971ef8-275b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3core.exuviaestreamnet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774340886, "uuid": "62382d06-275b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.40:32813/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774340947, "uuid": "86539dd9-275b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.37.19.74:55036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774341144, "uuid": "fc01747b-275b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.18.80:43226/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774341185, "uuid": "141701cf-275c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/VHFgfjr.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774341250, "uuid": "3b157426-275c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4sat.exuviaestreamnet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774341307, "uuid": "5d0092b8-275c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.17.138:60250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774341425, "uuid": "a361509d-275c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/39U8PKV.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774341553, "uuid": "efc3e714-275c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.205:53110/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774341728, "uuid": "57ac7f6d-275d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kerneldelive.velvet-dune.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774341792, "uuid": "7e486c2a-275d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.160.130.109:49808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774341966, "uuid": "e5bb39ab-275d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/i3JJRAl.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774342027, "uuid": "09effaf6-275e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.193:44526/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774342147, "uuid": "51bb5646-275e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://golde-loose.velvet-dune.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774342326, "uuid": "bc2e8a4a-275e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/Cas8EyX.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774342328, "uuid": "bd5a6e81-275e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.225.135.61/GdaWJLSiOjz162.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774342512, "uuid": "2b0bff21-275f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.17.138:60250/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774342635, "uuid": "749c5fa7-275f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.247.115:43021/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774342687, "uuid": "936392cc-275f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://e5754.velvet-dune.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774342755, "uuid": "bc336e88-275f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.74.201:54764/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774342878, "uuid": "055bee00-2760-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.225.163:55855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774342927, "uuid": "22d19704-2760-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.151.31:39202/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774342993, "uuid": "49b0d82d-2760-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.237.164:33682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343108, "uuid": "8e75b98d-2760-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://voiceamp.velvet-dune.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343111, "uuid": "90269822-2760-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.205:53110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343170, "uuid": "b345e63d-2760-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://refaccionesalma.com.mx/cor/remc/news/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343178, "uuid": "b83d4f6b-2760-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.48.36:41026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343287, "uuid": "f9144ef0-2760-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.23.177.216/vbwgjPfywCM166.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343287, "uuid": "f93d0a5b-2760-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.23.177.216/fLfOXQlvlFlyi168.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343287, "uuid": "f93d6fbd-2760-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.23.177.216/Contru154.jpb", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343287, "uuid": "f941d4cc-2760-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.23.177.216/Lumin59.mix", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343287, "uuid": "f943fb2f-2760-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.23.177.216/zbLErzBTDQQB188.bin", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343527, "uuid": "87f3e89e-2761-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.156.194:49998/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343592, "uuid": "aeb81aba-2761-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dcq3oaq.velvet-dune.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343885, "uuid": "5daafa5b-2762-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/IQkTf1l.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343887, "uuid": "5ecc25ee-2762-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.230/img_095026.png", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774343895, "uuid": "63bda8db-2762-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.29.88:34758/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344007, "uuid": "a66cb8d8-2762-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.74.201:54764/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344008, "uuid": "a6ca4efb-2762-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.173.61:44422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344011, "uuid": "a876e67a-2762-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5h1f-grid.tr4cefox.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344425, "uuid": "9f715dd4-2763-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.193:44526/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344485, "uuid": "c3176de9-2763-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8316621590/2kz0yA3.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344546, "uuid": "e7620a83-2763-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://qaur150.tr4cefox.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344666, "uuid": "2ef2161a-2764-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gateway.lighthouse.storage/ipfs/bafybeicr7ypdxpw6pp72on2obzzppf5reelwbrjhgdnppkhlfyqxvdoagq", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344668, "uuid": "30287d41-2764-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/kx05ot.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "wshrat", "colour": "#337cec", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344727, "uuid": "532b548a-2764-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.151.31:39202/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344727, "uuid": "5380f901-2764-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/bvqBSX0V/image-2.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344728, "uuid": "53cfb3af-2764-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://allsydevs.com/image0321.png", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344788, "uuid": "77da10da-2764-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.48.36:41026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344788, "uuid": "77da11fd-2764-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mobshah.com/dd/pp.sam", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344788, "uuid": "7806783a-2764-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.186.220/311/k2.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344789, "uuid": "782086a0-2764-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.186.220/311/oak1.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344789, "uuid": "7869d02d-2764-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastee.dev/r/cZSbJHaC/0", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344790, "uuid": "79293255-2764-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/jjHFxjz6/image.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344845, "uuid": "99c9ba66-2764-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://myjezworld.kesug.com/boi/DECRYPT.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344846, "uuid": "9aa47468-2764-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.210.186.220/311/ajsdfmxi.JS", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344858, "uuid": "a1a585e4-2764-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.237.164:33682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774344966, "uuid": "e226ddb4-2764-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ruoqyu9r.tr4cefox.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774345276, "uuid": "9a79ea74-2765-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.94/x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774345389, "uuid": "dddbfae1-2765-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://s1ovv-cast.tr4cefox.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774345575, "uuid": "4c9d65c2-2766-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.173.61:44422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774345751, "uuid": "b5d7181c-2766-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.141.200:49905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774345866, "uuid": "fa484956-2766-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vqdph.tr4cefox.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774345874, "uuid": "ff07ac94-2766-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.247.115:43021/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774345936, "uuid": "240295fb-2767-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.102.58:43846/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774345995, "uuid": "473cef6a-2767-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.0.209.98:36551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346167, "uuid": "ad78b6a7-2767-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.139.118:47111/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346293, "uuid": "f8d2129c-2767-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.4.151:54372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346347, "uuid": "18dd191b-2768-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://watchletter.mirthbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346587, "uuid": "a84df980-2768-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.37.19.74:55036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346651, "uuid": "ce612a38-2768-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.251.138:32772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774346827, "uuid": "36e87bae-2769-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultrdra.mirthbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774347187, "uuid": "0d904edb-276a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-t3rnpo.mirthbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774347367, "uuid": "78b82c31-276a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.141.200:49905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774347492, "uuid": "c39ab755-276a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.73.156:57819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774347511, "uuid": "cf036157-276a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.186.109:60195/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774347667, "uuid": "2beba9b6-276b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://77gfk.mirthbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774348094, "uuid": "2a57631d-276c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.4.151:54372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774348147, "uuid": "49c1ebf0-276c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://phopatt.mirthbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774348150, "uuid": "4b7d7914-276c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.102.58:43846/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774348629, "uuid": "68f680d8-276d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://72i62f.cobalt-ridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774348693, "uuid": "8f6ffe4a-276d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.251.138:32772/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774348760, "uuid": "b738d054-276d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.67.21:46926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774349110, "uuid": "882f02ec-276e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://qu4nt-point.cobalt-ridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774349527, "uuid": "8067f338-276f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://t0k3n0-drive.cobalt-ridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774349527, "uuid": "80b27cc9-276f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.1.54:58121/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774349535, "uuid": "8515af29-276f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.22.30:41781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774349891, "uuid": "5949cf17-2770-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.68.197:48648/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774349946, "uuid": "7a3cdd8d-2770-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://a5say-spool.cobalt-ridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774350016, "uuid": "a3d1c9d3-2770-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.245.60.169:42940/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774350486, "uuid": "bc0f13fb-2771-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://iumdbd.cobalt-ridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774350613, "uuid": "08052bcd-2772-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.222.96:41145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774350908, "uuid": "b7614fbe-2772-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zennexen.larkspin.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774351327, "uuid": "b13f2e3a-2773-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tarcanv.larkspin.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774351327, "uuid": "b140e251-2773-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.1.54:58121/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774351808, "uuid": "cff7fc71-2774-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://yci9.larkspin.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774351873, "uuid": "f7074cb2-2774-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.245.60.169:42940/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774352236, "uuid": "cf24ec05-2775-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.24.83:46589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774352526, "uuid": "7bdb2c06-2776-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://roufor.larkspin.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774352708, "uuid": "e8a80d65-2776-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://shoremerge.larkspin.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774352826, "uuid": "2ee5c005-2777-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.8.207:44960/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774353131, "uuid": "e45f6ebc-2777-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.76.236:54948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774353188, "uuid": "06a4cf72-2778-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://n0tif-beam.brimvale.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774353254, "uuid": "2dbcf32e-2778-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.134.138:40798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774353670, "uuid": "2613ea49-2779-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kotg.brimvale.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774354087, "uuid": "1e2ff64d-277a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-th0rn.brimvale.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774354566, "uuid": "3bd098cb-277b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://w346.brimvale.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774354694, "uuid": "88128a85-277b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.134.138:40798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774354877, "uuid": "f5872597-277b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.85.16:57038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774354937, "uuid": "1900f79b-277c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.131.92.150:37133/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774355050, "uuid": "5c38dfc1-277c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://messteady.brimvale.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774355117, "uuid": "8482275e-277c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.4.119:58747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774355118, "uuid": "84b90198-277c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.44.158.108:52426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774355530, "uuid": "7a6e0820-277d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://catalogsca.n1mbleoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774355887, "uuid": "4f7c07a1-277e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-ech0.n1mbleoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774356194, "uuid": "067ea5fc-277f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.147:40646/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774356254, "uuid": "2a40c00a-277f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.45.161:48922/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774356314, "uuid": "4db2b360-277f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.132.167:56437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774356314, "uuid": "4db8ccbc-277f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.4.119:58747/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774356429, "uuid": "92787e4d-277f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://urb4n-frame.n1mbleoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774356554, "uuid": "dce4238f-277f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.44.158.108:52426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774356848, "uuid": "8befed91-2780-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://freig-vault.n1mbleoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774356914, "uuid": "b3aac7bc-2780-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.132.167:56437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774357026, "uuid": "f627e8f1-2780-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.159.66:59743/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774357026, "uuid": "f63ccf5f-2780-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.169.132:59914/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774357268, "uuid": "865e8692-2781-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tri-coreon.n1mbleoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774357334, "uuid": "ad9a0a8c-2781-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.131.92.150:37133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774357394, "uuid": "d180cf14-2781-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.45.161:48922/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774357509, "uuid": "16118caf-2782-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.189.198:55962/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774357809, "uuid": "c8caef6a-2782-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://saifjord.hollow-spark.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774358166, "uuid": "9d74915e-2783-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mosssou.hollow-spark.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774358172, "uuid": "a11fc461-2783-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.124.133.173:46565/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774358294, "uuid": "ea36cbfe-2783-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.189.198:55962/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774358528, "uuid": "757378de-2784-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.123.60:33228/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774358650, "uuid": "be3dcc80-2784-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rich-stabi.hollow-spark.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774358947, "uuid": "6f213642-2785-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.64.66:36628/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774359067, "uuid": "b6b487c2-2785-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vor-lithum.hollow-spark.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774359210, "uuid": "0baf82be-2786-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.240.231.212:60620/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774359426, "uuid": "8ce71dde-2786-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.186.109:60195/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774359547, "uuid": "d4d49fe7-2786-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://majorpeak.hollow-spark.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774359855, "uuid": "8c3654b2-2787-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.71.163:34765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774359915, "uuid": "b04bfc5d-2787-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.124.133.173:46565/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774360031, "uuid": "f518ff12-2787-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nr7808j.duskforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774360088, "uuid": "1786986d-2788-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.59.174:52552/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774360276, "uuid": "877ac714-2788-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.167.27:42912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774360447, "uuid": "ed28f9e7-2788-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rnedia-field.duskforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774360515, "uuid": "158cda10-2789-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.101.82:35693/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774360626, "uuid": "583e5f8b-2789-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.123.60:33228/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774360755, "uuid": "a4cda099-2789-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.167.27:42912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774360927, "uuid": "0b5dec22-278a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5un-line.duskforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774361117, "uuid": "7c5877b6-278a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.71.163:34765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774361226, "uuid": "bd6665a3-278a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.129.38:36484/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774361226, "uuid": "bd85db8b-278a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.126.68:51595/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774361288, "uuid": "e28f7075-278a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.146:49870/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774361309, "uuid": "ef1991e7-278a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.61.73:42901/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774361465, "uuid": "4c2a4667-278b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.135.4/60/godwithuskobogreat.hta", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774361528, "uuid": "716a14a2-278b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.4.226:45510/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774361528, "uuid": "71e3d4fc-278b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8514679081/DRTjyu7.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774361537, "uuid": "76d7c66b-278b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.242.135:42025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774361708, "uuid": "dcdb5b4f-278b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ikqeopdh.duskforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774361826, "uuid": "23754009-278c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.4.226:45510/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774361835, "uuid": "2849801e-278c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.156.123:57493/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774362007, "uuid": "8f195d97-278c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://offerleaf.duskforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774362427, "uuid": "8946b7b9-278d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.200.120.62:45779/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774362428, "uuid": "8a1a93ee-278d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pitc-mesh.rivermint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774362616, "uuid": "fa39217f-278d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.101.82:35693/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774362726, "uuid": "3bb81923-278e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.126.68:51595/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774362786, "uuid": "5fac7900-278e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.206.49:57746/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774362912, "uuid": "aa7df4bc-278e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://activetermin.rivermint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774362914, "uuid": "abfd7b9b-278e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.156.123:57493/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774363326, "uuid": "a1548d12-278f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.207:40075/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774363447, "uuid": "e963575c-278f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.61.73:42901/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774363449, "uuid": "ea6ce69f-278f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://qn5igmm.rivermint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774363630, "uuid": "56441acc-2790-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.176.4:38866/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774363647, "uuid": "60e415af-2790-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.240.231.212:60620/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774363807, "uuid": "c036dbf5-2790-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://iatw.rivermint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774364230, "uuid": "bbed16f7-2791-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.200.120.62:45779/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774364287, "uuid": "ddf6886c-2791-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://parcloud.rivermint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774364287, "uuid": "de223c66-2791-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.38.159:38875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774364711, "uuid": "da91ce67-2792-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://convoyprofit.flare-path.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774364827, "uuid": "1fb2ede3-2793-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.176.4:38866/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774365077, "uuid": "b51b2dd1-2793-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.209.181.97:34049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774365189, "uuid": "f7efdae7-2793-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://o3hpy.flare-path.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774365607, "uuid": "f106a613-2794-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://shore-dee.flare-path.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774365611, "uuid": "f32000f3-2794-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.206.49:57746/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774365790, "uuid": "5e384ecc-2795-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.38.159:38875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366034, "uuid": "ef1e10c1-2795-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.35.226:36227/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366329, "uuid": "9efca119-2796-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.112.172.102:40379/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366447, "uuid": "e5967d3d-2796-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.27/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366448, "uuid": "e5ec3971-2796-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.53/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366448, "uuid": "e5fffed6-2796-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.53/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366448, "uuid": "e6196e57-2796-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.251.209:46455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366449, "uuid": "e702932f-2796-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.138.180.205/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366449, "uuid": "e7040d39-2796-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.53/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366450, "uuid": "e71a4045-2796-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.53/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "0d7f40a9-2797-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.138.180.205/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "0d7f44c6-2797-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.138.180.205/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "0d8b7e34-2797-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.138.180.205/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "0d94ac76-2797-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.138.180.205/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "0d94c47d-2797-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.138.180.205/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "0d94dc03-2797-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.138.180.205/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "0d981523-2797-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.138.180.205/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "0d9a9b75-2797-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.138.180.205/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "0d9b795e-2797-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.138.180.205/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "0d9b883b-2797-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.138.180.205/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366514, "uuid": "0da49579-2797-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.138.180.205/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366574, "uuid": "31888fd9-2797-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.53/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366577, "uuid": "3309cc15-2797-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.32.162.53/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366626, "uuid": "504f460c-2797-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.242.68:55978/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774366869, "uuid": "e1418f45-2797-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.139.108:34258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774367348, "uuid": "fe69d543-2798-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.35.226:36227/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774367646, "uuid": "b05d9cd6-2799-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ste4dy0-graph.skyl0om.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774367947, "uuid": "636113bb-279a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://norven5ar.skyl0om.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774368127, "uuid": "cef14850-279a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.212.254:38856/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774368366, "uuid": "5d8500a8-279b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://jjgeingz.skyl0om.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774368496, "uuid": "ab117ece-279b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.112.26:36691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774368551, "uuid": "cb63436b-279b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.100.53:34213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774368733, "uuid": "384280a8-279c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.112.26:36691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774368847, "uuid": "7c1fbd20-279c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vendorshadow.skyl0om.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774369148, "uuid": "2f33de18-279d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.55.186:45532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774369207, "uuid": "52837c0c-279d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://aetherixcore.cc/php/get-download.php", "Tag": [ { "name": "pw-Aetherix", "colour": "#b0d3aa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774369327, "uuid": "9a44aa47-279d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kzreic.graincrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774369568, "uuid": "29d89832-279e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/rodriakd-8413d.appspot.com/o/dll%2Fcaca.txt?alt=media&token=08d47962-34f1-4c6c-833e-ffaee91128c2", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774369629, "uuid": "4e0656eb-279e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/rodriakd-8413d.appspot.com/o/Pe%2Fperoda.txt?alt=media&token=19f18e11-cd02-4a4c-baca-8d4fc54ac6a8", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774369694, "uuid": "7532255f-279e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.81.41:45080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774369747, "uuid": "945f877b-279e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sol-nexex.graincrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774369927, "uuid": "ffb3bace-279e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.251.209:46455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774370166, "uuid": "8e686a07-279f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://r0ut-route.graincrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774370236, "uuid": "b7d3544e-279f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.91.122:34173/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774370413, "uuid": "21a908b7-27a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.147:40646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774370592, "uuid": "8c70a9e4-27a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.100.53:34213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774370647, "uuid": "acbb3caf-27a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ehqkl.graincrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774370827, "uuid": "186a8926-27a1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.89:37434/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774371016, "uuid": "88ad2edd-27a1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.81.41:45080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774371185, "uuid": "edd6d025-27a1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node-track.graincrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774371308, "uuid": "36e0d422-27a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.35:54765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774371612, "uuid": "ec5d89ef-27a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://1ce2-port.frost-echo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774371727, "uuid": "30c7bd49-27a3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.91.122:34173/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774371729, "uuid": "31f729d7-27a3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.107.240:46573/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774372026, "uuid": "e2a0be29-27a3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.89:37434/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774372090, "uuid": "094e8ebd-27a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://light1-scope.frost-echo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774372093, "uuid": "0ae6c83a-27a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.155.70:58375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774372331, "uuid": "98cc940f-27a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.129.10:55478/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774372509, "uuid": "02b2fb8c-27a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solcrestor8.frost-echo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774372627, "uuid": "4929c34b-27a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.132.159:50904/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774372692, "uuid": "6fdb9013-27a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.212.254:38856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774372808, "uuid": "b51b2e28-27a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.96.62:45706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774372926, "uuid": "fb5fe7f1-27a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5jiyuz.frost-echo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774372987, "uuid": "1fa06d49-27a6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.155.70:58375/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774373468, "uuid": "3e401b52-27a7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vel-lineix.frost-echo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774373526, "uuid": "60c4a9c4-27a7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.129.10:55478/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774373648, "uuid": "a9708b75-27a7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.216.3:57411/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774373887, "uuid": "3855317c-27a8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://winterpipeline.q7ravo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774374253, "uuid": "128232f6-27a9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.65.234:35183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774374367, "uuid": "56869c5e-27a9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://steri-node.q7ravo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774374427, "uuid": "79d01f41-27a9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.159.171:48752/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774374726, "uuid": "2c3704ff-27aa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.73.156:57819/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774374786, "uuid": "4fd61c2b-27aa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rjl2hgy.q7ravo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774374794, "uuid": "54d46995-27aa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.8.102:46207/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774375325, "uuid": "918a837f-27ab-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://merlineon6.q7ravo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774375345, "uuid": "9d3de475-27ab-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.160.178:48438/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774375396, "uuid": "bbbd3152-27ab-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.85.88:55774/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774375512, "uuid": "00e48912-27ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.88.208:43916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774375688, "uuid": "69cdaf8d-27ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pricehub.q7ravo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774375748, "uuid": "8d4dbafb-27ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.65.234:35183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774375874, "uuid": "d8a6b93e-27ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.167:35070/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774375940, "uuid": "ffbe9366-27ac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.159.171:48752/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774376291, "uuid": "d140116b-27ad-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.8.102:46207/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774376353, "uuid": "f5ef1f3a-27ad-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.88.208:43916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774376354, "uuid": "f65c4521-27ad-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.85.88:55774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774376467, "uuid": "3a33d6ae-27ae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hvxpnc.thistlecore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774376826, "uuid": "0fb7767b-27af-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nordraum7.thistlecore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774376828, "uuid": "114c194a-27af-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.160.178:48438/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774377247, "uuid": "0a9142f3-27b0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://neur0n-forge.thistlecore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774377310, "uuid": "302c72a2-27b0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.91.18:49869/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774377372, "uuid": "5557b1f1-27b0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.167:35070/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774377426, "uuid": "75c6733b-27b0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.222.96:41145/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774377667, "uuid": "056c5d50-27b1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://75rlme.thistlecore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774378146, "uuid": "22b0e56f-27b2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gmabpncp.thistlecore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774378214, "uuid": "4b55daca-27b2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.76.55:54474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774378215, "uuid": "4b892e3e-27b2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.148.252:38126/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774378456, "uuid": "db444c64-27b2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.76.225.148:37151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774378508, "uuid": "fa46842c-27b2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.96.62:45706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774378568, "uuid": "1e74de62-27b3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.188.220.233:50567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774378626, "uuid": "40f59805-27b3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://knjecym.stone-blink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774378631, "uuid": "437f3b57-27b3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.166:59063/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774378815, "uuid": "b1502177-27b3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.106.45:49744/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774378927, "uuid": "f416fa27-27b3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.55.137:44166/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774378986, "uuid": "1739ef26-27b4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.148.252:38126/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774379108, "uuid": "6051b136-27b4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5cript-branch.stone-blink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774379116, "uuid": "64c6d6a9-27b4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.106.45:49744/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774379468, "uuid": "3690d510-27b5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://podcastridg.stone-blink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774379527, "uuid": "599f3a8c-27b5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.166:59063/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774379835, "uuid": "1131bdf7-27b6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.117.148.118:38816/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774380008, "uuid": "78ac9400-27b6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mercrest3on.stone-blink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774380126, "uuid": "bedb9837-27b6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.142.38:48068/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774380135, "uuid": "c468065d-27b6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.123.251:39577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774380252, "uuid": "09d92587-27b7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.188.220.233:50567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774380367, "uuid": "4e8baada-27b7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.81.136:47825/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774380434, "uuid": "7693433c-27b7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.215.248:51659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774380486, "uuid": "9561dbdb-27b7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fwnc6xm.stone-blink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774380502, "uuid": "9f15f535-27b7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.81.219:35431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774380912, "uuid": "9342ec92-27b8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.174:53011/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774381210, "uuid": "44bc413b-27b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vinetrade.cl0verrun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774381327, "uuid": "8a7bb726-27b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.55.137:44166/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774381327, "uuid": "8ab96f93-27b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.80.107.114:42547/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774381329, "uuid": "8bb5ba36-27b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://traceglo.cl0verrun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774381334, "uuid": "8eee3dfa-27b9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.146.241:52917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774381633, "uuid": "412f68f7-27ba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.81.219:35431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774381687, "uuid": "61063ec2-27ba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.174:53011/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774381809, "uuid": "aa3d0815-27ba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://1vyf96o.cl0verrun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774381931, "uuid": "f27f6bb6-27ba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.41.227:55381/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774381988, "uuid": "146a93c9-27bb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.77.164:43810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774382346, "uuid": "e9f47d5a-27bb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ser-draos.cl0verrun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774382526, "uuid": "555684be-27bc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.62.174:38495/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774382647, "uuid": "9daef3ac-27bc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://51ogg4fa.cl0verrun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774382654, "uuid": "a1f29e42-27bc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.146.241:52917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774382716, "uuid": "c65a05e5-27bc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.215.248:51659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774382716, "uuid": "c6977098-27bc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.25.183:34406/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774383008, "uuid": "7468c815-27bd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkforge8os.velvet-dune.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774383252, "uuid": "064ca097-27be-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fyuu.tr4cefox.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774383315, "uuid": "2b98c417-27be-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.123.251:39577/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774383384, "uuid": "54a57068-27be-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.117.148.118:38816/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774383666, "uuid": "fd28ff2a-27be-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://lypl54.mirthbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774383731, "uuid": "23deed63-27bf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.76.55:54474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774383966, "uuid": "affb1d59-27bf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tensorout.cobalt-ridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774384153, "uuid": "1f3d9e8f-27c0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.25.183:34406/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774384328, "uuid": "877b6d13-27c0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ovdtt.larkspin.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774384332, "uuid": "89d08644-27c0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.252.2:46768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774384510, "uuid": "f3c3b0cd-27c0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://lmwfj4.brimvale.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774385228, "uuid": "a027fc95-27c2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://j3b873.duskforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774385479, "uuid": "35b7d5ac-27c3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.91.18:49869/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774385655, "uuid": "9e64ac86-27c3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:53286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774385770, "uuid": "e2fbb4a9-27c3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://4qaxpshj.flare-path.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774385827, "uuid": "0518deba-27c4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.51:57980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774385893, "uuid": "2c5afc73-27c4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.252.2:46768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774386009, "uuid": "71a25e7a-27c4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://coralmotif.graincrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774386307, "uuid": "22d3570d-27c5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://grid-mesh.thistlecore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774386609, "uuid": "d6ebbede-27c5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1sync.crustaceanode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774386734, "uuid": "2170fe24-27c6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.96.210:35684/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774386846, "uuid": "6479c4d3-27c6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2data.crustaceanode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774387268, "uuid": "5f89ab52-27c7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3edge.crustaceanode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774387338, "uuid": "894d52d1-27c7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.51:57980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774387338, "uuid": "89c047c6-27c7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.30.21:39607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774387452, "uuid": "cdbe8ce4-27c7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.160.130.109:49808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774387567, "uuid": "11c8c792-27c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4static.crustaceanode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774387697, "uuid": "5f9bc1a2-27c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.175.5:43529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774387927, "uuid": "e894681d-27c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1meta.molluskflowlink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774387936, "uuid": "ee08c714-27c8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.166.206.245:41126/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774388054, "uuid": "342cd653-27c9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.53:46783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774388068, "uuid": "3cafa105-27c9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.74.214:34669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774388226, "uuid": "9afddc5b-27c9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2proc.molluskflowlink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774388473, "uuid": "2e46ca00-27ca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.25.80:39758/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774388645, "uuid": "94de1e63-27ca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3gate.molluskflowlink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774388708, "uuid": "ba1aec6b-27ca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.53:46783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774388886, "uuid": "244682ac-27cb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4sync.molluskflowlink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774389307, "uuid": "1f419222-27cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl1store.echinodermgate.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774389310, "uuid": "20b49b65-27cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.242.135:42025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774389373, "uuid": "4692eceb-27cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.25.80:39758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774389726, "uuid": "18f9f368-27cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.209.70:33229/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774389797, "uuid": "4324d45e-27cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.187.141:53899/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774389848, "uuid": "61ed7698-27cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl2remote.echinodermgate.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774389849, "uuid": "61f922d6-27cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.196.225:43830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774389989, "uuid": "b5b9f543-27cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.101.73:33959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774390087, "uuid": "efe56a1a-27cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl3dev.echinodermgate.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774390268, "uuid": "5bd537f9-27ce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl4link.echinodermgate.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774390514, "uuid": "ee512be9-27ce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.187.141:53899/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774390638, "uuid": "386b39ae-27cf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.149.14:40270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774390869, "uuid": "c24c03d8-27cf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev1proc.annelidatrace.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774390996, "uuid": "0d99f0c4-27d0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.30.21:39607/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774391047, "uuid": "2c08a402-27d0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev2power.annelidatrace.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774391226, "uuid": "97125489-27d0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.86.36:44066/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774391289, "uuid": "bc90cd66-27d0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev3local.annelidatrace.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774391590, "uuid": "6faf63de-27d1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev4work.annelidatrace.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774391948, "uuid": "45150b1a-27d2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1infra.arthropodameta.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774391948, "uuid": "4526b816-27d2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.160.127.168:50205/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774392245, "uuid": "f6967d1a-27d2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2base.arthropodameta.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774392253, "uuid": "fae58070-27d2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.160.127.168:50205/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774392426, "uuid": "628892dc-27d3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.41.102:51238/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774392428, "uuid": "63610552-27d3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.191.119:52915/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774392910, "uuid": "82e2cd92-27d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3user.arthropodameta.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774393086, "uuid": "ebe4bc20-27d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4link.arthropodameta.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774393447, "uuid": "c309c24e-27d5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1proc.poriferabuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774393517, "uuid": "ec52912e-27d5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.88.154:59902/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774393686, "uuid": "51892ae0-27d6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2core.poriferabuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774393926, "uuid": "e09769b8-27d6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.112.43:40819/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774394110, "uuid": "4dd74999-27d7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3ghost.poriferabuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774394286, "uuid": "b6ced5a6-27d7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.90:58120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774394409, "uuid": "ffee9c95-27d7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4view.poriferabuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774394833, "uuid": "fd333c64-27d8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.164.254:60781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774395069, "uuid": "89dc6796-27d9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl1proc.bryozoametrics.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774395127, "uuid": "ac39c4fa-27d9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.112.43:40819/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774395187, "uuid": "d02a9789-27d9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl2point.bryozoametrics.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774395425, "uuid": "5e0933ad-27da-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.239.111:38935/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774395428, "uuid": "5fa1440b-27da-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl3view.bryozoametrics.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774395726, "uuid": "116c1b80-27db-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.111:45225/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774396028, "uuid": "c541f406-27db-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl4path.bryozoametrics.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774396210, "uuid": "31e931a1-27dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev1proc.platyhelminth.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774396387, "uuid": "9b115e5b-27dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev2outer.platyhelminth.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774396507, "uuid": "e281840d-27dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.13:53307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774396580, "uuid": "0e164174-27dd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.248.121.149:58539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774396693, "uuid": "5155aa6e-27dd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.90:58120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774396693, "uuid": "51640430-27dd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.164.254:60781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774320064, "uuid": "e758e3e8-272a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.224.75.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774394824, "uuid": "f7d974a0-27d8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.164.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774316405, "uuid": "625b3ac0-2722-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.136.50.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366445, "uuid": "e41567b6-2796-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.251.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774378444, "uuid": "d47a9735-27b2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.76.225.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774389964, "uuid": "a6b451d5-27cd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.101.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774359184, "uuid": "fcb99b1a-2785-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.240.231.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774361284, "uuid": "e02fadf8-278a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.61.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774347484, "uuid": "be94f9b1-276a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.186.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774360025, "uuid": "f18d4db1-2787-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.59.174", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774372805, "uuid": "b332400b-27a5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.96.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774310525, "uuid": "b12d164d-2714-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.228.50", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346644, "uuid": "ca1b2ced-2768-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.251.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774339744, "uuid": "b997f40d-2758-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.239.99.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774353244, "uuid": "28295b4e-2778-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.134.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325464, "uuid": "7a01023c-2737-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.147.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774355106, "uuid": "7d95839e-277c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.4.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774349524, "uuid": "7ee51d5c-276f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.1.54", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774350605, "uuid": "02f3448d-2772-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.222.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774374244, "uuid": "0caf17da-27a9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.65.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774316405, "uuid": "625b5286-2722-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.146.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366624, "uuid": "4ef6af3a-2797-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.242.68", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774314784, "uuid": "9c0f8840-271e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.58.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344004, "uuid": "a4632dd7-2762-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.173.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774388464, "uuid": "289530cf-27ca-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.25.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774374424, "uuid": "783075a2-27a9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.159.171", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774378205, "uuid": "45c69b4f-27b2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.148.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774357505, "uuid": "13a569df-2782-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.189.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774378924, "uuid": "f250ca1c-27b3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.55.137", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774310944, "uuid": "ab049263-2715-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.140.9.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774396564, "uuid": "04dbc58e-27dd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.248.121.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774358525, "uuid": "73830928-2784-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.123.60", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327744, "uuid": "c8ee53ac-273c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.237.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774312324, "uuid": "e1d1118d-2718-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.167.197", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774312025, "uuid": "2f482154-2718-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.67.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774320425, "uuid": "be43ea32-272b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.165.146", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323006, "uuid": "c09074d6-2731-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.84.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774378624, "uuid": "3f663a9c-27b3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.9.166", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774370224, "uuid": "b0c71181-279f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.91.122", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343165, "uuid": "b02cebbb-2760-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.48.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774321684, "uuid": "acd74708-272e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.57.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774348744, "uuid": "ad9cebe8-276d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.67.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774380425, "uuid": "70fa1fa1-27b7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.81.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327624, "uuid": "815f4058-273c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.103.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774322406, "uuid": "5b507607-2730-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.74.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774388044, "uuid": "2e90e837-27c9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.74.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774387924, "uuid": "e7075494-27c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.166.206.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774339624, "uuid": "71c4bf24-2758-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.142.38", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774324144, "uuid": "66cac29d-2734-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.14.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774338784, "uuid": "7d00ce64-2756-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.234.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774390624, "uuid": "303b8ddb-27cf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.149.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774368485, "uuid": "a41c0fb8-279b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.112.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774331525, "uuid": "96248dc7-2745-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.8.207", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337464, "uuid": "6a2157fd-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.198.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774382705, "uuid": "c004fbb9-27bc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.25.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325464, "uuid": "79feeacf-2737-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.135.33.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346164, "uuid": "ac0c8801-2767-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.139.118", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774391224, "uuid": "95a50ff9-27d0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.86.36", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774342624, "uuid": "6dcf3e01-275f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.247.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774313825, "uuid": "601b0538-271c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.81.141", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774378205, "uuid": "45c663a4-27b2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.76.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774336265, "uuid": "9f86d23c-2750-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.101.85", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774336265, "uuid": "9f8457fc-2750-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.98.149", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366325, "uuid": "9cd5a720-2796-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.112.172.102", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774321624, "uuid": "8916849d-272e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.153.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774391944, "uuid": "4313ce15-27d2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.160.127.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774369685, "uuid": "6f674ccd-279e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.81.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774339445, "uuid": "06fa93d7-2758-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.168.18.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774355106, "uuid": "7d957583-277c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.44.158.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774316524, "uuid": "a8f18990-2722-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.132.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774350006, "uuid": "9dab889c-2770-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.245.60.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332485, "uuid": "d2913742-2747-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.49.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774318564, "uuid": "691974d6-2727-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.89.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774321084, "uuid": "47337b38-272d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.13.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774313405, "uuid": "664f7bfd-271b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.115.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774345925, "uuid": "1d4f018d-2767-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.102.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332125, "uuid": "fbe22800-2746-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.220.207", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774314425, "uuid": "c5dab3c9-271d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.235.62.104", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344784, "uuid": "756fba7b-2764-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.210.186.220", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366445, "uuid": "e4160700-2796-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.32.162.53", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774371605, "uuid": "e80dbd37-27a2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "1ce2-port.frost-echo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774381806, "uuid": "a81e83a0-27ba-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "1vyf96o.cl0verrun.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774378805, "uuid": "abbdf785-27b3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.106.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774319225, "uuid": "f2c306b9-2728-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.24.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774330324, "uuid": "cad05bef-2742-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.179.185", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774378564, "uuid": "1c220073-27b3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.188.220.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774345984, "uuid": "40e04d97-2767-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.0.209.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774311424, "uuid": "c933a5cc-2716-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.8.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774362424, "uuid": "87c8276d-278d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.200.120.62", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774387684, "uuid": "5802d325-27c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.134.175.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774349524, "uuid": "7ee54f38-276f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.22.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774381924, "uuid": "eeaf18d6-27ba-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.41.227", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774361825, "uuid": "229a2abb-278c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.156.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325464, "uuid": "7a0d84b0-2737-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.201.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774364285, "uuid": "dcd5576b-2791-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.38.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774368125, "uuid": "cdb8c9ac-279a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.212.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774381325, "uuid": "894a561b-27b9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.80.107.114", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774373643, "uuid": "a6e8aaa0-27a7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.216.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774387325, "uuid": "81aa543e-27c7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.30.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774358944, "uuid": "6d67b29d-2785-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.64.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774372324, "uuid": "949a4732-27a4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.129.10", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774363625, "uuid": "53404584-2790-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.176.4", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774389845, "uuid": "5fca46af-27cd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.196.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774381325, "uuid": "894aa54d-27b9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.146.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774347484, "uuid": "be94eb68-276a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.73.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774323965, "uuid": "fc6c9c8b-2733-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.151.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774357024, "uuid": "f4c787e1-2780-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.169.132", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774374784, "uuid": "4e7f26ee-27aa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.8.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774352225, "uuid": "c87d02f8-2775-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.24.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774336505, "uuid": "2ef48740-2751-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.249.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774372084, "uuid": "057f35e2-27a4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.155.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774328406, "uuid": "535138a2-273e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.160.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774360265, "uuid": "80b1ac05-2788-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.167.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774342745, "uuid": "b5c6b730-275f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.74.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366865, "uuid": "de836736-2797-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.139.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774320425, "uuid": "be43edb1-272b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.182.166", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774366445, "uuid": "e4163316-2796-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.138.180.205", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343885, "uuid": "5d7192ad-2762-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.156.87.230", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774342325, "uuid": "bbf58aae-275e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.225.135.61", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774336265, "uuid": "9f836749-2750-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.61.149.150", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774385765, "uuid": "dff4d6f1-27c3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "4qaxpshj.flare-path.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774382643, "uuid": "9b22b755-27bc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "51ogg4fa.cl0verrun.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774326064, "uuid": "df60081f-2738-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.209.181.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774371724, "uuid": "2eeca602-27a3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.107.240", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774313044, "uuid": "8f1761ae-271a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.166.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774392424, "uuid": "6135b827-27d3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.191.119", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774328884, "uuid": "700995e6-273f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.241.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774389784, "uuid": "3b7da09b-27cd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.187.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774359845, "uuid": "86307ad2-2787-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.71.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774375384, "uuid": "b42c2389-27ab-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.85.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774328224, "uuid": "e716ee3a-273d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.92.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774325525, "uuid": "9de56753-2737-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.141.99", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774384324, "uuid": "850ce8d0-27c0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.252.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774379106, "uuid": "5ebcc044-27b4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5cript-branch.stone-blink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344007, "uuid": "a61750df-2762-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5h1f-grid.tr4cefox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774372924, "uuid": "fa23b18c-27a5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5jiyuz.frost-echo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774360925, "uuid": "0a083837-278a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5un-line.duskforge.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774361525, "uuid": "6f96b9a9-278b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.211.4.226", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774375324, "uuid": "907856b9-27ab-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.160.178", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774327084, "uuid": "3f9753ab-273b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.193.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774393505, "uuid": "e58fd080-27d5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.88.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774380124, "uuid": "bdd4b620-27b6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.123.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774372624, "uuid": "478b17bb-27a5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.132.159", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774348624, "uuid": "664f99c6-276d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "72i62f.cobalt-ridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774377664, "uuid": "03a9c220-27b1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "75rlme.thistlecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774347665, "uuid": "2ae3afe1-276b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "77gfk.mirthbay.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774379824, "uuid": "0abaeb7c-27b6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.117.148.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774349944, "uuid": "7938f931-2770-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "a5say-spool.cobalt-ridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774362906, "uuid": "a6c6b8a2-278e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "activetermin.rivermint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774338784, "uuid": "7d25b908-2756-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "adderall.rocks" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774369206, "uuid": "51cf77b5-279d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "aetherixcore.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774355885, "uuid": "4e24493a-277e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-ech0.n1mbleoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774383005, "uuid": "72b87ac1-27bd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkforge8os.velvet-dune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774315024, "uuid": "2aee9874-271f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "avk93cqg.ironhub.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774355524, "uuid": "76e63250-277d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "catalogsca.n1mbleoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774336207, "uuid": "7d5f23a1-2750-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "chinasite.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774395065, "uuid": "870cf7f2-27d9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl1proc.bryozoametrics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774336265, "uuid": "9f9f13d0-2750-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl1proc.tarsusdatagate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774318924, "uuid": "3fce77fe-2728-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl1store.chrysalisbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774389305, "uuid": "1e2e62bc-27cc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl1store.echinodermgate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774314844, "uuid": "bfed640d-271e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl1sync.inertialstreamhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774315206, "uuid": "9789f649-271f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl2data.inertialstreamhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774395185, "uuid": "ce8cccfd-27d9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl2point.bryozoametrics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774336745, "uuid": "bdabd03d-2751-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl2point.tarsusdatagate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774319164, "uuid": "cec34bac-2728-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl2remote.chrysalisbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774389845, "uuid": "5fd3382b-27cd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl2remote.echinodermgate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774328105, "uuid": "9fd977d2-273d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl3dev.chrysalisbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774390084, "uuid": "ee8a3967-27cd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl3dev.echinodermgate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774315563, "uuid": "6c740cbe-2720-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl3edge.inertialstreamhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774395425, "uuid": "5d88777d-27da-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl3view.bryozoametrics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337407, "uuid": "484386aa-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl3view.tarsusdatagate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774390266, "uuid": "5ab32419-27ce-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl4link.echinodermgate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774396024, "uuid": "c2f370ef-27db-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl4path.bryozoametrics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774310405, "uuid": "69dbae10-2714-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl4path.kineticmatrixduct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774337584, "uuid": "b1d52e37-2753-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl4path.tarsusdatagate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774315864, "uuid": "2006d02b-2721-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl4static.inertialstreamhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774364709, "uuid": "d964fff3-2792-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "convoyprofit.flare-path.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774386006, "uuid": "6f94b5c2-27c4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "coralmotif.graincrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343590, "uuid": "ad7d74e3-2761-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dcq3oaq.velvet-dune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774390866, "uuid": "c0665739-27cf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev1proc.annelidatrace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774310763, "uuid": "3f78a34b-2715-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev1proc.atomiclogichub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774331105, "uuid": "9c5e9eb3-2744-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev1proc.elytrapointnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774338784, "uuid": "7d111f2a-2756-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev1proc.ovipositortrace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774396205, "uuid": "2ed2d3e0-27dc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev1proc.platyhelminth.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774311124, "uuid": "16b6452c-2716-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev2outer.atomiclogichub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774338784, "uuid": "7d11d006-2756-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev2outer.ovipositortrace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774396384, "uuid": "99647751-27dc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev2outer.platyhelminth.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774391044, "uuid": "2aa8cc98-27d0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev2power.annelidatrace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774331345, "uuid": "2ae3ccd7-2745-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev2power.elytrapointnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774311426, "uuid": "ca6f67d3-2716-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev3field.atomiclogichub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774338965, "uuid": "e8b8e2e6-2756-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev3field.ovipositortrace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774391285, "uuid": "b9e20e49-27d0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev3local.annelidatrace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774331885, "uuid": "6d163c99-2746-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev3local.elytrapointnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774311784, "uuid": "9fabe393-2717-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev4space.atomiclogichub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774339505, "uuid": "2b054845-2758-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev4space.ovipositortrace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774391585, "uuid": "6ccfb422-27d1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev4work.annelidatrace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332064, "uuid": "d7f6c4c3-2746-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev4work.elytrapointnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774342684, "uuid": "91fa087f-275f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "e5754.velvet-dune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774370644, "uuid": "ab0c0982-27a0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ehqkl.graincrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774340645, "uuid": "d238d1e8-275a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "enotbanknoti.co" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774313469, "uuid": "8c3e1f52-271b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1infra.fractalrelaypoint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774317484, "uuid": "e51444f9-2724-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1meta.mandibulateflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774387924, "uuid": "e713e6a8-27c8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1meta.molluskflowlink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774393444, "uuid": "c0c20948-27d5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1proc.poriferabuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774393684, "uuid": "4fdef180-27d6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2core.poriferabuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774335005, "uuid": "b08404d4-274d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2core.spiraclelinkhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774317844, "uuid": "bbb559ce-2725-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2proc.mandibulateflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774388224, "uuid": "99e3ba14-27c9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2proc.molluskflowlink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774313765, "uuid": "3c896703-271c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2proxy.fractalrelaypoint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774314124, "uuid": "127f5aeb-271d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3data.fractalrelaypoint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774318205, "uuid": "93138722-2726-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3gate.mandibulateflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774388644, "uuid": "93f7901d-27ca-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3gate.molluskflowlink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774394105, "uuid": "4b0d65ac-27d7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3ghost.poriferabuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774314484, "uuid": "e96939bd-271d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4point.fractalrelaypoint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774318506, "uuid": "4658ad2b-2727-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4sync.mandibulateflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774388884, "uuid": "231f1995-27cb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4sync.molluskflowlink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774394405, "uuid": "fdf21403-27d7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4view.poriferabuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774335968, "uuid": "eeeff495-274f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4view.spiraclelinkhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774356845, "uuid": "8a12d086-2780-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "freig-vault.n1mbleoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774380484, "uuid": "9468df49-27b7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fwnc6xm.stone-blink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774383245, "uuid": "01afdf8b-27be-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fyuu.tr4cefox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774378084, "uuid": "fde7adbe-27b1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gmabpncp.thistlecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774342145, "uuid": "50632d04-275e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "golde-loose.velvet-dune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774386304, "uuid": "2155297f-27c5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "grid-mesh.thistlecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774376465, "uuid": "38b9adac-27ae-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hvxpnc.thistlecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774363805, "uuid": "befa9457-2790-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "iatw.rivermint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774361706, "uuid": "db6722b6-278b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ikqeopdh.duskforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774350484, "uuid": "bae9556e-2771-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "iumdbd.cobalt-ridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774385224, "uuid": "9d684ba5-27c2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "j3b873.duskforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774368365, "uuid": "5c848c6e-279b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "jjgeingz.skyl0om.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774341726, "uuid": "566da986-275d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kerneldelive.velvet-dune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774378624, "uuid": "3f74bd1f-27b3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "knjecym.stone-blink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774353665, "uuid": "22a872d4-2779-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kotg.brimvale.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774369325, "uuid": "9935ec7e-279d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kzreic.graincrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774372085, "uuid": "05f5527f-27a4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "light1-scope.frost-echo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774384446, "uuid": "cdda598d-27c0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "lmwfj4.brimvale.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774383664, "uuid": "fbde3844-27be-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "lypl54.mirthbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774359544, "uuid": "d33fde55-2786-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "majorpeak.hollow-spark.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774380006, "uuid": "775291c4-27b6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mercrest3on.stone-blink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774375324, "uuid": "9086d2e4-27ab-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "merlineon6.q7ravo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774355045, "uuid": "59905602-277c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "messteady.brimvale.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774358163, "uuid": "9c18c691-2783-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mosssou.hollow-spark.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344845, "uuid": "9987da28-2764-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "myjezworld.kesug.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774353185, "uuid": "050f8780-2778-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "n0tif-beam.brimvale.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774354084, "uuid": "1cdff3ca-277a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-th0rn.brimvale.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774377245, "uuid": "097dcd7a-27b0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "neur0n-forge.thistlecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774371183, "uuid": "ecade5e8-27a1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node-track.graincrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774376824, "uuid": "0eb3fa52-27af-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nordraum7.thistlecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774367945, "uuid": "626b37b1-279a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "norven5ar.skyl0om.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774360027, "uuid": "f2eff9cf-2787-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nr7808j.duskforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774365185, "uuid": "f5554df1-2793-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "o3hpy.flare-path.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774362005, "uuid": "8df7ed3c-278c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "offerleaf.duskforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774384324, "uuid": "85169b62-27c0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ovdtt.larkspin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774364285, "uuid": "dcdfacf6-2791-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "parcloud.rivermint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774348144, "uuid": "483eea1a-276c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "phopatt.mirthbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774362424, "uuid": "87e18e9f-278d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pitc-mesh.rivermint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774379464, "uuid": "3411caf2-27b5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "podcastridg.stone-blink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774375686, "uuid": "687d7775-27ac-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pricehub.q7ravo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344544, "uuid": "e67f1733-2763-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "qaur150.tr4cefox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774363447, "uuid": "e9443ffe-278f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "qn5igmm.rivermint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774349106, "uuid": "857d1d1d-276e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "qu4nt-point.cobalt-ridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774370165, "uuid": "8d6b79ef-279f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "r0ut-route.graincrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774358648, "uuid": "bcdb2a7f-2784-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rich-stabi.hollow-spark.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774374784, "uuid": "4e902328-27aa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rjl2hgy.q7ravo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774360445, "uuid": "ebe7a550-2788-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rnedia-field.duskforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774352524, "uuid": "7aef40c9-2776-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "roufor.larkspin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774344965, "uuid": "e1172a11-2764-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ruoqyu9r.tr4cefox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774345386, "uuid": "dbff7678-2765-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "s1ovv-cast.tr4cefox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774357805, "uuid": "c69352a3-2782-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "saifjord.hollow-spark.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774382344, "uuid": "e8b88318-27bb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ser-draos.cl0verrun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774365605, "uuid": "efd903dc-2794-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "shore-dee.flare-path.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774352706, "uuid": "e739d75a-2776-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "shoremerge.larkspin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774369744, "uuid": "92df101d-279e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sol-nexex.graincrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774372505, "uuid": "005a73d1-27a5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solcrestor8.frost-echo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774367644, "uuid": "af4ea901-2799-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ste4dy0-graph.skyl0om.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774374364, "uuid": "54789f55-27a9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "steri-node.q7ravo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774347185, "uuid": "0c79ee45-276a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-t3rnpo.mirthbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774391944, "uuid": "431bcacc-27d2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1infra.arthropodameta.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774332906, "uuid": "cdb08f58-2748-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1infra.scutellummatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774339924, "uuid": "24a83770-2759-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1proc.exuviaestreamnet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774312085, "uuid": "5329dcb7-2718-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1proc.viscositydataloop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774386606, "uuid": "d5360de1-27c5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1sync.crustaceanode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774316105, "uuid": "af953164-2721-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1sync.formicidavortex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774392244, "uuid": "f5968049-27d2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2base.arthropodameta.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774333084, "uuid": "379d7aae-2749-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2base.scutellummatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774386844, "uuid": "635cf35a-27c6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2data.crustaceanode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774316524, "uuid": "a9054046-2722-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2data.formicidavortex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774340406, "uuid": "43bb9d88-275a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2steel.exuviaestreamnet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774312444, "uuid": "29671332-2719-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2steel.viscositydataloop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774340825, "uuid": "3d732b02-275b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3core.exuviaestreamnet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774312744, "uuid": "dc4c1e49-2719-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3core.viscositydataloop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774387265, "uuid": "5dcc37eb-27c7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3edge.crustaceanode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774316764, "uuid": "3811957a-2723-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3edge.formicidavortex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774392905, "uuid": "800a3791-27d4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3user.arthropodameta.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774333505, "uuid": "327278f5-274a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3user.scutellummatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774393084, "uuid": "ea43f2cc-27d4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4link.arthropodameta.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774333925, "uuid": "2cc3165c-274b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4link.scutellummatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774341249, "uuid": "3a1ead39-275c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4sat.exuviaestreamnet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774313165, "uuid": "d6beba5d-271a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4sat.viscositydataloop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774387505, "uuid": "ed16bbea-27c7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4static.crustaceanode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774317184, "uuid": "32930923-2724-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4static.formicidavortex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774349524, "uuid": "7ef2e338-276f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "t0k3n0-drive.cobalt-ridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774351325, "uuid": "aff0400f-2773-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tarcanv.larkspin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774383964, "uuid": "aea5f136-27bf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tensorout.cobalt-ridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774381325, "uuid": "8959cfaf-27b9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "traceglo.cl0verrun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774357264, "uuid": "83e4f1bf-2781-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tri-coreon.n1mbleoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346824, "uuid": "35904564-2769-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultrdra.mirthbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774356425, "uuid": "8fd2d22a-277f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "urb4n-frame.n1mbleoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774373464, "uuid": "3c189243-27a7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vel-lineix.frost-echo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774368845, "uuid": "7ab9b53e-279c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vendorshadow.skyl0om.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774381205, "uuid": "42298b4e-27b9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vinetrade.cl0verrun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774343106, "uuid": "8d1a251c-2760-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "voiceamp.velvet-dune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774359064, "uuid": "b4a4613e-2785-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vor-lithum.hollow-spark.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774345864, "uuid": "f9047697-2766-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vqdph.tr4cefox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774354563, "uuid": "3a0fb2ae-277b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "w346.brimvale.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774346345, "uuid": "17ddf654-2768-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "watchletter.mirthbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774373885, "uuid": "36e889b1-27a8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "winterpipeline.q7ravo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774336205, "uuid": "7c1dbf3a-2750-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.shrtx.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774351806, "uuid": "cea320cd-2774-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "yci9.larkspin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774350905, "uuid": "b5d8d69e-2772-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zennexen.larkspin.in.net" } ] } }