{ "Event": { "published": true, "date": "2026-02-26", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-26", "timestamp": 1772151325, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "dee0b8ec-8c80-4bfb-80cc-d55347832938", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1772064318, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064318, "uuid": "19f565ba-bbe9-4577-9d7f-23c2aa35df71", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064318, "uuid": "a91d18ac-5247-46d6-8fea-fffc8d0ffba4", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064318, "uuid": "eff5f8d7-be93-4fd1-9dbb-c144335ee9d9", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064318, "uuid": "bc863035-0d08-4390-8240-701243c47af0", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772064318, "uuid": "08e68252-a91b-40e5-8c1b-a190f47cbfcb", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83179eda-12a7-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772064609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064609, "uuid": "94228c63-9042-4099-aece-d91b5862e19d", "comment": "Malware payload", "value": "56923a4f1c15e03d62df2ea12840ff6b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064609, "uuid": "f848ff48-1d76-49fc-96d6-4e1fc7111004", "comment": "Malware payload", "value": "54af78839c351f7419442698fe3c48757e9fe2ddc98f56b0c3ec099a1b393a59", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064609, "uuid": "16fd4ad2-7d98-447d-a791-df59887cc316", "value": "T199A423A35293A2D7ABA19F74E40D93D1E2CFCB0D3D9AD2F423B6F904F6651C944484", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064609, "uuid": "1eeee6bd-b742-4efe-9071-c9b1d3195a44", "value": "12288:B1TGoqqMj4uEU521RIfMiZ5d6JfLGsjukmtrYFY:B1TGoOjr2EfMiZGqtcFY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772064609, "uuid": "f8dfa776-f4a6-462d-9b41-6becad7fe4e9", "value": 491961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064609, "uuid": "5892c144-a312-4f39-ae1f-c5c9690f5319", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772064670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064670, "uuid": "8f6f5672-11eb-47b3-bb5e-e8cda45eeb37", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064670, "uuid": "800942dd-09f4-41f7-9d5d-072ae06dcd0d", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064670, "uuid": "f2e6e8b3-ef60-46de-9f5f-0841c5b17110", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064670, "uuid": "c7072f6b-68dd-4a22-b72a-f3bb5b791619", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772064670, "uuid": "35ffbe12-100a-47bf-8a1f-f4f907630485", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9a773fc-12a7-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772064727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064727, "uuid": "63131155-179e-457b-841e-d31877825625", "comment": "Malware payload", "value": "9145ad827ee7951052ec94faf8f8d266", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064727, "uuid": "ec35ed7a-15cb-4e75-8c49-39a2d699094a", "comment": "Malware payload", "value": "2868ed13ec5af26c1ecffeaeddad4739a236cf7af4595ade3c054866cf047750", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064727, "uuid": "e76abc6a-3c32-4cc1-8c29-5fc183b836ca", "value": "T11F553387817C14848F7D07677BFFD46C62248EFC200608261B6A189B693F79FC6B59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064727, "uuid": "5b3e8eca-d96e-41fe-bf69-48877bd48f50", "value": "24576:semeYTqfYFoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaR7:seVwqwFoZ9bq+MmMEL+hcjXHC/wnwd7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772064727, "uuid": "fe575b4e-a21f-4fe2-a510-05e7ca2084b3", "value": 1388883, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064727, "uuid": "d03414ab-5638-4974-90e5-f4eee9a74f0a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "106ebb73-12a8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772064846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064846, "uuid": "874dbc18-b9f1-44e4-8237-08bfb03cc4a2", "comment": "Malware payload", "value": "4c60de36354fe2bdc765f67771923cb8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064846, "uuid": "85f9a729-48a1-4cae-be72-9963574e5012", "comment": "Malware payload", "value": "47fbcc6c772b345f8f526c64301b20d23c5a5c73da7643f1c8f773cb8ced56f3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064846, "uuid": "266e85e5-6cd5-4907-8aa2-b66003c36560", "value": "T103B423CCB6C788CC55A63134E6A20B4194DBBF33B2DF7391B5B849700DE6A6710297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064846, "uuid": "2302bb61-bb9a-4319-a360-224792524de8", "value": "12288:xwsK8MG1KnyC/G76u6M0gXar5qduRct2ien3P+beh:/KGcGmuwjJQen3Pw8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772064846, "uuid": "50e48c98-dd86-4298-ba31-45b067762a9d", "value": 515391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064846, "uuid": "014550e9-d952-4707-9708-3de89ce42b59", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f791ab3-12a8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772065086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065086, "uuid": "1a26719b-525a-4b45-b291-3633238814f1", "comment": "Malware payload", "value": "56428efd8d7e281c6e8e77f90dc55698", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065086, "uuid": "d0d6cd21-34ba-493f-b733-7261ed248dda", "comment": "Malware payload", "value": "566966b280e656225f16f9ac6bf5c2079f7b522f91156d861abc697078ad291e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065086, "uuid": "209467d3-38e1-464f-82be-14eef5462567", "value": "T119C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065086, "uuid": "720300a7-3ff6-4275-8cd4-1e6ff5f51d22", "value": "12288:syBXIs7rM1kcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5o:RImQ1EEA/f0Za6TCXKBxeu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772065086, "uuid": "9742e735-3b98-4b34-93b6-f33ef9335fdc", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065086, "uuid": "78a23263-8498-4ae1-861d-71eb00aabf8d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d325906-12a9-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772065270, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065270, "uuid": "ae8ce6ef-0de7-4871-adcb-06f0aba59f36", "comment": "Malware payload", "value": "7d29da1f4b3bc02a215353fab54c634f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065270, "uuid": "4d6455f5-2b1c-49ad-92cf-47fd5825bae3", "comment": "Malware payload", "value": "398f3103e7e93c0c3fedbc22a25e86462a0131b67e375c0553cad207fe6fbc1d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065270, "uuid": "ff6ea773-f67b-457c-8073-e8eb59046d91", "value": "T13BC42367226F72500DFE92ED4E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065270, "uuid": "f67cc80d-d482-4435-a445-87780ab2adb9", "value": "12288:IeCEht49qO3g/ALyYG0ZaDajTCXMO8xzDOeQakw:/tiA/f0Za6TCXKBxlf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772065270, "uuid": "f46eddc1-f073-4b95-b3dc-c9dbab24c8cf", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065270, "uuid": "a37a5cbc-3edd-4e56-842e-41fdc7632431", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06420764-12aa-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772065688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065688, "uuid": "8c326201-ce49-43fd-92a8-4ca7c1296951", "comment": "Malware payload", "value": "5dec750945c1388173aa09fa6d73073d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065688, "uuid": "2bf5d804-f73c-4465-9824-41f15f77a3e4", "comment": "Malware payload", "value": "df1821e2f1147188ba3d1c99ed95a4788950537e54baf1fb21382a0aa1dc57e6", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065688, "uuid": "421bb7cb-831e-4395-9d34-4abe372d9a15", "value": "T11CB42369227F71900C7543A84B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065688, "uuid": "f2c1191e-a8d3-4b86-b003-cd5aa7d1858f", "value": "12288:P7JZAaFpeoqO3g/ALyYG0ZaDajTCXMO8xzDOe3WC:fLpeyA/f0Za6TCXKBxmC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772065688, "uuid": "abe4b5f7-afb9-4f8f-9293-56018175a1e0", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065688, "uuid": "1757c578-a05d-4555-88c4-b82792a1fda6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7048fd13-12aa-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772065866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065866, "uuid": "134ff70d-9f9b-4b90-a58e-6232b8c4a53b", "comment": "Malware payload", "value": "86744d749a74c91296863af57f11fa95", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065866, "uuid": "cae9706b-c737-4c4e-9f1d-5636bc785086", "comment": "Malware payload", "value": "44711204c86a690dd7f6f7cfba98032f916d6a5b366f2caf9419c6defe73c975", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065866, "uuid": "0e80f4c4-0253-46e7-b55d-ebd34f8a0cf8", "value": "T15EB4231EF4D078CFD68ACDA394292C785F6C96C9CD126B7246C4EE9312442F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065866, "uuid": "1644643a-1e83-4151-8c6e-4e8e28f5979b", "value": "12288:hTibgSMFBOBSlqr+Ku7FxPbzJTVBU+8JM9hAC8Z3JVOBRkbKQDiUbpK+:ocSMFYAKkxpTKJM9mCw3JVOMWAPbpl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772065866, "uuid": "b7eadd06-252f-4849-8ecb-64519aa8d484", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065866, "uuid": "d767846b-9490-438a-b6b0-e06eb685174b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "303a97ce-1237-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772065986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065986, "uuid": "139c3da4-156f-491b-872a-73efd888622e", "comment": "Malware payload", "value": "b6570ba8935a9a4f0e83a40880a857cd", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065986, "uuid": "962891a3-8a3f-4c58-9031-ecba844a2a3a", "comment": "Malware payload", "value": "2d92df6beff6ccdb68272adedc1673ea12c1a19efecb77a16f9161ecda56ae8b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065986, "uuid": "523e3d43-e564-42b6-8714-9f77c4ec18de", "value": "T18EC4D9B46204B8C0D46EAB729C74BFA8A13E11B59FCE3ECC1194BAD01FA37557A0D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065986, "uuid": "4796bbae-ef3f-45f6-b12c-5a56fc964a73", "value": "6144:ACHu6h+VH6n4WACNXYPSNu2XrwsYVPUrT7CompdR36Ue8kTCExan/lOH:ACu6cU4WfBdyPUqpyylO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772065986, "uuid": "52cd273f-3f1c-4b15-ae58-7a4c6925a323", "value": 594222, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065986, "uuid": "c2ea047a-854c-4ea6-9d8b-b9a3c58fa33c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46f0d56f-12ab-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772066226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772066226, "uuid": "3744d679-9f69-4ee3-bdd3-aea158365edf", "comment": "Malware payload", "value": "96786d469426a49bcdd31eb0037126e3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772066226, "uuid": "5e95ed3e-dcd9-4d9f-9c97-01d2c61cf839", "comment": "Malware payload", "value": "f5805b4416e24896745a81f7dae1484b58b65211c68572014cd82f71f39ba635", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772066226, "uuid": "def7dcfa-c731-4a73-b76b-b209b49a2559", "value": "T15455338AC17C1CC49F3E0A9379FF555CA2248EFC200208636B6A59A7253E74FC7B59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772066226, "uuid": "0d8be4c5-af0b-4899-b88c-5196d11044bf", "value": "24576:2PTJsZg557oZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRv:2bJZ57oZ9bq+MmMEL+hcjXHC/wnwdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772066226, "uuid": "0a5da03b-d868-448f-a48e-ecf00c4d2fa6", "value": 1381613, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772066226, "uuid": "15e3aa11-390f-4b8f-921e-994a58457098", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac7c8747-12ac-11f1-8369-82aee05be84a", "comment": "Malware payload (XWorm)", "timestamp": 1772066826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772066826, "uuid": "7be01666-b21c-4c13-96c8-98b8026915d3", "comment": "Malware payload (XWorm)", "value": "0ff7ecb703d7df7b658057e2c36ea067", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772066826, "uuid": "fda653b1-1f99-4066-9f96-fcf7a0b392f6", "comment": "Malware payload (XWorm)", "value": "77e6b445244e8565e459064b14a51fbcb6eacc4ed0a2f4d9ac444e52271ac18b", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772066826, "uuid": "f88429bc-cd90-4480-8a43-f722a619e25d", "value": "T139723C3ECA78FDD482BF7081A9EFE95541A4EB576F610DACE1091AA95F183F0DB052", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772066826, "uuid": "f7d85797-8ac2-49c9-91c2-e132dadea6e8", "value": "384:2Ah4lhGhyVXoFeeHrElo9Qkekj9LZkJYVnqdsVCgTO:2e4PUmoFDlP9LZkJKqdIPTO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772066826, "uuid": "d65b1352-e1c8-48e2-9641-3a66a6a64fc3", "value": 17459, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772066826, "uuid": "684d40bd-12b8-4921-b32f-15a14df53053", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a65e244-12b1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772068862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772068862, "uuid": "4f7fd2c0-98e0-4e40-8454-0ba320728239", "comment": "Malware payload", "value": "667678c8314abe4c6a26a1ab75173399", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772068862, "uuid": "fb81ae10-d291-4284-86a7-7f48da85c5d4", "comment": "Malware payload", "value": "74a081a7c69707e05ba04291c782f43647d2e701dd623914f51c96b6d2d40024", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772068862, "uuid": "28ad2d02-9f86-4836-a1e9-9cbc9ef11095", "value": "T147A3E91916670890F1EEDDC00D89B8BA1A137773A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772068862, "uuid": "0d07c63b-c207-4904-a58e-04653fb256ba", "value": "1536:74Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqA7:MgVBH3mPm+sqk+HAw0F5KijXx7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772068862, "uuid": "bad692d3-97d8-47e1-a734-7342657ca2e3", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772068862, "uuid": "3f16a610-157c-418e-894f-e7a718472629", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b649d5fd-12b1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772068990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772068990, "uuid": "d8f9ed87-2be8-4dc8-bab9-4a024e4a18f2", "comment": "Malware payload", "value": "cfd4fe521ead33ad0be941ec515bbc77", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772068990, "uuid": "13ea1044-23e4-48a3-a99d-380c53aad956", "comment": "Malware payload", "value": "233dd84a28ab37f1141551016e8556384bef56ad9893a4407276bb4df37df00f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772068990, "uuid": "4001f680-fe63-44aa-8062-df0142d9135f", "value": "T1B5C42304340651D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A173C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772068990, "uuid": "06c66f0a-af93-4f20-9037-945aa9f06bce", "value": "12288:X6wlOMWROC/FTeHo22Qm7NzofOr68mueA924EwCY:v4MQOC/gHozN7NzomW8QA9H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772068990, "uuid": "9a43b8b7-fe72-424d-8799-0c89c0fcca62", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772068990, "uuid": "31e09fa9-1056-41e9-a2f9-b890efdfc259", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fea85522-1284-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772069037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069037, "uuid": "ac69557c-a4bb-4f29-9504-b6a5b7957025", "comment": "Malware payload (Mirai)", "value": "ebe2ab895ed6573b4e47f4c3a9b1f83f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069037, "uuid": "0185823c-2479-4c8b-b807-1d5594b3891e", "comment": "Malware payload (Mirai)", "value": "574a161f66153b766356d3adf8c310af6daad0a48db743dc53b3f5000eb620e6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069037, "uuid": "ffc1a97d-56c8-4d54-8c49-81d0bd28fef9", "value": "T1A5E2F2419DD00E1FCD4B33F1D35F91A688B848979F822FFF79182AD90AC6124A2337", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069037, "uuid": "e89fef09-b920-4b64-bcd4-ced4b8813dc1", "value": "768:hDwnFk7Eqbo5vYG9rA0/qlFp34baBv9Fq:h0ncEJh9ylz3CwVg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772069037, "uuid": "4e79272f-d2dd-4edf-b2f0-a7a6bef29c58", "value": 32148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069037, "uuid": "e8f35d7a-5cb8-41eb-b8bc-8cb1840d3e28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fdfae9d-12b2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772069167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069167, "uuid": "1d885b5f-fa5f-44b1-b788-c99986d484ed", "comment": "Malware payload", "value": "53faa066cf2d6fbddb5974ae64c1f846", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069167, "uuid": "2c2ad31a-0dcb-47a5-814c-d64c4457a7a6", "comment": "Malware payload", "value": "34876f714a25901a7f6f9d2c45a252f8612bc7b069c6b9ffa1c3ffebed24db14", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069167, "uuid": "12acdae5-7568-4444-ba25-53baa62772d6", "value": "T1D7B423CE5A286CAC5BE89E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069167, "uuid": "118042f1-d7bd-4ea1-b264-30cfc2915a91", "value": "12288:JGRl4nbDDGIabs/7iiEVwYg2l3/2NHNy+wK8n:lTabs/7iiWw0KQxn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772069167, "uuid": "6c55bb64-17a1-4a9b-b6d7-1faecc6b1383", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069167, "uuid": "cc7476d0-28b0-413c-a045-20470b49382b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45f835ea-12b2-11f1-8369-82aee05be84a", "comment": "Malware payload (SmartLoader)", "timestamp": 1772069231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069231, "uuid": "b4a27c50-740a-4362-8721-ffa5045385ce", "comment": "Malware payload (SmartLoader)", "value": "0e39baa8f19bd1f25a9cd15ac2488cf2", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069231, "uuid": "3bb30015-a151-4765-9dcf-988b63070b10", "comment": "Malware payload (SmartLoader)", "value": "d84ab5b6e02be44975bf1290cc882e4a9f29a12cbd17866292f6667983985c5a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069231, "uuid": "af8acd00-8d0b-4ae0-a651-c78e5e051768", "value": "T11DC42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069231, "uuid": "75a1202c-ec5e-48f8-8edc-c140c97f8a43", "value": "12288:X6wlOMWROC/FTeHo22Qm7NzofOr68mOeA924EwC4:v4MQOC/gHozN7NzomW8wA9n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772069231, "uuid": "681298c3-1a89-4d1e-8e83-abd05f7ab230", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069231, "uuid": "231e155f-0a27-4c37-9f39-3ad816083d67", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a5e176e-12b2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772069346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069346, "uuid": "cd501a25-949b-48ac-b63d-7135e8c10d9a", "comment": "Malware payload", "value": "b116bc05227f3d98c3c79d821c8329f7", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069346, "uuid": "76934ec7-542a-43f0-a0ec-2fa8f18586b6", "comment": "Malware payload", "value": "36620519caa28596b3a07d62dd511a645e66223b3050fd7e76801f7f75d8937f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069346, "uuid": "d3277cce-adb7-4d48-954c-da2b03e7d7b6", "value": "T1D1B423CD64BED0A87B658D9A9FDCFFD30CFC003A6D7526F2A51C1A12A1C404B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069346, "uuid": "967a8262-b23e-4ae2-8c23-9229944801f0", "value": "12288:4B/e4pqNFTFbEXkdDoGbDDGIabs/7iiEVwYg2l3/2Nyw:4Bm4pgTnoGTabs/7iiWw0Dw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772069346, "uuid": "22bdb0db-0ed6-42a9-89b0-0b55389eab40", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069346, "uuid": "a8bd2e70-5b65-400e-8155-126b7d05d8b0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3db50488-12b3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772069646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069646, "uuid": "776d998b-a332-43b0-b132-90556cd6ff29", "comment": "Malware payload", "value": "f1cc6af83860418f00887abfc56dbc8e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069646, "uuid": "cbe8116b-9bed-45dd-b6eb-3003c0d96c6d", "comment": "Malware payload", "value": "341ac88108bb1276e29453b83d30f0462c22a618eb8276ea3bf6333b540e43be", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069646, "uuid": "8fee570f-d295-4c39-b65a-d66bb01c1a31", "value": "T155C4238BA3FE845390BF1F58AA57B48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069646, "uuid": "d6d443dd-edfe-4c34-8bab-d63d6a32deb7", "value": "12288:X+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bycH9I1P0QKw6FEm:X+QqldA/TSO713u7xncH9IaQKHb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772069646, "uuid": "5a8f3f85-e245-4807-8a42-22da58c7990d", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069646, "uuid": "c682832e-287d-49a7-8d94-4fb45a82e011", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f27b310-12b3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772069649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069649, "uuid": "f2003b77-1b2f-4954-aa7f-fbf2d336376d", "comment": "Malware payload", "value": "0d4e1451bc645c00176159a8f38437a2", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069649, "uuid": "94859867-237b-4f54-b9cd-6b66ae46a9e1", "comment": "Malware payload", "value": "769d0328ec74b66e92481f275acd31d8868f5a02cc3090581fd1ef1238e1964f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069649, "uuid": "5de2d10e-e2b2-4bfb-8037-01c63cb8cf2c", "value": "T1CC55338B817C29C44F7D0E52B7EF451C62284EFC1002097B6B6644AB753E3DBCAB59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069649, "uuid": "de4bc32c-c8a6-4056-ba02-8688e0bfbbf5", "value": "24576:ooZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaReIM:ooZ9bq+MmMEL+hcjXHC/wnwdE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772069649, "uuid": "01e8b919-0564-4275-9bd0-f0b0ce223867", "value": 1380594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069649, "uuid": "a51502fa-92c4-4534-9dd2-70ded2fa24bd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d661e284-127e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772070789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772070789, "uuid": "0817f813-ba5b-49f5-827a-ecb317b3b324", "comment": "Malware payload", "value": "364df0b28fe7d188eeb3130d5f3643ea", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772070789, "uuid": "9619d26c-20a8-465c-88b9-92391d5af1b7", "comment": "Malware payload", "value": "4f5a0ad75409e099522c26c62f179a8dadf51c1597ef21fee8434361ce136fa0", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772070789, "uuid": "eb372709-f168-47ef-8732-6961e0a5f38c", "value": "T1F0B5C07A1283FCDAEA271DA8A51036510C0978739B7554ECFECB0B85D4DA158DFB8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772070789, "uuid": "0a03a21b-689f-4d34-b5f6-845e8de9cb8d", "value": "49152:8UixbItdTrJoFVPMvXGt60p2NsEJEsoNxYqtzdOGR:7iBI/JoFdMPGn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772070789, "uuid": "c0232b68-46c6-4d54-b0d7-32c2b97e2089", "value": 2401789, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772070789, "uuid": "44a1f163-ef2b-4097-a978-acaef7b92aff", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56106c9d-12b6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772070976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772070976, "uuid": "aaf9d17f-8efc-491f-8d38-3b7e2be52852", "comment": "Malware payload", "value": "a44e96f19177f3032aceb67d4c04b0b0", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772070976, "uuid": "39409bae-8356-4330-a618-12b8e820d9d2", "comment": "Malware payload", "value": "8add291951390fdb8ec174a5f80c3a4b0f2ca7d1f7c1f6a6a35d85f86643f047", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772070976, "uuid": "bb3c17dc-ff70-4113-82be-86b251b5ac75", "value": "T1AA0611F79755CF90E13DC5B6710A764A7E6B61FD2432FCEAA3E08DED4209B8C84825", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772070976, "uuid": "c1016035-1cbf-4675-949f-0242c4f70e40", "value": "1536:C6R5q0xKwak3IpGZ77Nb8nZbyQXFepN6ewPlN:2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772070976, "uuid": "05c93cf2-f6d3-4835-a662-e9980fb75176", "value": 3813522, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772070976, "uuid": "7b02baff-2a2a-4783-9556-c9b56832840d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10adb301-12b7-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772071289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772071289, "uuid": "d0566308-6244-4073-a5da-b0a2ad213dbf", "comment": "Malware payload", "value": "d6389fa152ef15c4cfacf042240ae001", "object_relation": "md5", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772071289, "uuid": "fccf5395-ba15-4c38-95bf-ed5ea0ae8ed6", "comment": "Malware payload", "value": "73135fe4594c833f2be1cef005457315b136434e5843f458326f7c66662e53d8", "object_relation": "sha256", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772071289, "uuid": "4635a04f-fd12-4b73-87b8-9e7c1a12fb6a", "value": "T173069F332486E2E49CC92F69A74F5F0920255253BEA6434CBBE10FD4C5E6D4AFBB42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772071289, "uuid": "dc561c2c-646f-4e45-9aca-efb401505aca", "value": "384:UOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOTOT4:59wRJRLMSrfRB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772071289, "uuid": "bd3bb0f9-de7d-42e4-ab36-266d6707bf7c", "value": 3828770, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772071289, "uuid": "6ccb9871-d425-4c96-9eff-07320dc27ac3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdf14944-12b8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772072116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772072116, "uuid": "55bb0d10-081d-4093-a5e0-5ba2bb72cd37", "comment": "Malware payload", "value": "29d8bc2f6818c95dc34bf9aa0e03e6a6", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772072116, "uuid": "2f53dc7d-3163-4053-b9a5-2dd04b69f14b", "comment": "Malware payload", "value": "b2ab9a12903a80ba6e5933ea7611b1bee02699d6addb2b05394baa1a7823b62b", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772072116, "uuid": "a7a70c5c-0d43-4079-bce2-a5ed7189cc13", "value": "T19985239744070042D3997F7D746B7EA87AFE76336B5348350585ACDA3E20A24EB2B8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772072116, "uuid": "3828edeb-440b-45b4-a23b-f4ce5d5bfccd", "value": "81bbda50a2982e0e014acf537665f7af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772072116, "uuid": "4930e134-1c9e-4236-9da4-ae91335bf30d", "value": "24576:ArU1Twe3IkVyss7h6yvlaL9KXXdQGh4sqPqwYcG9hArtD4I+RhjS7f5deYBAoiYc:Cr5kTsgyvCkNQ04N4ot8IGh8ydfZG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772072116, "uuid": "9f5e5e71-3fe7-4779-8b0c-e92a2f59fe25", "value": 1859072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772072116, "uuid": "d956b957-1fda-451b-85b1-9a0678bab60f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c06a5b3d-12b9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772072443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772072443, "uuid": "2a867f4d-c048-4470-897d-a30276ba248c", "comment": "Malware payload (Mirai)", "value": "213ca3108e399f486ec0e7a38f365992", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772072443, "uuid": "f8183fb5-336b-48d2-be80-382743487cd3", "comment": "Malware payload (Mirai)", "value": "b1559f052d2379c6ce6a92b4b03ac7157338e4df8e08962c4934bd9661e37c1a", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772072443, "uuid": "696b511a-dcbb-4000-a1e9-5a75e2a26a5a", "value": "T1D2564B19EB8789E6F3A355F0134AD273693050199077B6F2EF8D3B65743A3406F2A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772072443, "uuid": "df0ceb55-6479-432f-9db2-f91bc017614c", "value": "98304:B+QbDl5Ah5ue37o15nzWcOmpnZ2Xv+Pw6QedZMC:B+Sh5AgXDY+ZPdZN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772072443, "uuid": "aa8c0bff-1214-45f2-8b34-8e25fa9c2416", "value": 5915672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772072443, "uuid": "2dcfd8f0-fba2-4fbd-a5bf-5ad14af63b29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87bdc342-12ba-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772072777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772072777, "uuid": "3a3063d9-fa40-40ed-a773-4f96c7660e51", "comment": "Malware payload", "value": "68e6b0d6fb6759df2a7fabea8edee539", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772072777, "uuid": "473f60ee-ef11-4a2b-bcba-9fa9f008d465", "comment": "Malware payload", "value": "2908ea1bc70b89147dda141fabffc6fa2e8f7c703b7e090a556d1d55d7909acf", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772072777, "uuid": "223aefe6-4cf1-4bd8-af9f-48ebf4da6d24", "value": "T1E2D57C8793A446DF77E201E1D0A87087C4FDEABB580C7A9CF3E6C4D771A9816102E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772072777, "uuid": "2a3341ae-e606-4459-a228-a47dd053d53b", "value": "384:TQkaFTuOtzXq0IwZSc4wjxfv/ZT73DrU2XeApQnqvEhlWkyKEhVzrhBhtch5Zu8O:i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772072777, "uuid": "5e27fc71-15d7-4e16-a6e2-445680c25895", "value": 2788889, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772072777, "uuid": "bb221306-346a-490f-a1e5-28812676c786", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1772072786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772072786, "uuid": "1ff7c9c1-0db7-4948-b810-c817fda432d0", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772072786, "uuid": "65654b48-b21a-4a22-92d6-3d10a816f438", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772072786, "uuid": "124f39f1-bda7-4008-9ca2-3b6632f752c5", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772072786, "uuid": "093496b7-6c6e-47c0-a93c-9cf2791178d8", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772072786, "uuid": "80fd7ad4-f639-425d-8e1f-ff38b80b504a", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a217347c-12bb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772073251, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772073251, "uuid": "281fd9af-fbdd-457a-9742-6f43a09dc224", "comment": "Malware payload (Mirai)", "value": "9175c52f6bb045c2b34665f9a7e07926", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772073251, "uuid": "ef801da5-ea66-4428-94bc-2f10d38db384", "comment": "Malware payload (Mirai)", "value": "24a041dba5cbd421a7fba320ad1f5dd08cfd244c436d6fe6cfa312554324d0f3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772073251, "uuid": "ecaf8d68-c778-4966-9bde-df2c5e7d4c5b", "value": "T136E33A07B5C1D4FDC4DAC1744BAAF53AED32B19D0238B26B27D4AE222E5DE211E1DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772073251, "uuid": "2b7aec9e-2f19-4819-8e5b-312003759b2c", "value": "3072:Idc1JZ+Xqc8Y9sS/JRHFS8K7O1zi+QAee54UCa1XeWYB:Ac1JZAqc8Y9sS38oqHUobB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772073251, "uuid": "847a84f6-9d8e-4501-8eec-1f2c2c77db91", "value": 151560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772073251, "uuid": "e6efc39d-77ef-4898-a9e6-11f3b92dc61d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a23b04f7-12bb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772073251, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772073251, "uuid": "f4ab3168-7c73-4670-8da5-a0d06a87b9ed", "comment": "Malware payload (Mirai)", "value": "4b76a96d1bb9b898d296b3e76eeba1aa", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772073251, "uuid": "988a4f87-0e49-4c20-8167-82ea8f572b98", "comment": "Malware payload (Mirai)", "value": "803676dbe7bcf2bf1e6332573db3ccc7cc71fe96483634367e805afa40db65c9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772073251, "uuid": "7d262746-84e2-4320-86c4-5435329662f3", "value": "T176142A46EA408B13C0D627BAF6DF4245332397A4D7E773059918AFB43F8679E4F226", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772073251, "uuid": "1ce046c3-d545-44cd-b6ad-372ee5252d60", "value": "3072:oqr/OmYCmijsOOIh+hcuTaeKcS2HooWBluE1qNLM59oeM/R7J:oqr/uCtbXheRTaeKcS2Hop71qNL+KeMr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772073251, "uuid": "3b3b187e-4511-428c-9e98-71f7e83ca5b5", "value": 194058, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772073251, "uuid": "dc425d02-abb1-4ccd-ab1e-086b8f6d57f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a86f20db-12bb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772073261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772073261, "uuid": "aa8e8d6d-d6fc-4576-8f67-2bbf5a3a73b6", "comment": "Malware payload (Mirai)", "value": "5e960f192e01ea95172778a03449884e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772073261, "uuid": "9df75f92-7f4b-4c3d-83f9-51224e1c9c51", "comment": "Malware payload (Mirai)", "value": "6c582bc7173df7f0b4d77b0ab264f3c037dfd78ae29620fe3bcd6ac0fcd14ebe", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772073261, "uuid": "7b96cddf-ff0f-4884-ae81-3f3a1254ddca", "value": "T126F32AD7F800CAFEF80AE3374853080AB530B7E255925B376257757BED3A1991863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772073261, "uuid": "90d39db9-cef8-4878-92ee-300cd6a6d372", "value": "3072:Vv+gQaln9G6jKtkSyV1Xt7NBRsu/5BqPdVLjbiNLSUlWYOYsq:0GSDyVNt7NB+ufqP+LnbOY1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772073261, "uuid": "231a57f3-84ed-4374-9965-9d5dde1532dc", "value": 157632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772073261, "uuid": "3bbbea8f-690d-46f1-917f-3fdad4f31d21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23a4f499-12be-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772074327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074327, "uuid": "9e80656d-3225-41cf-bf75-9c183a4c36cb", "comment": "Malware payload", "value": "b1af64e71698ce081a1820edf6a1b548", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074327, "uuid": "f890ce86-fc0f-4e32-bff1-6c9f48339c42", "comment": "Malware payload", "value": "21eef7ca5176f20d1fbb883c63304f293100e7855e4100d9dbca269bba2f5bd9", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074327, "uuid": "1f3f335a-0d92-4ab6-97f1-fce76f39e1e0", "value": "T1C0B4230A85D01FFF899ECB9946D4A4672FF467952F93565BC0CD20700AEA203E6EFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074327, "uuid": "71e6d637-3918-445f-a6d7-d1bd5aea36ed", "value": "12288:rvOi3UDYXndLQ/jJOjB89RitlR0XjuIkVp69d3iY829uhB6bY7vPpCkI4:rWiEGnlQ/jwyil0X7kWv3icY6b9w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772074327, "uuid": "f12f0613-4951-4479-8d7a-b34618d83ba7", "value": 540419, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074327, "uuid": "b854a974-f0f2-43d4-ac0b-0550d92a9895", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "478d4feb-12be-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772074387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074387, "uuid": "1a022cf8-f0af-483a-a7c5-29a3a3e445b2", "comment": "Malware payload", "value": "45c4ef9004d970d3e2624f48914e7348", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074387, "uuid": "87e27c58-608d-4124-8a52-ff241bb6fe2a", "comment": "Malware payload", "value": "857227b63272d2367934a8eae7a7ddf7da72247a0040d1d8f90838c4be0bed3a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074387, "uuid": "1eb311a0-48d7-4f2d-82a9-962dfdf02c67", "value": "T1D755338B817C29C44F7D0E52B6EF811C62284EFC1002197B6B66449B753E3DFCAB59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074387, "uuid": "ebf1ca81-0edd-4d1e-8d79-93be8354222f", "value": "24576:UoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRMII:UoZ9bq+MmMEL+hcjXHC/wnwdO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772074387, "uuid": "7cec031e-e30a-45af-aba0-78e2e7a6230d", "value": 1380594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074387, "uuid": "bf96c397-c262-4d4e-8bbd-4da40d13cc80", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a9b9e90-12be-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772074446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074446, "uuid": "7016eb31-17db-4652-8a73-11da13bcf62e", "comment": "Malware payload", "value": "90bc3fbc661e324ed6f9d9362c47131e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074446, "uuid": "50045d2b-ad6b-424d-8005-0b4c6f880eff", "comment": "Malware payload", "value": "58e36bf849d4813254eed0ebcbc304341b02c9ffff505a5ebec419af30e472bc", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074446, "uuid": "fef906a4-374a-43c3-bf02-ff55f438d0fa", "value": "T125B423CE5A286CAC5BE85E834F5DBFDA2CF8413F862415F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074446, "uuid": "92f54d93-d0f0-4973-9f66-8f11c33deadb", "value": "12288:BGRl4nbDDGIabs/7iiEVwYg2l3/2NH1y+wK8H:tTabs/7iiWw0KoxH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772074446, "uuid": "58c75fb6-2014-41e1-9e06-e174a8f85964", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074446, "uuid": "a054ab9c-d9d5-4364-b5e6-03051093fe16", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6abfcea9-12be-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772074446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074446, "uuid": "19f22df7-cfeb-4379-9ec1-514144c57f7b", "comment": "Malware payload", "value": "f576b203ce9b51e08c723b9092f1f754", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074446, "uuid": "d1b2a026-0b01-403b-825d-76baa5eae333", "comment": "Malware payload", "value": "b48a2bad8b2338da3473dbd5e95e0251f65303a58a08deab4c82e5fbb1e44c62", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074446, "uuid": "0b8a3ae5-14ff-4d9c-991e-0557fe1bbc74", "value": "T1FCB423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074446, "uuid": "6c120c60-edd7-49d0-920c-c5f67ac4c937", "value": "12288:4kmht7DrvdyiICCH1oHF9nJ/qjuyrgoJrrzTPwkG:4kmHzMhH1ELnKrgoJnnC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772074446, "uuid": "b2451be5-3b8c-49e7-ae4d-e8a445ee8e72", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074446, "uuid": "bd7a0eeb-bcd0-47e3-97ce-7d5859315132", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64f11c26-12bf-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772074866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074866, "uuid": "6bb2a924-5d2b-4642-bc1c-e000dcd9afbc", "comment": "Malware payload", "value": "c1f4d65b75dfea96a02b29365262c4ad", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074866, "uuid": "66f57dd2-1f91-4a08-af43-c9e658f970c5", "comment": "Malware payload", "value": "f5094f052161d4861a14722a448d56c6ba945a4ea4f0cf11b1dc9bdb548723aa", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074866, "uuid": "f0669ac3-adb8-42fe-a4e7-60c8e8bfd61a", "value": "T149C42367226F72500DFE92ED4E4156186D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074866, "uuid": "29b8b06e-07ff-4fbd-9fad-85f6a6f3a723", "value": "12288:qeCEhtr9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakB:dthA/f0Za6TCXKBxl6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772074866, "uuid": "2ef7c3a5-58aa-420d-976a-fea4ebb03546", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074866, "uuid": "e2536495-a376-40bb-a943-e2db58e80312", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf8fdc09-12bf-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772075045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772075045, "uuid": "ec180563-e84d-4ff4-92e3-090b3199f585", "comment": "Malware payload", "value": "1f1a7d1e622a018617f1d07f2a2efdc0", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772075045, "uuid": "cc167a39-1186-4b97-8e14-e124c8d292ca", "comment": "Malware payload", "value": "0e09274e88a32b92fc0825de9f2bca211adcdc8b23ce9fca66e014236c0fce1c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772075045, "uuid": "86558e5a-0cb0-448e-b9fa-a809b30cf8b3", "value": "T13FC423B7179AB0897503E3E4814C6D94C9AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772075045, "uuid": "b07b440f-0596-4e45-b76b-5a51b61b1c7e", "value": "12288:eeElNtIBB2gX3U5jA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ez0:eeSIBBfHtm6Jj6ESfUxZ91kmY/9He4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772075045, "uuid": "1744228a-e05e-45c9-abba-6ee4b8132638", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772075045, "uuid": "e86af66a-f34b-449e-9a9e-d3938c2fa435", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5edc973f-12c0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772075285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772075285, "uuid": "89b1128a-75b7-4249-9e47-6be88622b11e", "comment": "Malware payload", "value": "cd472788606aa11206f4c68adf4621b2", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772075285, "uuid": "a849884f-c5ba-42b9-96bf-b7006e2eab4c", "comment": "Malware payload", "value": "d3370fb594fb6d6938336d9e9c09bb92777b27663de6dbbdb35bf4f1d22021bd", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772075285, "uuid": "3ad1d7fa-e0bd-4e3d-9b16-3e5bdb9b0a3d", "value": "T140C423792755F0C46206F2FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772075285, "uuid": "ca6ea8fe-6669-4583-9330-3ebdb96443a8", "value": "12288:uA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWgSFyorOIic/7MPB:hm6Jj6ESfUxZ91kmY/99z8NFXicTm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772075285, "uuid": "36729e50-2fb9-4e86-bbcb-f482829fbc16", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772075285, "uuid": "494baec0-6299-43e6-85d2-fd64cbc09c09", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05d6b3ad-1297-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772075825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772075825, "uuid": "14cc2e27-4092-4ac6-ad5d-2827ef711d93", "comment": "Malware payload", "value": "d62558e43bb6dafd7f0817d56af4283d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772075825, "uuid": "7bf4b932-22de-4791-8865-304218e68ef6", "comment": "Malware payload", "value": "e2c4745a773b7edf04fc7a38d3690fc0154cee239c0a367ae35dcf892a42dd72", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772075825, "uuid": "a3325229-5841-4fb9-b92f-56763e7c4408", "value": "T184C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772075825, "uuid": "8e99804f-3ef9-4b52-947e-d6dbb57ddd50", "value": "12288:qyBXIs7rM1ycqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5M:vImQ1GEA/f0Za6TCXKBxe6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772075825, "uuid": "0f8ee10b-5468-448c-b356-7d7cc93c50a8", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772075825, "uuid": "89828b02-ac86-455d-b4be-b782ed0df6f8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a4aa9c7-12c3-11f1-8369-82aee05be84a", "comment": "Malware payload (SmartLoader)", "timestamp": 1772076486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772076486, "uuid": "1c65467d-aac0-4936-8276-efb8a6e3a4e2", "comment": "Malware payload (SmartLoader)", "value": "b9f12dd6ab93fa60b4f01c26edb46953", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772076486, "uuid": "ed130a14-0956-45b7-984b-57f1ded28b28", "comment": "Malware payload (SmartLoader)", "value": "7cc59a1e10799150e170148f105b099b2318b0766f2b4759e59084b97c6ef469", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772076486, "uuid": "d77683c8-d789-4a4b-9acd-825f6f749277", "value": "T126C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772076486, "uuid": "a8c42bd9-d3c7-442e-85c0-aae22a52ab53", "value": "12288:j+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2by5H9I1P0QKw6FEh:j+QqldA/TSO713u7xn5H9IaQKHI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772076486, "uuid": "67894a48-43f8-4c7a-acf1-66a5fce8a2f6", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772076486, "uuid": "4be06984-2c25-4f92-bf83-d572079c3c06", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b6a264c-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "e68b953f-caa7-4dd8-8fa3-d6d35181004b", "comment": "Malware payload (Mirai)", "value": "166418aa92f7fe65eb05154b29022009", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "533e9ca5-34c8-4809-9dc1-c609b3640875", "comment": "Malware payload (Mirai)", "value": "ec40d63ad3d3c57e9bedf02e80df74e203490ef157683c55c9dfd5a9c25cf062", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "2eca080c-95b7-4e56-8d24-4499c0f83d13", "value": "T13103F20199CAC718E21F75B9045FB5478A346B8C00A5A777C6CC1C2F56F2FA591293", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "5bfd9b8e-1c9e-4acf-9827-38d1df988d76", "value": "768:QVG0M405qXId+XAS8STeLmGTbvSxDjhLGaf9V7xjXkAhJnbcuyD7UHQRj2:QVXlnwS8STeiGTjSRzf9NZJhJnouy8H1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078716, "uuid": "f8aa75b1-455d-4199-a9dc-a8c3f195825e", "value": 39692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "a99664ef-56cb-489d-9ea8-9fab6ee307c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b6e1f62-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "5c224ee3-5f2f-4271-bc0c-d1bca3f7a6c3", "comment": "Malware payload (Mirai)", "value": "29e13bc4db95719bb7b3073741848102", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "fdde41d4-1ef4-4d15-adbd-19b5b840ef87", "comment": "Malware payload (Mirai)", "value": "8b74d70490a41efea42b0def29787233082d774edee77e2025a5c94ad444e144", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "a73ca749-4946-4ae6-8dd2-d993220e756a", "value": "T17313E0975237EFFDE43AA43E0996A644B937780D4E932FAF5DE02C1F09634422B14A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "35e4b25f-09d5-4d77-ae00-86574b2a99a6", "value": "768:3HYaJfn1lSXaUMYXLgPc34VJof9URioZYx0Y7:34aJf1sXndL6cIVc46x7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078716, "uuid": "88975539-d0b5-45bd-bfed-8a2138831cdf", "value": 42140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "6f0f41bb-3790-46a6-b187-2b3f97175c6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b74bbbb-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "d1149970-b430-4a94-9d74-5ed4089f81bb", "comment": "Malware payload (Mirai)", "value": "5afeeb902d8d657a0dbe704a6acc62c4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "cfeb9ab9-b116-429d-b7f5-e339b6ef88e8", "comment": "Malware payload (Mirai)", "value": "6bd0e06ed81dce408653097d8ea3195e6bc01e4ea949dae0077d8127bad63ee9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "8244a7e3-1d7b-4340-9495-06a99441ac47", "value": "T1C3935B22B5791A3BC4E4943722F75326F1F6438A14B88A1E7D760E8EBF216D036477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "d83e73b7-ca06-4797-93e9-536472505698", "value": "1536:hDLLa3phYqoqaRNoJdRQrGUuvB+RAbUkOHtZYYm5o5o4bqwtSXB:9yDr7IYT07YYOWopXB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078716, "uuid": "14a02fb9-43b6-4d6f-86d5-7e0d4f6b1bab", "value": 92648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "4b7ce42e-4453-4556-b40b-1ee9a0f9e3fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b74e21a-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "0433c006-36ea-420a-bfe1-d2d2a71a5eca", "comment": "Malware payload (Mirai)", "value": "168b592a7eceae8e23ba539c3a833b13", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "b62da92f-8a8e-46bc-a23f-e9451421521c", "comment": "Malware payload (Mirai)", "value": "4fb1d8352fd1652e4c4e86be3f4d463bc21428ec8d72b13b9b3ba4cfa809f8fd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "e0a36227-eb20-43de-9d82-d7cedfdd4183", "value": "T1D713E139C4C0A453DED12837E968C4C8161B95F8E1EE7B5B1C28EF44F56319758A8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "da8e59ec-ccb9-414c-9a48-34c5c08823f4", "value": "768:iNYZqyhMdr7iy9Ob8W9LFJdYsDVrA7htUo0wUbs3UozwR8:EYrMd/B9ObbfDR00onUGz88", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078716, "uuid": "273ceb2f-6e00-4b77-b92b-688ad7c492b5", "value": 41620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "c36e3814-3fcb-4273-9c25-a050591a50d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b75eb3d-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "ddf57a12-1121-418c-86ed-fee949fde67d", "comment": "Malware payload (Mirai)", "value": "b6f9eefe1bfb970ea2c9d284b255023e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "e0e2cbf7-afb8-46c5-9016-ced62f625cc3", "comment": "Malware payload (Mirai)", "value": "0f5463db83741b388668ab6f1c43ba0daae6c81d6dde65596701ee25e8edec83", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "742dde44-e2a0-4170-9bc0-296f2148343b", "value": "T1709318CAB401DC7DF80FDAB74463590EB631E3611A931B26676BFD53A8361E05823F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "fecc5919-a02c-4753-8837-1d100a60be9d", "value": "1536:/niK5IUBTr4uHtgis7G6d9/L78ZpQGmMCqM6XD6Q0Pf8IgoO9zmk6wz59afN0znu:fbdoT7Gm9v8ZY4D6Q8Q3D9aNqveW9zVq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078716, "uuid": "a4f338bf-963f-4a1e-8fcb-2db5a18ca098", "value": 97540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "e330400e-6c43-49d6-b811-237ad58ba92a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b7789a2-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "ec8d13e4-49fc-424f-a5ed-be5330b4cb51", "comment": "Malware payload (Mirai)", "value": "2078a2d43508c52782ab9cb01f5bbd45", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "ebf2136a-4c08-4c37-87bc-5a659be328fe", "comment": "Malware payload (Mirai)", "value": "b870f5b857c3c9a5709ac92cac685c2d44a3467a8613f4f2e8a7b5e0fd81055b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "c4f57549-3779-4f32-8942-ab6d83072c8b", "value": "T1F8C3BED7F78B24A1C86146F007C76BDD2AA361119E6BE9E76C1E663B09390DF19063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "7626a3cf-836e-47a7-924e-971a2ad9d776", "value": "1536:hcc9SlUg0gcM3Ryc4wTuwNhaIWqltmvyYqzD/1CNxZJPegmY/LWJ:J9SlOZQoGzNhRtEyY4/1CjegmYq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078716, "uuid": "8bacb3cc-3504-4789-8ebe-466e8551e524", "value": 124352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "491f51d3-1a2b-4397-afc8-14c9b25da73c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b78eae6-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "b2c1b0d5-0d5d-48d7-9fa9-4b1830500977", "comment": "Malware payload (Mirai)", "value": "e19a3a2db9adfe947aca844e377f9f95", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "4c102bb9-e059-433a-8d0a-deb5a24ea6d3", "comment": "Malware payload (Mirai)", "value": "e5b5d24a655b99ec545148a571be973d18bc96baa54ade0f40d16094f07b93e4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "0906f14e-a101-40f7-9000-ce5e919eb3e8", "value": "T1F5B2D0B0029FBE32D5361478EA30EB4D3286167E61BA3062532407A97EE5A4EB53DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "0deb8374-cffc-423b-bfca-38eef9ac6cc3", "value": "768:fc0uJ5uE3J8+qO8xmdw/kvUj6Xs3UozMx:fc0u2Q++1X4kv4zO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078716, "uuid": "c1de5ee8-46b2-4add-9597-4a6df8ea200b", "value": 25104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078716, "uuid": "30c4e884-e966-47cc-902e-0f2a4e1f96d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d5e91b6-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078719, "uuid": "3c879554-e79e-4cea-b744-104a3927a159", "comment": "Malware payload (Mirai)", "value": "72dc3a8360e3302a00ef96e5aed0f208", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078719, "uuid": "8bf6ba54-11f8-4440-9df5-5eb92b12f2cc", "comment": "Malware payload (Mirai)", "value": "71b3b1e14085f1319d6b6eb24fe9e3dc2ed9c09b5c183b4f4516172d92db4788", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078719, "uuid": "3f7f61d6-f1e6-4883-9a07-fd050654f661", "value": "T1DB03F1A4E5DC0CC7DED45A3848FAE7C233B81FDA79A1EDEBE4CDB640C11220665959", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078719, "uuid": "fcefbdf7-9565-4f29-b34b-b001f71fb67b", "value": "768:EhX7xSX6kbI5/Ie0UdC1m34z3fAw+XjiMXxjy1SADGGGCR9Nkr5OKZTUI4uVcqgH:0rCBu3C1PzPAwsLXNUDGG7Nq5wI4u+qK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078719, "uuid": "2aff8205-d73b-47c8-b6be-7fe6f8e0b1d6", "value": 40200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078719, "uuid": "95088dd8-f18d-4880-b73e-7579c8fe6905", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d5f11e0-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078719, "uuid": "5f67ff02-9ea6-4ad1-8933-93acb264af1a", "comment": "Malware payload (Mirai)", "value": "dd292fd16868b8b22ce214eafb8ce4c8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078719, "uuid": "8ca37124-8d9b-4420-819b-9509633b0065", "comment": "Malware payload (Mirai)", "value": "4082310165cad3e26cabb4059aca70a94f3f4d7aa74ac96bd03137b4e933dd42", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078719, "uuid": "c0babf38-72c1-486b-b4b6-af56c1f9c2c2", "value": "T16013F10EE88B9DCDE4AC4DBB660743582F9929C5710E1B0483658C45F26A4CEFCFB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078719, "uuid": "5d8d81ba-1fe3-4883-82f7-ed537a965054", "value": "768:SXRw9PtnyjdBmYkbBwyV/nHCQdUf7dymNbnYRJH9aubNMHgr1VBbA9WUm:S8tns8BVHxMdyWnYHA5Hgr1n6m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078719, "uuid": "377aa215-9ffd-45f4-9d67-6952b404b55f", "value": 44620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078719, "uuid": "e08b5a15-f561-4a31-85fc-a85ffdd6accd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d5f481e-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078719, "uuid": "d438a812-771f-4296-a7a2-e51ad6fe7ff4", "comment": "Malware payload (Mirai)", "value": "6bd998f698328c140f54dfac1763127e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078719, "uuid": "a5b5fee8-6859-41b5-9840-fd16a93d83c3", "comment": "Malware payload (Mirai)", "value": "00025c1f47120c77ef155e9604b428ef7b1dfb0238ecad7699880609da36d51a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078719, "uuid": "8a77178e-8bea-40e0-a787-670647eb533f", "value": "T1D863023857191635E69158A2EB7A8FD2AC5D03FDECDDEE0403AD450D9CA34EA5B2F0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078719, "uuid": "680b897a-248d-4004-bc9b-c6493abc4921", "value": "1536:hIwY1Hr2HWnpSa9KkRiO44oZ39K6p9LSvJnZ7A3Ui:hIwG6iUkKkRCtRjLCxZ7QV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078719, "uuid": "86994d73-760c-4ce4-8d5d-b06f9bfa2ad3", "value": 67468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078719, "uuid": "4663667d-69b8-4965-9152-05cf6bd5e362", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d67ef47-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078719, "uuid": "6ab46482-0437-41b8-ad77-efa9e7bc390c", "comment": "Malware payload (Mirai)", "value": "f3af70b8765b6dc9d563a8a5e9ba3bde", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078719, "uuid": "725fc7ed-272e-48a5-a557-6ed0dabfcfc6", "comment": "Malware payload (Mirai)", "value": "b725da3ea68c7f7f8d65a6317edbfdf87666b05cb3ddbadad7f21b53319e00d9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078719, "uuid": "b1add2e0-fad7-4c40-b1d5-052b13e55fe2", "value": "T11B03F1D5B5996E90E0D711B05EE7DF1E5482E13CC968C8085ACC20773A2B7B53B39B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078719, "uuid": "3d036fa1-4b89-4efa-aa86-fe90c5460c72", "value": "768:JdQwcrBWSsQTnqAAEqEahxKGafDBinY4U5qXcF8cfOgc6tnbcuyD7UHQRjT:zaduEqMqF+BiY4U5AcmJ6tnouy8Hy3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078719, "uuid": "f81593dd-e590-4bcc-aca2-fce961f0bfb1", "value": 41404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078719, "uuid": "38a1ba8c-457f-4cf9-9282-ab3274e4d228", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7968fa35-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078766, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078766, "uuid": "bef423f4-0f66-4d92-904e-1b59f6aef1b8", "comment": "Malware payload (Mirai)", "value": "2017d7c974666b0c762e4edf377d7f70", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078766, "uuid": "f2aed883-1484-4e34-9c87-27a1a7790fbc", "comment": "Malware payload (Mirai)", "value": "8d381277c335a4c2891890afe629066832cf0a06e7e9300eebbc4310c143d23c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078766, "uuid": "0c26f9ff-d6f2-4fdb-a562-f64979591247", "value": "T13813E168014091F7C228D5F7D25953921E7503B2AE47DB12F895AA6AE906D773CC3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078766, "uuid": "9b8c9746-31ad-44da-b67b-e95a8c7d9cdd", "value": "768:Pwc5oaegtKjUr90L82EGkpORGFYL9Q/n08IBaqt68571CRos5vqxuCJgGlzDpbuS:PjegB90LiQRGFYL5H6O7Y55vqIGVJuS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078766, "uuid": "996b1e1a-5ba5-4cf8-bb7f-4cb4b4070e2c", "value": 43320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078766, "uuid": "b1ccd348-f97c-46aa-a5f4-99e42fcb7a64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81954440-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078780, "uuid": "df2119b2-e128-48a4-9803-190ed2b4427c", "comment": "Malware payload (Mirai)", "value": "516b13182ab83ce78191fb5ab0ce7c8a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078780, "uuid": "2b6cf48c-3e43-44f8-aaf8-7e6408fc1e8c", "comment": "Malware payload (Mirai)", "value": "d54bb43267fb7fe4b8200584d6c131b7f6732daf73a52df33276a0ae2ba8a1e2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078780, "uuid": "a9e780fc-580f-4f38-a86b-d661948e6444", "value": "T1C3839D63DC352CA8C55842F4F5A4BE3A1363E5105A932FF7169ACA769007EECF9063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078780, "uuid": "f1533525-2ce8-46b1-9649-a6a0f70004ea", "value": "1536:R/RwfwPUHgF2LYKshI7d7jHy+jKtCG3hL9Sweay:RJwfoNF2Lfsepfy+GtRhLoXay", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078780, "uuid": "3a937c3e-4c1d-47e6-beb6-321421a446c1", "value": 81076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078780, "uuid": "2b91c014-b29e-4e1f-8d32-829ebb0717cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81962cf0-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078780, "uuid": "08eb87c6-a7e9-41b8-8d97-789f33749cb0", "comment": "Malware payload (Mirai)", "value": "52adb78d940d92f8a0a1ea59b9d1dad0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078780, "uuid": "f97f327b-15ed-4d84-8351-48a153ac5c96", "comment": "Malware payload (Mirai)", "value": "8b8d49adc418e8065baeae937dd790dd7abfb9c2aeda769ebc8da24825e5c4bb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078780, "uuid": "a37f312e-5da0-4b17-afea-8dce5d338c55", "value": "T10213F15948A4C751D6DF503C26BEF8F952C8616277220CE3A9489B47BE09F652E0C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078780, "uuid": "ccd0762d-09ad-45ba-8935-24c3f78e1664", "value": "768:LWycDjI1C7Ax4lQj8xiSZJlGMJaxAp4dBRR9vYZK+cdmVp/2q8nbcuyD7UHQRjl0:L+/0hgpgZAk9v/+SmVpL8nouy8Hyi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078780, "uuid": "1767f85b-6eae-49cb-bd9d-3117bd7db6a2", "value": 41884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078780, "uuid": "90528e98-6329-4892-9233-58bc0fe3b306", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81a24eeb-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078780, "uuid": "ff588e37-1faf-42fc-9b6a-998385749a1b", "comment": "Malware payload (Mirai)", "value": "c1224e460597357a71b8fb60f61c3331", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078780, "uuid": "336c5475-3d8f-48de-9c72-865612932fe1", "comment": "Malware payload (Mirai)", "value": "64e4efd9f521b5445383789dd193014cd9ee7fc5e6b14ad18ab6336ac4af2fc5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078780, "uuid": "ad3a3e3d-5865-4744-8458-80d8090ab4ac", "value": "T1C913F134BAFF1B61E932483ACBA54DA7354B52FC94FE70502218B2E441E6490B79DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078780, "uuid": "4e9481e9-f463-4638-9a86-dd657c817367", "value": "768:6N5778ibEne1pCd4uhGSGMgs6RxwF+Rc6EhKoW+r8mwt6/Jyl9q3UELGmG:q8ibEnenCd4uVGMyxDc6wE+rvEAy4LG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078780, "uuid": "cf025209-2521-4b15-bbfc-c1c972f78f1d", "value": 44768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078780, "uuid": "ec84a7bc-695a-414d-9919-4f1d60a8aff3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f1e57a4-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772078829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078829, "uuid": "ad169a19-a3ef-42a0-bb9a-a27e6fd08702", "comment": "Malware payload (Mirai)", "value": "55109e71dc9e4d52333fbbcc5fd5c2be", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078829, "uuid": "5e353f3c-0978-4a31-821d-e08b45aaf006", "comment": "Malware payload (Mirai)", "value": "051f723955c59e0b9b3e9c2e6a905d51b7c9df96b7c48a4aaf27c36824846bf0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078829, "uuid": "36a45d0d-c64b-4579-a5ce-33bd4f2b2238", "value": "T13E5196CA03C516711DA74966B3A9F5C83DADD0E931821F76DFE824E2084FD18329D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078829, "uuid": "4d9fb9af-9c82-4c3b-a206-27ca1f45127c", "value": "24:IttsrUykFssd08D8PlJiJL5eNIyksNh3PYonBW:iWrUyYBdX4LiJLwJD3goBW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772078829, "uuid": "3d61a97b-26c0-41a0-b3f2-bc6dae1d4a8c", "value": 3134, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078829, "uuid": "cae493dc-27ff-4a14-8991-c925e2da4e8b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9a4f8ae-12ca-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079733, "uuid": "94c15873-267c-4c62-b2b6-38373b810fcc", "comment": "Malware payload (Mirai)", "value": "c1286d9941ba508e892242afce176572", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079733, "uuid": "54080e7f-aa78-4c16-9a4b-8eae9246c679", "comment": "Malware payload (Mirai)", "value": "6574e3e5a6e0167077dde72bcd72e1fd3a79e61aa9e6e76ab6329c13ca7ea6e4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079733, "uuid": "4196905e-cf96-4a7f-8133-0d38bf4915a3", "value": "T1202135916B36BCB82CCC415DA1AA802A7046032F496B2F5874DA9DFB1F0D480F1D4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079733, "uuid": "feaafdfb-9fad-48e7-92f2-d0b9c670df1f", "value": "24:VUeYj+H13UbEDMK9CFdYhEnHQBYcduuD9I5TUbDNuUbDNARiy3AnQZaZl1cSRs/:VUeYj+H1rDMK9CnYhEkDrpuiywOjSu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079733, "uuid": "ee9bd59c-02c6-4579-a9ec-6d82e36a6124", "value": 1227, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079733, "uuid": "ce0818ef-92c0-4347-afce-78ed7a7df683", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9a66f29-12ca-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079733, "uuid": "db674685-2290-479b-98c7-5976a21d6766", "comment": "Malware payload (Mirai)", "value": "491b78b14dad236a20654b42629f1950", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079733, "uuid": "d9e4ae3b-1e7c-4ec8-847a-ae8f26974689", "comment": "Malware payload (Mirai)", "value": "1941d079381cc9937ce5259d0219144ebb1645bf8a500ba9d31288c45f9439fa", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079733, "uuid": "efc72fad-7852-40f8-b50d-5edcb86d7ce1", "value": "T1A4319B9243227D3C3CC661DDE1AA4056A049821F05FB6F7474C9AEFA2F0D440F2A8F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079733, "uuid": "17b7123f-ac13-49fa-91e1-4b836668d81b", "value": "24:VUeYj+H13UbXDMK9CFdYhEnHQ6Yl60mOD+nl72tZ9Hg9I5TUb7UbrR2QZaZl1cSu:VUeYj+H1CDMK9CnYhEK0U3lg+jjSu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079733, "uuid": "22d05741-4b5b-48d4-aa5b-d573ee5111d7", "value": 1476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079733, "uuid": "3c53cf7c-2645-452c-aa3d-c781d126d035", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9a67bbb-12ca-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079733, "uuid": "ce616910-071f-409a-b41f-cc541fb7cebd", "comment": "Malware payload (Mirai)", "value": "a0676e759d8aaa966afacd0abcd1dfcc", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079733, "uuid": "648fad87-2583-458b-a3d0-27c691f71a44", "comment": "Malware payload (Mirai)", "value": "ebfd8dc756fd0b490fe0f383a4bd0ede36a86335eced53f47ef13baebf6746d3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079733, "uuid": "cbec7a9c-b322-4dff-aa96-f684b5d49a38", "value": "T1ECE022FC00768AC7030D06E0706585FE262C1492AFF04E18C1866DFE1C2B5A8388F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079733, "uuid": "abcfd847-3d1f-4ed8-adb5-d50c74b8d9aa", "value": "12:YO92J9tLxUbc4Ub9HCY9dYLxUbgF84UbgFdHan:YO92J9tLxUbHUbUY9dYLxUbAnUbAAn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079733, "uuid": "2530f3aa-381a-490e-8fa6-368704b75d59", "value": 413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079733, "uuid": "80810628-4e4b-42ba-82d9-e9badd0933c7", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d9b516e-f09b-11f0-8990-82aee05be84a", "comment": "Malware payload", "timestamp": 1772079733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079733, "uuid": "c89f5dcc-8c9a-4a8e-a1ed-f64c3b64f7c2", "comment": "Malware payload", "value": "7f36c1055b23492035234453bbc5628c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079733, "uuid": "46ec94ed-36bb-4ec0-bb2a-60cb2b8100c9", "comment": "Malware payload", "value": "0ffa6dafa8c65e522224da55752e0b4b8b5fb386719a866247e40e788f5fa0d1", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079733, "uuid": "63d0beff-4749-4784-99c7-8d6f40c3c881", "value": "T1B4118C816629ACB92CCC832DA3E758695086013F555F2F98BCDA9CBA0F1C540B150F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079733, "uuid": "ab1de608-536e-4881-a4f7-30888bfae2ac", "value": "24:VUeYj+H1QEDMK9CFdYhEnHQ+Yw9I5DKqRyu3AnQZaZl1cSRs/:VUeYj+H1QEDMK9CnYhEbSKUyuwOjSu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079733, "uuid": "b5f16ca3-ed04-467b-8ccc-3fd200e55f36", "value": 993, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079733, "uuid": "05ef0e77-a558-4b38-9b57-7890d7429cea", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0df7223f-f09b-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079735, "uuid": "1f9ea2cf-3090-48c2-b07b-8c4d892295d7", "comment": "Malware payload (Mirai)", "value": "2ac193c4242f3c436f06459c6652917a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079735, "uuid": "471a8d18-7b98-415e-a673-c72c3e03d19e", "comment": "Malware payload (Mirai)", "value": "dcf343df280816c4856ee164b9b4b14906a09b1fd4bfab604ee9370529ed61d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079735, "uuid": "074ddd08-9ad7-4884-8f8b-bbd12f3e2b8d", "value": "T124964B37B6A2859CC08BE1746ADFC5F3F974B4F40221206B27965A327F36E900F6D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079735, "uuid": "4c263190-a2e9-4a06-ba12-033ed0058da5", "value": "196608:R1vuK1Yhq6OdSDL8DCpWSjxkqgSzif3n4Vs:R1vu7c6OduSSzif3n4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079735, "uuid": "5ce1a552-4467-43a5-8c33-e8e84f6c51a8", "value": 9438680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079735, "uuid": "b1b90e48-d5d2-462c-a9f0-eb28c1027448", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0de7db58-f09b-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079735, "uuid": "ffd7be85-8f35-474a-aacc-3e5fd01c8aa5", "comment": "Malware payload (Mirai)", "value": "0c3961bac90a3ae8051cedd6c0ab1143", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079735, "uuid": "18244373-164a-465e-85d8-18cb5bcd647a", "comment": "Malware payload (Mirai)", "value": "0c4bfa96b30bf3046a70d8a0143ed419a7cd58b55091c85da619a8a22cd31e1b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079735, "uuid": "4c991b1c-cb6e-4280-b58e-2434016b6065", "value": "T194767C99FD0E3841F3CAE27CDE4A97E1B62B75A0D32780F37E92524CC59A6D4C6B15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079735, "uuid": "2a263927-ec3c-4ac3-8c92-db82a6203b77", "value": "98304:IB2FSpFA3Hvf+nMwX+CoM/Wdc5Gbz+2OqwbWiHP+yHqazWbY:1SGHvfpdQWdc5Gbz+2OqJUP+M/qb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079735, "uuid": "26e634b5-cc33-4e61-9cb7-59d176bd6fdd", "value": 7502504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079735, "uuid": "5e9bb26b-f496-46b1-9d5c-7474ad87ae3b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772079850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079850, "uuid": "867ad25a-97db-4384-8773-0eb9f3d463b4", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079850, "uuid": "79f2924b-7a79-4212-bcdf-ee796b8263bd", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079850, "uuid": "b7ad959d-0f80-407d-92e3-a687eecc9373", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079850, "uuid": "023a76ed-0f14-4ae4-b880-264a11adc694", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079850, "uuid": "e2e2ac2f-4f17-4747-b058-2df2f94fd70c", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3dcf5a-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079969, "uuid": "0d544d87-7b57-460b-9ab6-c5d1fe3b0e2c", "comment": "Malware payload (Mirai)", "value": "61d13a09a9fdd0ebfc89bb2eca95117e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079969, "uuid": "3d0d55a6-4e65-41c9-89d6-1b1ad9faf9e0", "comment": "Malware payload (Mirai)", "value": "9fbd9afe9593e557a71687a9509da9b90788f7a95e0eff7ff79691e3d6bf4673", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079969, "uuid": "6954dd60-59c5-4a28-a06f-c0eef72b4a15", "value": "T1D103F112CEE65E2D97A979766CFEAF4C0854130C8864EF37E6E6386B0922F5019394", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079969, "uuid": "bca64b50-4075-4d78-9aca-5aebee37eb3d", "value": "768:wF4H3lUrTc2nLZPsivlGXRRYPyU7DI79XXDvoZ0ipe8Rg+GHdfM9nbcuyD7UHQRl:mY3MPLhbWRY1IRHDgZBKfM9nouy8Hyl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079969, "uuid": "8cc8885a-357f-4a26-9bb9-5ca2e69a84db", "value": 40580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079969, "uuid": "2c70021e-373c-4f54-a1b9-449997e0c2c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad566ad9-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079969, "uuid": "367c7228-2012-473e-a6df-e0ee0e600248", "comment": "Malware payload (Mirai)", "value": "66a3b65a7797c78f290d39fa0f1fabd3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079969, "uuid": "8a5401a6-fdcd-462e-8020-dd218ee87a81", "comment": "Malware payload (Mirai)", "value": "6af9813c79842fe9e490f043d7eeceb1bcc35adec81d8dcfae947911ed146a7c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079969, "uuid": "d9630c57-ac7f-41a4-9f68-c5c7e8eafce6", "value": "T15B13E0DCB89FB889C99D0CF58592835DD689F280B6856F8F23160D1CBFA280FB5995", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079969, "uuid": "9b3cb604-b34e-48ee-9215-1777b201fea9", "value": "768:/RZe/ZCbkHnlrbF/8sgZHP+493V38GH5LbkVEGwrfQ+uWSWn:R2UXF+45V38GxPGw0+um", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079969, "uuid": "74278ac6-3295-46ad-838e-f5aae311f4f8", "value": 44060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079969, "uuid": "a5dcd498-9d22-4ac2-91f3-0ed1cc4a46f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad6257c8-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079969, "uuid": "dd43fe5d-3cef-43b6-9131-e5c1a7aefb94", "comment": "Malware payload (Mirai)", "value": "340be7a17cdafe24bcacd74d1a4f5c81", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079969, "uuid": "08904d0f-688a-48c9-bc1b-cb61b0862603", "comment": "Malware payload (Mirai)", "value": "7445d99bf22ba85941422f08ed5d00411b34366cb97188c2ba0f08d07242634f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079969, "uuid": "ef7c848e-fcb7-4526-8067-40852fa8b35f", "value": "T1C313F111E8876532B661B830DC73069E7CA56D3DA05F203915E5C3B83B53E16B8BB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079969, "uuid": "1e1b8ec2-a9a3-4d0d-9b33-a056e91f1f3a", "value": "768:iF4H4deo0G4I2nB/HFJvlJROGzJ5P483SdF5VEjEywzC4Rn1JAIvU9q3UELkz:G41B1BfjHROGV5Pl3SdtEhwwIVL4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079969, "uuid": "b8802fe8-c0ba-47eb-abbd-750cf3675bef", "value": 43784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079969, "uuid": "189dc0dc-8f05-4614-95ad-da55621f27bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad40f36f-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "b92f2832-1977-41b1-bf44-2ab05c3e5515", "comment": "Malware payload (Mirai)", "value": "cb91c152f3fd6dcd30df23c15b6e8915", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "a1d041d1-0fdf-4967-b917-1532e2990243", "comment": "Malware payload (Mirai)", "value": "5ee6fd11fda468178043f02cd15ca3807cbe4eaf6804bd5f02b91cac41b79237", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "395f9603-a441-48eb-8908-488f2a21ce69", "value": "T17203F1D08699C5CAC8BD537828F77D8E05B0F55AE0981E5ABB48639B53C3F60AF45A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "895664e0-de36-4f4f-bd8f-177f5010871b", "value": "768:IOKap9X7JLYANuIQn5Cav6tm57/b0dy2KK7QtwNu2/q86nbcuyD7UtQRjZ:Iu3LYANyn/S6bIfQtwN8nouy8tyl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079977, "uuid": "45631478-6f4a-4fec-830f-b3aca19268f3", "value": 40336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "06c74e63-4a3c-4b4f-9e52-930124c1bf7e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad1ae602-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "5a1353ea-d120-46e6-8281-6c84e30d2976", "comment": "Malware payload (Mirai)", "value": "6fdafa3e5e4c1752d01564a7cc9fe376", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "ab467b48-d58f-466f-a3ae-99f02c373365", "comment": "Malware payload (Mirai)", "value": "f78c72f80214a258dc7e69c06bc84f3175f69d7b5e49abdbcae67a9c225ca386", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "1d58742f-96b4-4325-b1c4-09be11414271", "value": "T1A713E12C6E7E54FDF85ED4FE5B7C1B112E4902A960425C0760A5D58A864FA3CF483E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "0bb7a840-10af-4134-a314-4d1b98384a62", "value": "768:IA2vqoP2Dt4eb/u6phzxIW42kcwk2DztHJZEafJgGlzDpbuR1J7P:IVv122Wm6p9N4owkYtHfdVJuBP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079977, "uuid": "2b530d9d-c384-432e-afb2-fb0021f5a39d", "value": 43244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "fc78bd34-3873-493c-8009-e6439429ef63", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3b2171-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "09547aed-1dc9-4f30-8ed5-20c0870a51de", "comment": "Malware payload (Mirai)", "value": "df7f4642adf41a85d995440cfe9ad99d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "96875067-761a-4e8d-9545-c0e0593c2d98", "comment": "Malware payload (Mirai)", "value": "92c7b4ef6daea605603fe3525305f7cc1af6d3338da514940877a92395f122b6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "e923c0ce-7db2-4432-8555-68c0170c273a", "value": "T189B2D07213C7F663D2B1983BE531824B374169FDE5EE327672196264E8D700B19B42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "ef1f0102-d3a3-428e-a9bd-fa871c036d08", "value": "384:y9NxpFFS+Zy7hoQ/vUzLHc9DcEaC5Dytmlkq8f4ZVGK9KZFF2p6BhymdGUop5hVd:QZScaP0zecxC5Drlkq4Mb9o2p6Bs3Uot", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079977, "uuid": "54cf6da2-478a-42eb-88a9-cc54515cf022", "value": 24032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "10b8f08a-2d4f-4dfa-986e-aa47b2a76ab6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad4b341b-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "0f82324a-ec53-4670-81d0-8d37a491b2d5", "comment": "Malware payload (Mirai)", "value": "e39e7dde0e8cda0b17fed3aed41af225", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "9132873a-5aa5-41e9-9d45-4246a905c3d2", "comment": "Malware payload (Mirai)", "value": "4561aedbfca0aed412e8529f61dbe69f3d6896410d4c20c82794349a792c0838", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "210ad96c-abd2-4b70-b74e-9c2a53651470", "value": "T1AC03F11CD4770880EB379CB15D855BC27BA10E0D63B9CB95A3B1B9CA4B27B11F52EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "a45848d1-cdb9-42f9-abcc-ccd080c4a487", "value": "768:0/O6+gxrsRrDE3OaH/i0sL3XaBwiWHbX7uSTjdmsgRo4uVcqgw0IT:0agJErDVaH7suBwigTjdms0o4u+qgw0e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079977, "uuid": "df6308a1-f52b-4c1b-aabe-4a102b998849", "value": 40024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "5442ae18-96f6-4487-8419-c15729275f1f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aeadd8db-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "02746bb2-f7f7-46b5-9523-a4cacec4eb41", "comment": "Malware payload (Mirai)", "value": "869777654173a2d8202df12b853167bf", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "6675f54a-c269-4ae2-a979-72601154bdc6", "comment": "Malware payload (Mirai)", "value": "ac8252ed014d64351f428943cd9a31ef7a716b2438d8aba8d84983ec0c23c7bc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "3eb58088-d518-44d6-8167-ed72e591d391", "value": "T14183AD73C86A0D28D44844F0B0A4AF3597A3E116C5972FF6989AC679D08BEDCF6423", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "82d5f7c2-8288-44dd-ac58-762679b195d7", "value": "1536:mcJrLx5PZB6AQezed2ujKeB2np24ybCn8FH/Smpg:msLxYOz2NGe024yb1paL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079977, "uuid": "67a59c45-4927-4c1a-a6a1-35a5b2647b34", "value": 81160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "2ba4a225-e335-43d6-8ef1-c14af263844c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aed2fcf9-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "7877b09a-be2f-46d0-a73f-b4339cbf796a", "comment": "Malware payload (Mirai)", "value": "a3cb2fa1461ef604099a184a971016b8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "4fb29537-49af-4455-8797-003498d782c6", "comment": "Malware payload (Mirai)", "value": "4e2a2a63f6d4206ea52688df473548e19b360ce9170a7aabea227a2a5d05d0f0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "e207adc2-0057-4ad3-bab7-053e326aa784", "value": "T16B03F111E381DC7CABB38D76DAAD0883D3DA6D3846F27577B902D054B680D0915FB2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "5e7041f0-09a3-4858-863c-b51b6a1623e7", "value": "768:+BQJo1T/oM6u+j8mjfA/lvywafEzTDpxKc7VPbKzhKND0s3Uozw8:+BCop/9TpmjrwaczTD7dp+EFRzx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079977, "uuid": "15605bc7-3c8b-4a94-9ba6-6d76a2e843ec", "value": 40952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "80cc9641-3b67-4035-a47f-c5c44197fe07", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad39cfe5-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "988e4a99-93fd-4382-9920-4c182ef34229", "comment": "Malware payload (Mirai)", "value": "7ef8b07a98579bcf724ae8d13c5a0c94", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "2f37417d-7fd9-43be-9059-b5529f5060d3", "comment": "Malware payload (Mirai)", "value": "f382191265fb58efbdf592a740f280003d932bf3b647b033dea29d1f27c21937", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "a0c857f9-0d98-4a49-97a7-c5e350831b14", "value": "T11C13F1AA630E46BDC022CAF6D0052590FC72695BD59383AA408771BF9CFFADD2D917", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "52c423ba-2ad4-486e-87ba-bd186a822e65", "value": "768:Yq6H1Y2jiF1D/2Dysfw3JqP6upHIc+SQbYqhkCiDCgGmxx07qp:2VNq2Dy2w3JupHa3XgGaOqp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079977, "uuid": "38fc2615-b4e1-4d55-9510-9616a4d66cab", "value": 41900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079977, "uuid": "2abafe58-6bfb-4fd4-ad79-165ebbe74c85", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad5a25f3-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "dea90ce5-9f95-4dc5-aa09-eb849ce20b5a", "comment": "Malware payload (Mirai)", "value": "b6a4435a2557242f548ae8bfc86305e7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "154acdaf-fabf-4312-9968-75ef39b5a8d0", "comment": "Malware payload (Mirai)", "value": "7d623e46695300ccb07b19e5d9835518737251483ec1dac12fbab8c57d1dfe11", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079980, "uuid": "13a5a650-baa0-469e-bfba-aa0b02909aed", "value": "T16503F1085DFA9753C069E37336DF39B605548B06F84892A26B907A338C18F5D7638B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079980, "uuid": "dee48a40-e61e-4cd0-8898-266a77299291", "value": "768:r6axCXJjoBDqRIdfNAPOzv9ZJ1lrVqH5M0eSIBnbcuyD7UtQRjd:TIs2RufNQevxxCaRnouy8typ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079980, "uuid": "b2a377c9-e49b-499d-bd52-fbdadcd2d970", "value": 39372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079980, "uuid": "38809ec0-f79c-457b-a768-2f94e1fc7e96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aed3d921-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "6c61924e-b703-4277-8a35-feeb03419577", "comment": "Malware payload (Mirai)", "value": "db39cf1c31c6e3f00ae327050b710603", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "2b601075-c2d4-469f-be2e-7992666ec970", "comment": "Malware payload (Mirai)", "value": "5bbc4a44267775d5268c97ae7a036d330cab86e85908b942ae1feefa7bc4dd09", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079980, "uuid": "fc3ff06c-f64b-40f5-8c2f-56ec0a552f98", "value": "T150935C22FA79193BC4C4A87762F34726F2F6434B24A89A1E7D720D8DBF1465022977", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079980, "uuid": "0b361ea2-7922-4062-be6e-fa59d2b95d96", "value": "1536:GimLxksVEmbNzO5eIgmL0LkOUxYA6tJlaq5u0qQ7Z5t83Sau:xW9OiHUKDla6uP8au", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079980, "uuid": "4459201e-7d2c-4392-a53f-5e09a21854b2", "value": 95056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079980, "uuid": "a48614d7-1b55-4213-98e4-ff113ef689b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad5df4f1-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "fb3082da-1735-4630-97bf-d4ec8d647b99", "comment": "Malware payload (Mirai)", "value": "aad5febd612abd25b39e8aee68d96156", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "76653339-ef56-4ca8-8a7a-32cd67cece1e", "comment": "Malware payload (Mirai)", "value": "234e296e7f319dba55ea49467e8c3be28425a1ddd7d4343498e76ee684e5d0af", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079980, "uuid": "83893e20-1b1a-4499-b9d5-7bc36aad7f68", "value": "T1C46302BDB9282AC5A5315058EDEA0B8B176F3736717E9F913A152B3C92C3162A06D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079980, "uuid": "a2a1b1a4-d954-41d7-99e4-f91cebe5d189", "value": "1536:QVEWVnm6zBOpwwFH7cpoKseLQWLqdFisFYRLCR:QV9FwpwqH7cpouLJ4laR+R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079980, "uuid": "f9deacca-3105-41ba-bd0a-7bb17463ae10", "value": 67036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079980, "uuid": "e985bcad-8d43-41ed-bca7-646aa13ccd56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad529c1a-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "1dafa6d6-11ab-45c7-b02a-1abf3d2f6c98", "comment": "Malware payload (Mirai)", "value": "c9f63e23b8242bdbcd01e6741e2f3125", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "1f876d82-256e-4f3c-a342-87fda7f359b6", "comment": "Malware payload (Mirai)", "value": "5d21226b83aa3cde424e129e75386d594dd43a08ed628dbd41c3135dcf0c128f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079980, "uuid": "c76444aa-52e0-4606-9421-6e6694fac3df", "value": "T13FC39D87B78B14A0C4624AF013C71F9D6B53A211CE5FE8E3AC1E763F5A7A4DB19163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079980, "uuid": "a8634381-bb76-4b46-b21f-67a1411b821c", "value": "3072:DAQ+rDaJ7MbzumvlSZcYKrpxVSoYJgFq:DGHaJ7G9vsZKrB7q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079980, "uuid": "2660342e-747e-4515-9d55-548c7ca6c17a", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079980, "uuid": "63754f21-d709-4197-ac50-800e47534b56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3e45dd-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772079984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079984, "uuid": "b47649ce-802d-4b93-a966-3b92756b33f5", "comment": "Malware payload (Mirai)", "value": "0b15626e8ff376639bf467f9e46e9c8d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079984, "uuid": "a187cd15-893f-48ae-8c7c-cdc5f646bfe0", "comment": "Malware payload (Mirai)", "value": "e0aa2740d72df4bf227c0e5313225a116918c57e9b031cc2391fb042384f9fcd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079984, "uuid": "319d7151-1ce3-4965-b3d6-87292d5b8a6f", "value": "T18DA338D7B801DDBDF80EDBB744530506F531E3A219831F36626BB967EC391A81826E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079984, "uuid": "d3e0a69c-defe-4cb9-b46d-6d4abac65bf2", "value": "1536:Nw3pWv1rOLbQYrLDeXdY1Tr6B6k28IxTLgOelRUepbf2TyNo4SN4xeY3:KLMAU4TOB6k2ORtpLHSN4xH3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772079984, "uuid": "a9da5f81-2c41-453d-ab3a-f5952d09f1a9", "value": 98704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079984, "uuid": "8039ea95-0f75-4f89-8e6e-44b0e30014c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b0188b6-12cd-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772080862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080862, "uuid": "e7b4eece-35ed-4c0e-98e0-a650f0118dab", "comment": "Malware payload", "value": "09bf55974515db132a0fa9d60de2e535", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080862, "uuid": "71447018-3046-44a8-bef7-44857542e7e1", "comment": "Malware payload", "value": "971a6711f1dc5fa1b5d66a43a531bf687fb36a800c9ad674adfbae2417f82bc8", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080862, "uuid": "3b390248-5099-4102-bc94-a3c80983ce66", "value": "T112F313608AED341DF496F116B2CEA91DD2349D70B73B0F3E150AC6053E2B0185AAEF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080862, "uuid": "8a979d61-002b-491a-b3cc-e295cc318798", "value": "3072:BcLW4sCK4G+c0kfVN+p/Vgs0PtPUSAeLs39uU4Nq5d47f9nS3szP+HcPXz19EGdS:SLBsCPGDWpGswtPUSAeLs30Ueo3uPWko", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080862, "uuid": "9213bda8-8a0f-4a9d-af47-64c105ef74dc", "value": 167936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080862, "uuid": "b94aec23-7ca6-457a-b602-14c4c3820add", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e9b685f-12cd-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772080869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080869, "uuid": "5a13d763-9e8b-420a-919e-09b20cbff69a", "comment": "Malware payload", "value": "a87deafd9b4b8c4aa6fe93e2eb9eec4c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080869, "uuid": "5f746ca2-7477-4359-a96d-5e848f51bb8c", "comment": "Malware payload", "value": "c8e59338f471e255a40e13ef810db7db98ce018e417211ca0bdf90ef8cdd3894", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080869, "uuid": "19470074-0829-4092-924e-8344e0b82a68", "value": "T19DC2C547B661CA34C8C5E2B04D9B8571A5F3B0F04B35B31B7A4567797D903CC2F1A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080869, "uuid": "5ae8c4f8-b79d-4c7a-9da4-3b39555e3134", "value": "384:SJ3aDdWwcR4zp+sZxNq0muflYnm1XHPMLVLdUKhmMEb:SFuLKmhHPMRLdUKYME", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080869, "uuid": "c7fffd36-6fd3-4862-90c9-cc80f066223e", "value": 28239, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080869, "uuid": "2ac3329c-6d12-4601-926b-6b8a84a19717", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad2c9005-0ffc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772080870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080870, "uuid": "c21da70c-720f-4ca1-a1dd-227bdda52038", "comment": "Malware payload (Mirai)", "value": "0825c98d7f07289fb5de62fc5a53b9e7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080870, "uuid": "b9424018-45f9-46a9-b636-bb33ab48d238", "comment": "Malware payload (Mirai)", "value": "8bdba7a223775f6263e5df609095d4340e8e6e2eeec616f4175ecdf281076a68", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080870, "uuid": "1d8dab1e-2bb2-48ce-86f6-5ae5888dbacd", "value": "T161D12EF6B486127CDD9FC83A915129BD1189B98B26871D688BBE30757C89FCC2C45D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080870, "uuid": "676ef93f-5040-43f2-9826-699ba9d905c0", "value": "192:+j3mBp+OBq6Vp83rSC12mMk7sAIgnAEbPOZRbPOZRwofI85NwDHWGpii8Ur8w9xO:+j3mBp+OBq6Vp83rSC12mMk7sAIgnAEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080870, "uuid": "8dcb418e-51ce-4347-92b0-5b12ad50c136", "value": 6359, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080870, "uuid": "84512e4a-0c38-4b64-bcf7-cd7858ff5d57", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b150d416-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772080872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080872, "uuid": "11f502df-a2e2-4f15-a6de-a8d5d8eb4f1c", "comment": "Malware payload (Mirai)", "value": "3f14f70fb436d9e653f67155a2ab286c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080872, "uuid": "53ecf878-9c8b-4b30-96e3-d8e0a5adf6ed", "comment": "Malware payload (Mirai)", "value": "519fd8d2deaa7fe789bdaf93961364ef34d499a2bb85577bc5e2de36244afa00", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080872, "uuid": "75936c79-1229-400c-bb7e-fa7788210d54", "value": "T1D304961E6E228F7EF668873547B74E24975833D627E1D684E1ACC1106E6038E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080872, "uuid": "f5af73f0-1695-4282-bb94-e55df436e7c7", "value": "3072:NkZ4LL6auDHYeqrJAefp70uxy9PSfJy7tsqzk+dAKRDDQWTIJzk1l2Z:6ZcLDuDHY9JAefp7dxy9A8ZBRdtDNIJX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080872, "uuid": "8fbec93f-04be-48d9-a657-e914c255dcb2", "value": 185848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080872, "uuid": "2df7d09e-e1fe-4e5b-a6e8-5f1dfa0a61e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6091d37c-12cd-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772080872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080872, "uuid": "09195fa7-a922-44d9-b9c0-6c7de1e1301b", "comment": "Malware payload (Mirai)", "value": "ae9df8691f3e7f0b5aab7a1c5244beb0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080872, "uuid": "ea8eb16d-e577-47b5-93e2-21020827f02d", "comment": "Malware payload (Mirai)", "value": "757ca706bd74a27c83851404afe8d58e868733e831441c8ec1c38a088d7038d6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080872, "uuid": "16839ba7-6705-45ae-839c-7840a3e5ca96", "value": "T11FB38FD5E247E8F2E85705B02137E73B9B36D07A6129FA42C77CAE31EC82941C517A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080872, "uuid": "cf8ec586-dd7b-4271-8203-572ab1ae9aad", "value": "3072:sHFrgGYY2m/Cnqr8S4vGBl15pDk1a/zPIwQEYez5:sHZYYH/Cqrd4OBlhf3QVed", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080872, "uuid": "bd2d8f75-0360-44f0-9005-96ccf16e83a8", "value": 116936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080872, "uuid": "cb7cbdd6-0b13-4666-9a0b-8d5ea9883866", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "620687db-12cd-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772080874, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080874, "uuid": "d55bf8d2-3069-4d62-85fa-8ddb3fed4d5a", "comment": "Malware payload (Mirai)", "value": "0a53b1eb820f426ed6497addf1a9a7c3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080874, "uuid": "0252bdef-e326-47af-b252-3218ca94f115", "comment": "Malware payload (Mirai)", "value": "942fcee6e6ee3ac530608079fbaa88c9e654cea683386e45323f3db695714385", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080874, "uuid": "4bebd959-3bda-4604-b64c-9424cea0ac77", "value": "T19531BF8253227E3C3CC565DEA1AA4495A146922F05BF2F7474C5AEF66B0C440F368F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080874, "uuid": "1ff8cd4f-3294-4ab7-88bd-1e372d5bcace", "value": "24:VUeYj+H1geDMK9CFdYhEnHQ6Yl60mOD+nl72tZ9Hg9I5M5GR2QZaZl1cSRs/:VUeYj+H1geDMK9CnYhEK0U3lgl5YjjSu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080874, "uuid": "f2cd9e5c-1bb4-4ecd-8cd4-7a65aad3177b", "value": 1473, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080874, "uuid": "43a26b7a-5283-463c-80ca-2f7f6804c096", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "635ee5c2-12cd-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772080876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080876, "uuid": "47924083-b72a-4c58-92a3-1cb9757b651b", "comment": "Malware payload (Mirai)", "value": "9c39072c6984817336178bf889e186b0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080876, "uuid": "76394903-f593-45a8-bae7-60226ef1e911", "comment": "Malware payload (Mirai)", "value": "0bdd42672c0f44295c963ef75642ff6fa95bbada4d9eb3c08a29d1aac4eb7caa", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080876, "uuid": "b9c8b795-06e8-4326-b1b8-eeb4db3f7a09", "value": "T1622102816B217DB92CC8456F62AA54597142132F492F2FA4B4D9AEB71F0C480F2E4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080876, "uuid": "4cb9a293-98c7-4969-b4fc-b51f12033494", "value": "24:VUeYj+H1gPDMK9CFdYhEnHQBYcduuD9I5MCPCARiy3AnQZaZl1cSRs/:VUeYj+H1gPDMK9CnYhEkDlCPCuiywOjJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080876, "uuid": "1a1d1a39-34d2-479f-80dc-fc3aa50f7d09", "value": 1224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080876, "uuid": "a839ccb6-23b4-45fc-a1c3-321dae41b54e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63668c86-12cd-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772080877, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080877, "uuid": "fe0bee35-3e74-4ef2-9fb7-27ea61381fda", "comment": "Malware payload (Mirai)", "value": "27557d1b08989e7a6e1845d9592aadee", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080877, "uuid": "d0894b68-7cff-4dd4-be21-984e36420fee", "comment": "Malware payload (Mirai)", "value": "8dbbbcb6bec05f619f39a4bd5715e5f7270c29afbacad1fe831b6d3a8e7b7aa8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080877, "uuid": "ba2ad846-43dc-4bbd-af31-270be413f85c", "value": "T17CE092E820354FD3534D0AAB216508ED132A3520AFEE0D66D1C07EBE902A8B87D8F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080877, "uuid": "5a70cfc6-fadc-4b38-b373-aab6de798db6", "value": "6:Ygv9CJJ96GesqslN6lfhslNG6uNOCY9dRLGesqsLKFYlfhsLKFM6uNOwvn:YO92J9tLq1hYHCY9dYLq/F8h/FdHan", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080877, "uuid": "4b9fd254-5b0d-41a3-8bdb-b2e143adf8dc", "value": 409, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080877, "uuid": "5df472f3-09a2-4ff1-bb43-80fc6220aa3f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b15e5db8-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772080882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "4b7386cf-edad-4b8d-991b-5babb95ee716", "comment": "Malware payload (Mirai)", "value": "bb5b79c8bb2fe12a3a67ffedfbd2b0fd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "6834e2db-5a37-4cf3-afcb-d631037f74ce", "comment": "Malware payload (Mirai)", "value": "95306150b2d778a66b13daa5e016e225e6eed6d812e81ad4fe8f702eeaccecb8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "49b5c760-9f39-4440-a5ef-be3bfc581f29", "value": "T12EC35973C8166F68C565A570B0A08F782F53E59492431FBE6CABC2B48483D8DF605B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "2e919f05-4781-47be-b957-7170e35f922d", "value": "3072:D0hbbqpvMeFXphS8sVFos46Hx3WpP6Ei12:whHuvMgLxsVF1ZxGpyEi12", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080882, "uuid": "1dbd68d2-4c12-4353-869b-f832ae5db2c7", "value": 125600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "9005bdce-1dd9-4801-b40b-187e2d9d09d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1413597-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772080882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "9eeb5af7-c7d6-4641-889f-4b00b9a8cb98", "comment": "Malware payload (Mirai)", "value": "ff18cc44d8ec72d8010d3b9af7208690", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "67e1dbd1-c45e-422f-8b8c-1c5d70d7805a", "comment": "Malware payload (Mirai)", "value": "61b15f7287c7569bd3da8a7d7da1a27a39637b7001e3af91045b7566d50c59b4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "21cc8168-bd54-4e40-a3b0-8a48375680c6", "value": "T1B113F751F842463BC2E0177AB6AF5A8D336563E9C2DBB21BD9218B103F8651F0D67F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "7e51f6d8-c543-4ddb-b694-0f8c31dba950", "value": "768:dCW2LfdqM45LVBA0G5J2CPH3zyLrKJCc5Bol9AURmfZZKg8VBoGeuyw1K:4v9413G5JtPX4GT8FSwXVeuL1K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080882, "uuid": "c9d3760e-439a-4679-9d6d-2354e211e53b", "value": 44824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "eb59cd48-e60f-4338-8f48-02d3662b6e6d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1575b03-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772080882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "e87d56fc-be46-4a2a-ba17-b79c3184c533", "comment": "Malware payload (Mirai)", "value": "a3a01ad05fa10b42409b9f6b48e40e5d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "432be3cc-f28b-468f-8d02-27ba5e746458", "comment": "Malware payload (Mirai)", "value": "28fc7f9f1587e43c90368c8257295bbb7dd3b053b16f5b19c1c8c2f0b5849f3f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "4abd2e05-4c20-4ec2-85be-338452ee3750", "value": "T156E31A56F8818B15C5C111BAFE1D128E37231BB8E2DE72129D246F707B8A97B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "ce83bd03-6947-47e0-a3de-1d2b41e42085", "value": "3072:TcFkrqwVxUMCbBqthVK3z8avWtOUaf0hzjp1b:TukrqsPiqtDK3waqM0hXp1b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080882, "uuid": "27535d10-7b22-4063-abc4-1e2a2e70c486", "value": 152444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "5fa3801d-756c-4d24-a674-5e36e61e5488", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b119c9fc-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772080882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "8e1e90a7-68d1-4735-a357-3a2fe08f7ea1", "comment": "Malware payload (Mirai)", "value": "3039e9e64d78fdcbf56481bebbcb9eff", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "b640620e-a3ed-4cfd-a48a-69d0aa6525a0", "comment": "Malware payload (Mirai)", "value": "1803910980685646cd1903858ddb5445dc1285800ca3af8a0c7f074ab8942cab", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "c6cc6d88-ba78-4cef-b51f-bc6b4f829d5f", "value": "T192732931BA760E27C4C1A4B621F74B25F2F243CA26ACCA1A3DB10E5DBF716502517A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "01bff557-1bd6-43e8-8b94-2ce1d51fdd33", "value": "1536:senZA+YFqLywGgWgU2UJdUKbVQJtWc75StJepVcc:7ZsCpAukcVbVcc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080882, "uuid": "53600cb8-3adf-4ed0-bd7c-a2275186a0c2", "value": 76704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "d31eff12-d10a-42df-b013-935dd6cb14ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1448846-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772080882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "1c147cf4-092d-4d1d-9561-9ba7a05bc93f", "comment": "Malware payload (Mirai)", "value": "048ac98c7d60b6f237a1818bdbfe5ddb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "0360ff93-1330-469b-9826-f701538b6aea", "comment": "Malware payload (Mirai)", "value": "9e46fbfaa3baa10e3f83babd6858c851a6f0c300e269ff760b64d954d7451f62", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "f8847a8c-5a70-4d66-9058-13a20e73fdb9", "value": "T199D30A45F8414B23C6D512BBFB5E428D372A17E9D2EE7207DD255F203B8686B0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "4b65e4de-b740-4439-b3d7-f8a47df2967c", "value": "3072:K52ZIkT3Uh0JofYwjCIyHEzt8lez83412:K52SkTGGofYwjnykztN83412", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080882, "uuid": "c5a7d654-3a0f-471b-a46a-af004f99d563", "value": 141920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "af8e28db-a14b-4c8e-80a6-8752783dea4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b12fe7a5-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772080882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "64eaa391-448b-4800-af67-4f7c989ba233", "comment": "Malware payload (Mirai)", "value": "9fb9ec403b4ef2f8ab7e5c57f78fbf6a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "636f2750-b531-4da9-97c8-d994ca8b21b2", "comment": "Malware payload (Mirai)", "value": "f6100a591568c2a0c68c8cd9b9d62481e391407feea416de19abd63926dc37ec", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "d1fd5f46-7ed2-492b-be34-ba877e792f7b", "value": "T1CFD32902B31C0947D1A32EB03A3F27E193EFAAC121E8F641755F9A8A9271D375585E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "7a688092-29af-4def-bb1a-f6da44c5c191", "value": "1536:l6efD0MC6+RoB8Bwwx7b3mxFVkRFuwuZ3i6oAj/Z+dvADdZGaVKjp+qDIy+uB1Lh:AGwI+RoBm7CxIuRi6b/1DOl1Lh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080882, "uuid": "4f748682-2b63-4fdf-bcd5-66ab27e4ec3c", "value": 142040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "b8d2bd94-61ad-4e1d-acbe-5bb09558109d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1316d49-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772080882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "6d387885-a1e6-4514-b37b-2fb6aa1d5400", "comment": "Malware payload (Mirai)", "value": "7f6298c63861b1df6882c5ba34ad42c9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "0d3e931d-bd45-4aee-afb6-b3b7352c8d3c", "comment": "Malware payload (Mirai)", "value": "dd4f0c9c6acea5a60a83b84f7b30352351af85d7bbff45f9d0b831251631d6af", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "436594e6-295f-42ee-bedf-f182418bc591", "value": "T1D804D71AAF660FBBDCAFDD3702E91B0139CC544722A47B763674D528F50A50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "ae181463-dc98-421c-baa6-ab271636a1d4", "value": "3072:KEDlQ362+jjN/xs6moCi1diHw0Ck/deIHROb12y:KEW362+jjNz1diJCkMkG12", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080882, "uuid": "3886b28b-a92e-4fde-a972-d137f0f89b6f", "value": 189944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080882, "uuid": "a3d8ce94-790e-4ab5-8c0d-0a790536118e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b150621c-127a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772080883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080883, "uuid": "a920b4be-e509-4dd0-9ef9-ce2675e2b4b3", "comment": "Malware payload (Mirai)", "value": "4bac103d26a560d9725c1409491893ef", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080883, "uuid": "bfbfb7dc-70a8-416f-b880-5d3e03d78069", "comment": "Malware payload (Mirai)", "value": "deac67016555e26f43638b47f0eddb61337a33583555e1b4e0f4aa91202988a1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080883, "uuid": "86dac2f9-9c91-4d3c-90e9-7eb0f89035b2", "value": "T12FA35CC4F643E4F5E85305B1103BE7365B32E0B9112AF643D379AE32AC92652DB16B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080883, "uuid": "8fa568a8-b68c-475c-ac1f-0f3f6059bc97", "value": "3072:YqRrQraDHgi2NVsgH+EaBtZ9XDPpEWYJ:YqhfDgi2NmNxEbJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772080883, "uuid": "05a27f0c-295a-4a3b-83b6-7cb1164cefdb", "value": 99432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080883, "uuid": "137ad1b6-a31c-475e-b6f7-9ce79e0a41e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7605b42a-12cf-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772081767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772081767, "uuid": "b24c1c0e-d330-4477-92ad-913f4e03a9a0", "comment": "Malware payload", "value": "3febf29c327bfb4f44c7ac9c9f1b12b4", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772081767, "uuid": "319aea83-2891-4307-8517-24e97d7add18", "comment": "Malware payload", "value": "a813dbdc6afb8a817101d09e7793340afe20c6f73e762a425bf62a9bf62d3d9e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772081767, "uuid": "a2205a5a-723c-40c2-b3ea-421feba386c1", "value": "T16EC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772081767, "uuid": "61361bbf-6d67-4d52-901a-ac8fc6840ea5", "value": "12288:n+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byVH9I1P0QKw6FEd:n+QqldA/TSO713u7xnVH9IaQKH4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772081767, "uuid": "e8107c5a-7f58-4d68-b425-158dd49fe157", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772081767, "uuid": "e1b97d52-a3ad-44c8-a663-063bd61c8d5e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "761d2911-12cf-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772081767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772081767, "uuid": "a20d4b1b-f8c4-4572-9339-75f25ad5244e", "comment": "Malware payload", "value": "c9ef9d9ec41a1a89b1a1d8e7a37153ff", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772081767, "uuid": "647a3aa9-0baa-4e07-b274-a7d5fb1d8ad9", "comment": "Malware payload", "value": "0806b7b123a702ece543c7154404edc065763818ed56dd961492fe2b9969a031", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772081767, "uuid": "b5ee42df-8a3c-4da3-9607-11a5544767e6", "value": "T18DB423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772081767, "uuid": "7b3cdd84-05f9-4cf5-b047-adfaa4c27d15", "value": "12288:hkmht7DrvdyiBCCH1oHF9nJ/qjuy2goJrrzTPwkL:hkmHzMqH1ELnK2goJnn3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772081767, "uuid": "3af59d73-325f-47f2-9014-544483cdc93a", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772081767, "uuid": "ce878b7f-1dce-425e-bcbb-25aab3dd9f63", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6dc9a5e-12d3-11f1-8369-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1772083567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772083567, "uuid": "d508560f-ac54-4259-ae10-580183f307f6", "comment": "Malware payload (RemcosRAT)", "value": "7998aa5ec5515ae80a5fcb6f246e6bef", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772083567, "uuid": "9e8110c3-4edc-431b-b477-44ec6492cd56", "comment": "Malware payload (RemcosRAT)", "value": "4f0c95a1885411100649bf8150c2f189dc0941ac569b801b3765d1ca64b760dc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772083567, "uuid": "9b0152ff-a385-4dd3-8b9d-2ddb41020ea6", "value": "T148B4B001B6F2C172D976A4300935E774DEBCBD201836997BA3D61D9BFD30150AB39A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772083567, "uuid": "e1553342-fe9d-42c1-8595-49b0b5c618e3", "value": "737fc4be4f9f7d7c06c790667c9f7669", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772083567, "uuid": "1ccd6aa1-af98-49c2-a652-5205e0ee95c1", "value": "6144:2XEE+QEZJvHVdFjl0WGYB+cvbWvpB+qADnN8XIniCrVSMXcvOsAORZlAXiBcea:sENlHV9FGeDWv3jADnyYiCNrsPZlc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772083567, "uuid": "2449dea0-d0c8-41d7-9f48-c97fa2b7cbc4", "value": 528384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772083567, "uuid": "8c4b3ad7-5511-455b-8490-507d53307054", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25849bd0-12d4-11f1-8369-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1772083779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772083779, "uuid": "16252fd3-0d13-4f61-ad9a-4d8934cc25ff", "comment": "Malware payload (RemcosRAT)", "value": "231e7b516429326b9084b1772ef77d98", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772083779, "uuid": "fc7e6941-f25a-4ecf-bd50-bdf81429c839", "comment": "Malware payload (RemcosRAT)", "value": "1bd50faa3a761deff7f9b94efb42cac9ee9b074e5296ec721a089f34af9e972a", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772083779, "uuid": "b2d1d545-7015-4ee9-9475-f57a5220b5cb", "value": "T1DF5501642796DD06C36D433158E5F17897B59E97B120C20ABEEE3D97BB2EF110A823", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772083779, "uuid": "36c5504d-a39f-4e9d-856a-bebab17c6328", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772083779, "uuid": "06d8adf4-571a-4869-9933-8739b91b681c", "value": "24576:CKSrMii7OCuCJZFqFJChgncP7g17XAmYYUWHSkyAN1xI5aO:CK2MiRCvZFq7nc817XAfY5zNsU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772083779, "uuid": "1362c2db-a5b2-4c2d-93b5-bcfd8829d306", "value": 1360896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772083779, "uuid": "ca4fb2d8-bc70-4a62-9d7c-ece3b56000da", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77a63b1b-12d5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772084346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772084346, "uuid": "3878c1cb-a318-469d-9338-3adcf8052a0f", "comment": "Malware payload", "value": "051c11e6509b1062037e31d0872806db", "object_relation": "md5", "Tag": [ { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772084346, "uuid": "20450032-8926-453e-8083-88d020a760ee", "comment": "Malware payload", "value": "134be0dcfe116c98f9897bc564d464a7e688fbffa3ea7dfe8ed3b0405aaf7b44", "object_relation": "sha256", "Tag": [ { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772084346, "uuid": "1d822174-f710-4a38-9699-54724e482c1f", "value": "T1AF348B336383FDCA1B3A2D40A5043C525C9D6DE7ABB5096CFA813A9921E6604DF3D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772084346, "uuid": "07d15876-c5ec-406f-be3b-3fda45f6aae1", "value": "6144:KnQeR57hF7XophqiH7KijOiDMZ4DjV54vHUkhNOkHSDGfTALlqSDXLMeSV99dI:L4zJUSfTkkSDXLxg9o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772084346, "uuid": "2edd0ccc-f353-428d-912a-50b30955a5f7", "value": 244859, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772084346, "uuid": "da88ad0d-74b2-4d72-8fc9-19b374a890a1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ee95254-12d6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772084708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772084708, "uuid": "99463ab0-4105-4952-bc8c-4417c14c4557", "comment": "Malware payload", "value": "50c8412cf2711d0a3ca87e0ca73cd61d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772084708, "uuid": "d8be6dfa-b6f3-4953-b172-18b74402a811", "comment": "Malware payload", "value": "0a1d3140ac252aaa64e68b2b2c49ffdde0de5ea49799d39e8304083f887608a3", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772084708, "uuid": "93e19460-8b94-4d25-b018-8dd85c8e2ed4", "value": "T157A52342F8C485F3C4511C331B65A7616A7DBE202F268EDBB3856B1DE9614D0EB31A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772084708, "uuid": "a2458403-014e-4357-9b8a-c13d226b8af9", "value": "12e12319f1029ec4f8fcbed7e82df162", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772084708, "uuid": "15faccf5-7894-4b79-9077-fd2385ce3b93", "value": "49152:ABRMTpc8iYM5pF9UBB6jdLXsuuX4/cqZIiQx6lSONx:aSTFM5pXUBB6BLXTuoEXx6lSONx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772084708, "uuid": "3090cc60-9aae-4bd0-9f74-7bc10d3bc8bf", "value": 2110512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772084708, "uuid": "3fc0601a-5511-4405-8e8b-d5d48014bca7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b0589e9-12d8-11f1-8369-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1772085667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772085667, "uuid": "efc5201c-bd58-4493-9dbf-26fdb8cd1487", "comment": "Malware payload (QuasarRAT)", "value": "ea7b3224abaae97b3035ab359cc3f535", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772085667, "uuid": "59ef402f-5c7e-4e44-866f-296d6fab48f5", "comment": "Malware payload (QuasarRAT)", "value": "3b14aa95fb5d468da154bd025621032d05361fb22dd380a1399f067eea44dd8a", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772085667, "uuid": "fb39507c-b373-4069-8fe9-d43808399a94", "value": "T110D57B1F6DA548E5C46A9276DCB2D2823773B8490B3E23D31E507A742E726D09C7FB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772085667, "uuid": "b63d47cb-bc02-4e2f-a778-392a67f4d182", "value": "ebc247a77b4d4a804b261f97a1fd075c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772085667, "uuid": "250ecc07-6f6e-4b9d-b3b0-d7f81704b1a5", "value": "49152:69JVhMFw+Mjgt7+YiEFcm9BJjj7RdvZyK1RIh5w:69z2GGiEF59TRdgh5w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772085667, "uuid": "cc107afc-dbfc-4bf0-a93f-45d67a5c1abe", "value": 2963968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772085667, "uuid": "ca6eda63-8e32-4a92-86fc-3c9a08a8c388", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25753f0e-1267-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772086884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086884, "uuid": "8c117741-2c16-468a-80eb-93cdf861b314", "comment": "Malware payload (Mirai)", "value": "a53a4562413a863be84ac7264d9f29ab", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086884, "uuid": "5c372e0c-6ba3-4ef2-999c-9c7da8763f63", "comment": "Malware payload (Mirai)", "value": "7cdf9b7eb8e2e7d3348c078254983128382e292b94fc93ddc34ec57ff171b506", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086884, "uuid": "c010c1cc-ea20-4ff4-93c4-f9f10be4a78c", "value": "T1A203F751BC829A77C2E1137AB6AE4A8D336163E8C2CF7217DD214B607AD651F0D23F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086884, "uuid": "b2868617-5a01-4bdf-a215-17c381b3576a", "value": "768:AgA/wMCbXsG5f0OJnlUlcOlF5AdwAAb9XDWd2v+bAq77TEXoTN/NMwWY:AfWb8G5fblUlfbgeaUv+fE6HWY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772086884, "uuid": "48f76206-5dd2-43f8-a2df-1c65f1c32053", "value": 40752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086884, "uuid": "0ff2a36d-fcd0-42c3-b3a3-9b7f15d94cc0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a71bf72-127f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772086885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "a2ebc708-c0a6-4ceb-aca6-16be0a5228b1", "comment": "Malware payload (Mirai)", "value": "8076e5367e53a39c5b29585367850e4b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "9023f64a-3f45-4292-b3d2-1164536b1f39", "comment": "Malware payload (Mirai)", "value": "c3ef7574153f0c3bf9dd4d75f4526b2f1600e7163c312eebc31090b2546dafcb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "2def5456-3c4f-4411-b950-d270a149d35b", "value": "T1C7436BC4F643D8F5EC8705702077FB379B72E1E922A8D643D3B4DA32AC52651E606A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "a6e4c73f-4a3a-407f-b905-4f98bcaf6784", "value": "1536:JeESt/basV2rcZhG6ySN7naLlSR9zWOIaEjrqMZs:JeESt/basVTgS7naLQRVtXESi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772086885, "uuid": "5dd26a45-9d6c-4dd1-a0b3-b6cd96c62a71", "value": 55632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "80b8b8ec-4805-4b00-8951-3b0fe0c16760", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ea3f4b3-127f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772086885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "54fcf25b-c90c-4c18-98d8-f48103268174", "comment": "Malware payload (Mirai)", "value": "94481e61b6acf8c62b88956b649c0a7d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "99792a8b-61d6-42a3-912a-12cd2fbaf460", "comment": "Malware payload (Mirai)", "value": "268ca9e3b4cc912a7e177ff52c711398af1d926c31b28ba303ed72be15de1d45", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "4980e173-3cea-4640-8008-287c0bfbcbd0", "value": "T199633A21BA761E2BC4C1947621F74B25B2F143DA26ECCA0A3DB10D9EFF719846543A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "ce8cf379-0905-4cde-bb61-8bacb13c9f9b", "value": "1536:lGRaTYmol/hGIAs4PNvA7QqGm75123tSt7l:lya7hJGGmVDBl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772086885, "uuid": "ca5c5d71-6ecf-4f6c-b740-3cf25783d1fa", "value": 67320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "3a87803b-0657-4fb9-a880-e8f9561cd007", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5dae1e13-1264-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772086885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "ebe0898e-98bc-4225-b2b0-2a64fbc62ff7", "comment": "Malware payload (Mirai)", "value": "998c7e271432a9405051ddd1d778cac7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "97a8982e-b99e-4b39-bff0-c3bc5f865111", "comment": "Malware payload (Mirai)", "value": "61a093eba0b6f69662b6c385ebbb3566f483d90a1000f27cc62674fa1cb67bc4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "267cde01-c134-4f4d-a7d8-ef065f5de179", "value": "T144534B17B54280FDC09AC1744B2BBA3AD93775FD0378B2A67BD0EB262CA6D211E1DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "4475259e-1b69-47fb-a675-685f90d0ef46", "value": "1536:dpmbSQ6U3q7cCBT/lZsK/0DiQNLiKimfFoktCe3fYRMY:WShU3q7cEDlCK/0DV9i8Fok06fYRP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772086885, "uuid": "07d40827-7366-4583-b36d-54140887a5b9", "value": 63296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "ff9cf339-f197-4b4f-babb-39ac225ecffd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc9323f5-1283-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772086885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "969f06c8-d9ff-4350-a715-be708642bc82", "comment": "Malware payload (Mirai)", "value": "b2ae8da26fe88b5432a6790c09579cba", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "775c2673-d654-40da-a56f-534fed178b55", "comment": "Malware payload (Mirai)", "value": "035d44ff97ce79ee9847878983532ff0343188ab6c48e16b21a69ed154984f52", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "da9f0d16-d40f-40de-b7c4-2ce5711db1c6", "value": "T11483D606BB510FF7DC6FCD370AE91702348C594A22A97B367634D828F65B24B59E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "222941de-89c1-4cf4-b4d0-b22532d432a6", "value": "1536:iVLyu95Kuokj752dCexuV/8UZlDwfkJ4MYfWz:iVLyMgsFezxu5VD1e+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772086885, "uuid": "80739e88-16de-4a0c-93a3-2ee20af4a749", "value": 84780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "5bbb5bab-56fa-4a0f-8806-ec8723fe07b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b08daa4b-1277-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772086885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "8869cae3-a340-45e8-a998-247d8478a7d7", "comment": "Malware payload (Mirai)", "value": "000344c68880129e90ceae22a1709701", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "dd385695-37ce-4eb2-9a6d-7053120dcf7d", "comment": "Malware payload (Mirai)", "value": "284beacfb87f61dc15d3558bab24ffc9a07181d7345295f58e79080610452605", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "6a27481d-27df-4ebb-8997-87f1368a625c", "value": "T1EE438C37E96E1E74C04641B074748EB56F23B5C883972EB61AAAC2795483E9CF504F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "3ecb2481-5657-4739-9163-ff2bd8f08fc1", "value": "1536:Vaa0brW/Od9hlCR3KJwKYXwKEpPDCMC2+WP:Vv0brWGd9X5JXYypPDL+a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772086885, "uuid": "0447a41f-a686-4a90-859c-39c71811ec55", "value": 58740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "86ad83e5-e2b7-458a-be18-400507fe60f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7788f4b5-1281-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772086885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "64fab8c2-c4b4-45e3-9035-649becf3da2b", "comment": "Malware payload (Mirai)", "value": "1c3699a91ac0bdc769c517be614e28d6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "15bf86d9-04a2-4f72-b818-1a8c3e7c0e2a", "comment": "Malware payload (Mirai)", "value": "93d61719977e8fa9079eb13a5e3d6d15c0cce2a5209fbbb40c07433d5c9665f9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "1a46a9af-a58d-4c0a-a5d2-887c3464597c", "value": "T1F5534B02B31C0E07D0A31AB0253F5BD197BEEAD022F4F684656F979A9671E361181F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "e037e9e6-3738-42a2-9331-cec3dfbeb9dd", "value": "768:SEE5hjcoCkhVRGfRnbmX7/mG1nhG5UmtTy5EMXd/p9OyDQvSFRMNYL6FV+tg6wWH:+5HAdOmGyNtTAdtOyUaFRMNae+aTWIO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772086885, "uuid": "2533a94c-aeb3-4bca-aa9b-aa2d24710da5", "value": 62996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "4a83f117-5f20-4a98-920a-6aa45aae7efa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50862765-127f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772086885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "4a48eed5-5d4f-424c-aeb6-6f3a13eb6729", "comment": "Malware payload (Mirai)", "value": "8a16abb178dfa6b2335a4ffafe3c06c2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "55d76191-4acf-4db8-8fb0-1e772460550b", "comment": "Malware payload (Mirai)", "value": "b3a24cb6355026c0a5c8d0516bc9bfb0ece76a4870958277df2fd6aebcf97476", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "56f28469-8df6-42df-a19f-97d9df4d335b", "value": "T16B83A51E7E228FADF76D823147B74E25A69833C627E1D641E16CD6012E6034E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "4f8db3e1-04cd-4dc4-b111-6a7a10bfbccc", "value": "768:2ty6IP7M/kq0INRhfuN2Eo9tl/de2YIwHKRH0I84EH6UTY7ZDYovZ73x/nL8y8Qy:Rakdn2Eo3ePu5GTYRYo99Be037Wj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772086885, "uuid": "9154b38f-dd1d-4c9d-bb52-cc178d2f5a88", "value": 84780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "05839fb2-ea5b-493b-88b9-017ab20ce963", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdb52438-1288-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772086885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "b363b4ea-0c21-490e-ab1e-a6bccd284336", "comment": "Malware payload (Mirai)", "value": "b852653ff11bf109654db48494bd7774", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "aa1a6d04-0d69-4aa2-a8a6-11970aedbe35", "comment": "Malware payload (Mirai)", "value": "60e246f7766e7a1cd0d9dd64af84c5510fdbd978377bb860909ee272f5a904cd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "44fb7729-5511-4e41-83e2-88105a4ce010", "value": "T1C7730856B8814B12C5D5127AFA2E128E332317FCE3DFB2129E206B2477C696B0E37D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "54cc8111-9f5b-4ec2-95fa-019fcfc59ca7", "value": "1536:2ln25xPBXk1wnnkL7+KE007I0RMqai90DIyiUNbsvHTGcV5GYIW2:7xpXCMkM/TTaFNbsvHqcVERD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772086885, "uuid": "1122f43c-5a92-4c89-95e4-eb5ef683b986", "value": 79160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "faca5789-468d-4dd4-a868-f8f38b55bb56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8b65485-1289-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772086885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "0f6a4442-c7b0-444e-8fdc-1e851ce11054", "comment": "Malware payload (Mirai)", "value": "1542495c79bf09921805cfa6b7b85d75", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "3bc05769-81a1-4c90-8c85-3d91d9a7d88b", "comment": "Malware payload (Mirai)", "value": "176038a6d13f6de54a869aae84110b837d50f10439bbb4cd4041c4ef7e1a1797", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "e4464bb8-7c35-416a-9d59-5d97fdefaab1", "value": "T112633BDAF801DD7DF81BD77A4457090AB930B3D502831B3B63A7B9A7BC721A81D12E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "01d8b4fa-37b3-452f-a43a-cd149b558ca3", "value": "1536:fAgVoBExE/V1DYrly8VhyCO1sxyWbxdJiLU11i+VQLK:fAQoBEO/jErlWCO1GySx/o+VqK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772086885, "uuid": "3197ac3a-3c8c-4cb1-b371-2e61615ddb4e", "value": 69636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "697e7a42-a52f-47d0-916e-ae35146cf076", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "910706d3-1284-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772086885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "11c911c7-1aa9-4c20-9d66-becd9776b6e1", "comment": "Malware payload (Mirai)", "value": "4bcb1ec62133cc62544d871fbeb3f311", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "350f327d-f6c3-43ee-b4c2-a776719e4793", "comment": "Malware payload (Mirai)", "value": "30c0498fd35cef1aff07d42d50219be22124dcf39eee05fa603f8cd1cdf6ed0f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "98687857-59fc-4ab6-9ad1-87420dcfaea7", "value": "T1E9E32B56EA408B13C0D61779B6DF42453333ABA493DB73069928BFB43F8679B4E239", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "eb1a9687-8a32-4b27-aef1-a27b28c406a8", "value": "3072:CJLce3pC5mO7/abHbz4NpaIJ8VIJ1FMUXkkTM/9cHMY:CJLceS/abHbz4NUIJxHMUXkYM/9gMY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772086885, "uuid": "59807e1d-952f-4d69-9ed5-4679ee8a2673", "value": 150594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "8cc31f85-36dc-407d-8562-898ca1a1c496", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7e0fd04-1281-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772086885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "55e34332-d0f5-40c8-a37e-add76096b531", "comment": "Malware payload (Mirai)", "value": "7b1edc155324346372a7d54efe34709c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "e2634cdb-ee3a-4059-ae79-1d314333a979", "comment": "Malware payload (Mirai)", "value": "4004df497ed5b01618e4cc6ae8004532f25418b116837f6df31cb73d4cd173b4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "a57b05ea-efa4-46db-860c-9a41a01d6cd2", "value": "T151632851FC819A13C6D1127BFA6E028D3B2613E8E3DF72179D225F2037C696B0D27A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "f2dd5311-0108-4866-8f0b-307d0105911e", "value": "1536:ONKlxkmiig51kRmO//kWUzObiAsDwY8rNRuVAvvWb:ONDWzk1KbiAsDHaJvO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772086885, "uuid": "8e0fa9ea-5425-4d60-97fc-f7c7b6507fe1", "value": 66920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086885, "uuid": "b4513f4f-f3a5-4988-99af-7580ca023caa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f0273db-12dc-11f1-8369-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1772087312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772087312, "uuid": "fe01c02e-9128-4002-8ecd-f9388d2fc4de", "comment": "Malware payload (QuasarRAT)", "value": "25017a19a372fbf0b724bbe192d75363", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772087312, "uuid": "9d0602e1-7fc4-4d3b-896f-d2d04a6c69a7", "comment": "Malware payload (QuasarRAT)", "value": "ecee794374e7ecfc42dd4c97d9a0eb90b83b04ad54e63a2db52000e3c2c9fce1", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772087312, "uuid": "e5351113-a4d4-4fa3-8147-da9818e59d5b", "value": "T16316336466A1DC09C23D433508A0F57897718DD6B522D26E7FDE3EAB772EB260E413", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772087312, "uuid": "7a8b0c53-f638-4acf-98e6-0c75fb000bdb", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772087312, "uuid": "4bec9a0d-32b1-4e66-a934-454240fe9f33", "value": "98304:VTuyfnzlOL6Xej1gDEgzjFQ0w7AVGlmH5C2DfTyu0m0pUQ:VfBO6YgDEgXFqEJ5C4u3mGUQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772087312, "uuid": "732689a6-253d-41cc-a597-71c383d21658", "value": 4226568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772087312, "uuid": "6171195c-dfb8-4b15-a113-dff0581c04f1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa26199e-12de-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772088431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772088431, "uuid": "8277c2d3-ef26-4cea-b97b-e34021063d99", "comment": "Malware payload", "value": "7f50d4964d9cb5a9ea04065c31035c40", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772088431, "uuid": "9899bf5b-319d-4896-80ae-34139b6b914c", "comment": "Malware payload", "value": "e940b3fcf33c824bbff82c8cb9f82197acef11ce56a26519469a6024fe864720", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772088431, "uuid": "542892cd-8de7-4754-9ff7-3d134aacf1a7", "value": "T14734F08F02A171858B141A61B8BFEFCAE2D515040E079DFED57169893EDCBE3EBA0C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772088431, "uuid": "aec46383-0955-4c18-9740-9971cece4107", "value": "6144:uKgzJYDk86+l3E7tVbOAgm0eMGjgCZrzF/c1Gtbpoijvo/s:uKGJYY+m7fOAiGjp3lcQNpvL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772088431, "uuid": "78b04336-7944-4e4f-b3b9-9e65abbd906e", "value": 247890, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772088431, "uuid": "bb3556c9-b2de-466b-a0aa-81ccaca4ffb0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "547c3a20-12df-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772088582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772088582, "uuid": "ceb70325-29f6-443a-aca6-82df30259f47", "comment": "Malware payload", "value": "32368e4598386245b9a598718169f022", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772088582, "uuid": "8bc71489-4e83-40e4-841f-5bb9fea7a381", "comment": "Malware payload", "value": "f1984f042a3520cd578f5e4dc20a0d173aa7dba96551677bdb8a3af0ff22438b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772088582, "uuid": "c0416f2e-0b40-45a6-bbc3-da9b86501f97", "value": "T1545633A9335091A2E234A5B741D67A4F3D7E862DAD832A1C70C6713CD83B353B17D4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772088582, "uuid": "6f17d230-d988-489a-a2fc-9290b0450bd7", "value": "4b8ea275b01195301d047f45b8ba14d3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772088582, "uuid": "56b2d821-7a94-4ad8-b478-b3082f2e1d59", "value": "98304:Kk1HbpY3VJtswm4d0f7JjVJvZJ3YwrMxi2bz3GyUjvSHO0K9xT76MOs/cJDINHCs:D4E4dwVBr3YUtyUGuV9xSm/pBCPhG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772088582, "uuid": "9ecfaaa9-5fb7-43ab-9518-637c17d61fb9", "value": 6295365, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772088582, "uuid": "aecfe744-02c9-466c-9c65-ec7ff14263d8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f922752c-12e1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772089718, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772089718, "uuid": "da122448-9044-4b03-8d4a-63196b3c287e", "comment": "Malware payload", "value": "7cfe6e08b2a29d5478372b98a8b4694f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772089718, "uuid": "fd87d094-48d5-4e42-ae37-af13829f9b7e", "comment": "Malware payload", "value": "a7c5749c831abe18663f72c4b793f0178bc2b5b040528275740110c8507833f2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772089718, "uuid": "75ed7584-e692-40db-9a43-08a02308f6c3", "value": "T18E24DFD2623598DD52E3F68489B477C6AB6F25B56370C5FDB23231380E4EC6E6D048", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772089718, "uuid": "ddabb906-ec83-48c8-9771-d365b51a88ff", "value": "6144:L41VRZtm/Peq4aeU5wylWOBDAEM/UDDDDDDDDDDDDDDDPYfL:L6VRZtm/PN9eulXAE7DDDDDDDDDDDDDO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772089718, "uuid": "6024df46-b94f-49ba-b33b-3e5189eebe70", "value": 223326, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772089718, "uuid": "773fc0c0-21c7-4dc3-b06d-e5e7c64f84e5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2387d0bd-12e2-11f1-8369-82aee05be84a", "comment": "Malware payload (a310Logger)", "timestamp": 1772089789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772089789, "uuid": "fd7108db-572c-4b42-a853-e41eae8a4cb2", "comment": "Malware payload (a310Logger)", "value": "344f94cc495646a2e08d8614ee2bb173", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772089789, "uuid": "8b67321a-f5b3-42a9-9ef0-ba01c1df33ca", "comment": "Malware payload (a310Logger)", "value": "26378a211653f80daa85eab47091253c2122c100eeebc020538febefe3ce23b0", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772089789, "uuid": "594396b6-7122-44a5-8e09-640d08aacee8", "value": "T1B05501642796CC16C369433219A0F67C9772CE9BB515D24ABEDD2DEB3B3AF110A423", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772089789, "uuid": "dd3a051b-95e9-4280-8e70-3929fbd62c23", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772089789, "uuid": "2d7c7a6c-9ecb-44ae-bf51-7f3aeca411fe", "value": "24576:RfamQocTaYRN55gIzzZlkzpVZcVQfLnJu6oGGPdJI5aOV:RiOc55eo+OVgLnJu6FkSUG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772089789, "uuid": "bdd46044-70f9-494d-8490-e70bcb1bc5be", "value": 1321480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772089789, "uuid": "e5dc417f-59ea-45b4-938b-a59fa462097b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7ea006b-12e5-11f1-8369-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1772091326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772091326, "uuid": "bac2f480-a740-4e3f-af82-be83e08d67e9", "comment": "Malware payload (njrat)", "value": "12ae4b70ca5da38beacbadce44912aa1", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772091326, "uuid": "ecfb9cfe-7f6a-4fbc-85b8-b276ee117a73", "comment": "Malware payload (njrat)", "value": "6da2b285731411144a2137604f5c28faf3d6eea5f92a2981434802468eaab8cd", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772091326, "uuid": "f985a1f7-7913-4cfa-bece-1f09d9da67dd", "value": "T16925E15412A5DC06C379473215A4F13D97B5DE9BB421C20ABEED3EEB7B6AB010E923", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772091326, "uuid": "f451d42c-8cc4-44be-8f39-092cf1603cb5", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772091326, "uuid": "4cd591ae-513b-495d-a7a0-ae37d6bd276b", "value": "24576:ZmtT3orI7mJkeIe30lT/n6u/RQHfI5aOE:wx7bGu/RvUx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772091326, "uuid": "121a45f6-6945-4832-9d47-7f2ebae55c7a", "value": 969736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772091326, "uuid": "bf795acd-0ec1-4d94-bda1-aff6ac38485a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1f1285e-12e6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772091853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772091853, "uuid": "88a66c07-7996-451f-a5fc-a6339a5ee07a", "comment": "Malware payload", "value": "3607ebe9879760b9419363e1df03b65f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772091853, "uuid": "ea402b19-ce35-48ad-bc2f-e8df3f30748e", "comment": "Malware payload", "value": "59d86053b6a5853b6e6f1283cf2e4d2f334f254d7135f5bf9e0f858ea9f4fda1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772091853, "uuid": "cbec27f1-ace3-4f0a-8a49-56379fb5c07d", "value": "T11C8309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772091853, "uuid": "dd5e1504-484b-4643-959d-e27c38bf9387", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnQWaYVN/:XEKltp9txAX/yr2pbQWBVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772091853, "uuid": "7aa7eeda-0b87-40da-8992-da6a54dfa015", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772091853, "uuid": "50928b18-71ad-4dde-a68a-bf03e9aa3945", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d66a299d-12f8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772099538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099538, "uuid": "36ddf6bc-787d-4f0c-8967-5d898cfa8d0f", "comment": "Malware payload (Mirai)", "value": "57068c7c4b393ffe45af12eae4a05d89", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099538, "uuid": "79efd8b7-4afd-48fa-8e89-1c8d08742c84", "comment": "Malware payload (Mirai)", "value": "8af7375ae4e5e82861e5d6e77970f0dda09e5573bed78d71e1bdb4fabb661cbc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772099538, "uuid": "eddc335d-010b-4976-876a-521260de7377", "value": "T117C31B45FC405B23C6C612BBFB5E428D3B2A17E9D3EE720399255F60378685B0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772099538, "uuid": "be8f4b13-83f9-4491-b8ae-b06a99b71eca", "value": "1536:p/Ka0rG5yC/cMChygtVOBdWFAcJX4VlgXTAXYFkWUGZrSo51WhrV1l3GwywEReQR:ZKaprMh7TOXWFh4UXcYFkWpZlvWNUm5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772099538, "uuid": "367df4f1-dd2c-493e-89c1-016e0b80a20a", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772099538, "uuid": "90e253fd-a671-40e6-8f66-2188fce2a60a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1deee369-10a1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772099663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099663, "uuid": "3ae2015a-0ade-4975-bcd1-5a3b3d284860", "comment": "Malware payload", "value": "58b4d0e400c76005d3d5060c38aaf324", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099663, "uuid": "739311e9-3477-45e5-92c4-56bd9b1c5c47", "comment": "Malware payload", "value": "0d06b42a2f780cd8e9be998b25a5187b1479521d39417c0f815b84e1fa822070", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772099663, "uuid": "3509e815-d7e1-406c-a9f2-8e0739e6fcd2", "value": "T1EFA63332C32AF955D95372B939BBC61A942FD6883343A5CF17B819DCACC19D05B2E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772099663, "uuid": "b03ee70d-039c-4e2b-9015-20a643464147", "value": "196608:o6gGLdq/Q3Y0iNSrb1Gf0suSMMl0bu6Z7EfxrA+O7i:ZI/Q3nJb1GfeSM+0buiIxrA+O7i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772099663, "uuid": "9abbc31c-8ce5-450f-9fed-02a1e5cab778", "value": 9563667, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772099663, "uuid": "e002f504-3e10-4ab5-a669-73565e6722b9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b8a12f2-1309-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772106660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772106660, "uuid": "7082c2df-0163-4ddc-a30d-923b71951fa7", "comment": "Malware payload (Mirai)", "value": "a569356614dfdb4f51c255b9665a0810", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772106660, "uuid": "e60255e3-5e33-4591-a755-0600f737868d", "comment": "Malware payload (Mirai)", "value": "aad866ad60e7ff0dcea8a44138f0d2d8692371364a0920286b851648f6ac2401", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772106660, "uuid": "5a488345-91d0-4eee-be01-d46c244ec169", "value": "T119459D16BB15CFA6D374D37109F3832543A121831792595B6338E33CBA62768BD1FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772106660, "uuid": "4cace77f-b77b-4abe-89f4-cdfe152f70b9", "value": "24576:T+D7YsKm8f7MyezoiM51W+2ScS0maRNEARddspaTQKqkKc0b/kx:Ta79NrzoiM51W+2ScS0mz2dmYTQKfKcL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772106660, "uuid": "d83865de-a582-4b1c-91c8-dae16330ec73", "value": 1222640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772106660, "uuid": "6c6bb0cb-43b6-4190-88df-5e11b88452e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05f43910-b45e-11f0-8aaf-82aee05be84a", "comment": "Malware payload (Mozi)", "timestamp": 1772106685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772106685, "uuid": "94eee5a7-705d-41d5-98bd-36365d5b7d86", "comment": "Malware payload (Mozi)", "value": "35fe831cfa6a6d65770701cd88325e0a", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772106685, "uuid": "3c9bfa2a-c42a-415a-bded-f181e08e9011", "comment": "Malware payload (Mozi)", "value": "b1d57fd6bcd109a99d5023d76767aa6fdb520138e4eaad2a9a48afb3b6fb98b6", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772106685, "uuid": "3a61686b-b389-4b34-bcb9-80c272ce1b9e", "value": "T190D312ABCCBA89CEFE6A8FB52617090F1EF6E1D5E5C43D58553B108027F8246A514B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772106685, "uuid": "126f9eb5-5903-4bc5-ab05-8910e0bec1a6", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6co+:7O/QJHZweEL/NOjCHm7FZZncT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772106685, "uuid": "e38b8192-b14e-432b-b44e-245dcc87ce08", "value": 136800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772106685, "uuid": "45eb3efc-c431-4ede-9a2e-60a9f9250c3f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39807ed1-130d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772108294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772108294, "uuid": "029a5133-5804-45f7-a437-94754d14c02e", "comment": "Malware payload (Mirai)", "value": "9b318565c59bd2e761269edbacac443d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772108294, "uuid": "a125474e-9d5b-44bf-b555-fcb2f46dd624", "comment": "Malware payload (Mirai)", "value": "cefdc085851a7317ef39e5df0c5bf71f34ed557ae3691f9518d9e7277e89325f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772108294, "uuid": "1ff536b3-81e9-4cb2-8653-095bb585f381", "value": "T1314301B901C68A65E11426B3EA4A1B423D77747232E630787CC81386B8FD647E9FC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772108294, "uuid": "5d2e54fc-b451-4d0a-ad13-8115cdb6a562", "value": "768:Nrb71W8ZL/eroWNpSHfqCFB6DfnwXrAjSqiFq58owRtC8z+uQS/5P24qFm9E8Qo9:Nrb7kJp+SCFBvRG58lnhPVQt8QdzI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772108294, "uuid": "11a12fb0-9c2b-4628-9594-2b7366d93f8d", "value": 56612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772108294, "uuid": "44d677de-9602-4e8a-b1f7-7a12de135e7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db5b5497-1315-11f1-8369-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1772112002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112002, "uuid": "93eba58b-032a-4fed-b58e-d06f5d8c5613", "comment": "Malware payload (RemcosRAT)", "value": "0ecf5b200685e740a0270380a506723a", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112002, "uuid": "bfd2fd7e-15f3-4b17-92bc-78367297c716", "comment": "Malware payload (RemcosRAT)", "value": "ddf18913e974e0d83e4f65d4fb9b20e98974bf87cc414af05184fe20bc0f6e87", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772112002, "uuid": "7a29345d-3fae-4921-a177-6984e4b8d845", "value": "T1424512581789C417CAEA53BA29B1F1784B7DAEDBB510C3564FECBCEBBD2171018083", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772112002, "uuid": "61eadba4-2f38-4567-8327-f293d0e76afa", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772112002, "uuid": "b771e9e3-38d9-4402-a2f3-278889ee2987", "value": "24576:SeI5aO7XTl9kE8EqKd0cerovv7eDd+3p4emyUADnr:aUiXpOu+ovzGd+3paJADnr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772112002, "uuid": "587f4ede-fffc-4354-b230-b22c1d5bb298", "value": 1275400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772112002, "uuid": "ba857217-aa8f-4885-986b-88dbe1a17ef6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9578acf9-1316-11f1-8369-82aee05be84a", "comment": "Malware payload (GoToResolve)", "timestamp": 1772112314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112314, "uuid": "d8225b3e-103d-48c8-bd34-2a7a845c0974", "comment": "Malware payload (GoToResolve)", "value": "b9060cf36a9e7ac53edfc78b74b6eb46", "object_relation": "md5", "Tag": [ { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112314, "uuid": "d25c66f0-29f1-480e-b9cb-c24529c50c66", "comment": "Malware payload (GoToResolve)", "value": "0dc9fa7f1bbc2d843b6ac138b998d8aeeae4fd9d1a33ce60ef2e24ff2644a70f", "object_relation": "sha256", "Tag": [ { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772112314, "uuid": "66ef4881-25c6-46b5-9f52-1156b4d9f082", "value": "T1DA3733207649C171F53E10B289286BBF427D6D320F6580DBB3DCFE9A5B312C16B36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772112314, "uuid": "1f6f0eae-5f73-4b0e-afb1-730facd962ca", "value": "393216:ru0G/h3+M0v1UuQHRTRGH6JHfTF7UY+/kqFj4eFSmJlVvKneUdPlZQnl2H7gOnhI:S0GF+Mm1UuQ3H/T1uThFJll+eUdEnwHo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772112314, "uuid": "0ef55dd5-43f9-4490-b031-ebce08eaf666", "value": 24530944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772112314, "uuid": "b4aadfe0-6e09-4976-a15c-ffa94329030a", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cda1cf5e-1316-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772112408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112408, "uuid": "e73dd399-e8d1-4a6b-a171-bfef2892fa10", "comment": "Malware payload", "value": "a263c7905ba92f445d8557b612f84cda", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112408, "uuid": "1f64aeb0-c447-40e2-866a-44f825265f5b", "comment": "Malware payload", "value": "392a200a68d936f3464b2e0b9e163f6e8ce85ba0bbe52c4688c27dcbb2ad3d99", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772112408, "uuid": "131f0091-0802-4a6c-a04c-9215539eb35c", "value": "T118E3C6B67B94D0EDC8D40A38ED14F1E04A623E25E4A18E57BEB47F1FBA3011C960E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772112408, "uuid": "fcd36ce6-7357-45ef-867d-a3657de0bdf7", "value": "1536:7t3UDICnSloeGQvme5gXYAZqHKAm1XYAZqHKAma:76sUgwYAZqHbuYAZqHbZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772112408, "uuid": "ed34346f-b632-4795-9b8b-d670d10a552c", "value": 154624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772112408, "uuid": "62fd8718-7da4-4f6f-af94-06c7cc1d929a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb9b0657-131a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772114096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772114096, "uuid": "eeca6727-0491-4437-9b7f-0f412e6148c1", "comment": "Malware payload", "value": "1346ba9b9cf1190de66296f6ec8946a6", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772114096, "uuid": "ef8e28d6-2319-4c2d-9934-b2c3e6d27bb5", "comment": "Malware payload", "value": "e78bfcb235d49f25774f3062703f84d3bea89b19ac79ef8c7727b1cfbf2c274a", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772114096, "uuid": "96071544-bfaf-4551-83c4-f1be22fb6dd8", "value": "T180314FCA635207B52ED7DD2775E68804B188F09AADC0DA18E5DCB8FA954EF083C45A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772114096, "uuid": "78700386-c91b-48bd-b2fc-b93197d2820f", "value": "24:v42lROS4bOIOS4KD1woOS4eXpOS4t/OS4ED8GOS4bLOS4BqeOS4KlOS4yCt9Ol:vXRWRNBR9pR8RUGRORiRrR2e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772114096, "uuid": "cafc9aba-e1f0-4b57-9d08-bdeded332ce5", "value": 1763, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772114096, "uuid": "ced79135-c04d-45d9-9d85-d83fa72becd2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c6e3f5-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772114591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772114591, "uuid": "996faf19-1d9e-4002-a916-8b8105d8a007", "comment": "Malware payload", "value": "3b973286b5d06e8920aa3578a4941be1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772114591, "uuid": "a6988661-489d-4f00-825d-dde6e0e576ec", "comment": "Malware payload", "value": "d4b125064e284d4586ccbe058f214c34ae4a973a3f276f7db1a1b1da0e9f97b6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772114591, "uuid": "5fcb0fe2-6261-4455-bd81-eaa2ea4ef8be", "value": "9A33024523A62EB6C57548F1A3F8FF89B14A3EA49FF55C0A7C207658A43236C28C4C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772114591, "uuid": "81ce6843-a3ed-436c-97d3-255aedd2fdee", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EO:yYI0ARqw1qAEv7UIFM8oJorFquj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772114591, "uuid": "8094ca0d-733c-4d7c-a476-4e9dca5c7121", "value": 53576, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "185c0cac-131d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772115110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772115110, "uuid": "9d063ece-4054-4141-8f76-9a735f905cdc", "comment": "Malware payload", "value": "de0b328924eb57ca42626013e0204433", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772115110, "uuid": "cd74c522-cc60-40b8-8e02-8e86b18afb2d", "comment": "Malware payload", "value": "55cb04c3688d9e879d50c0f25de530ae3fb0d68748d108ac458f346ff947cdd6", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772115110, "uuid": "4a6094e2-c7b4-4cb6-8a5f-6008cdb6257b", "value": "T1C17733F82D1C2DA7701DA23743D83B33937BA11B5399E8AD070707AD68631AD9B379", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772115110, "uuid": "26e92e03-8205-4663-81cf-b4ed0da58a01", "value": "786432:HPU7M1dGOymw8/LukCX9LfCRaHR8MyJCMIFLf1pMeS4yWh:vUw1IOl/LuY3MyMMIFL7S4yWh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772115110, "uuid": "89c55a6e-9d05-40dc-bcae-c9f65bb73463", "value": 32723397, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772115110, "uuid": "6d4f1993-e28b-4778-b3a9-8bab3d01652b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da225a96-131f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772116294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772116294, "uuid": "4e56f8eb-46ea-47ab-9327-70dea51de84e", "comment": "Malware payload", "value": "438af93eeff6ec7faa6cf3d7fef4e63e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772116294, "uuid": "ec42180b-7f5f-483e-a9ca-fbc6a6d7c9c9", "comment": "Malware payload", "value": "5c8cf2a9dc75683293ca7d997ea22891a75b4c295871a0284eb0e66b6b5347d6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116294, "uuid": "ab6e6611-323b-4704-960f-99455cbb87df", "value": "T13EF13628058B281A1635C14C7FE79EA8EBEE4097524B4E9C7D0F6A073FB7111E4936", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116294, "uuid": "ea02d27f-c983-4818-b841-846c8c05b8c3", "value": "96:6upIz+Ha2eu0aNYP82ODae59AOmv4n+k2MDoX7bS7:6k60An/a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772116294, "uuid": "cd174bca-1ca1-4179-8fc5-fc839f73626c", "value": 8121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116294, "uuid": "44394dab-0cf8-4b04-8bba-0382da98f237", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f40195cc-131f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772116338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772116338, "uuid": "141ffec0-ff3d-4cc0-8793-cd912e35adfc", "comment": "Malware payload", "value": "2ba43d11e1160ca31b4275794706d5bf", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772116338, "uuid": "18e8ed43-a293-4443-8673-b4a61cac70bf", "comment": "Malware payload", "value": "7b0e05ace5ddb02f3fc8f664d09f795a642a2d77a096a86d7a744e705a94d620", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116338, "uuid": "37c0572c-f80a-4b41-8518-51c597452141", "value": "T16DD5AE765207FED6962A0DACC4543E002C9898E7472282E8BE8C47DEF19E554EDFCE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116338, "uuid": "739dcb42-4fd0-4a4a-9c74-b22f74c0758c", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGOzd23wzXlMem8:8UixbItdTrJoFVPMvXGu1F4o4oWaK3e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772116338, "uuid": "0fd3482d-5f3d-4207-926d-7331c25d0f7a", "value": 2999805, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116338, "uuid": "e01e6b69-507d-42b0-b8a1-b70c025b76db", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4dc046af-1320-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772116488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772116488, "uuid": "68170ad5-1b7e-46f0-96a8-d13831696262", "comment": "Malware payload (Mirai)", "value": "a70f22bc42435c8797d17a017556f06b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772116488, "uuid": "7ca4c6ef-a240-4408-86a6-abad8f803ee4", "comment": "Malware payload (Mirai)", "value": "b410fb0b506772a33b2ce29b4f13ad9af1c38c513b10ac310f58faab65a3165f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116488, "uuid": "a296d9f6-7663-44f2-ab72-28efa823aac1", "value": "T15453F162F0A0A961D3CC91309EAF0194A72877A6D2AFF15E85728371F58E31A37714", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116488, "uuid": "28357b8d-30f6-4536-8667-a08667acbd9b", "value": "1536:RS7OFkgvOKZywJVbdklX2atKiuEyEfDZwoyVlOHmBTLyk:RmOFkaZns2atKiuEtlwPvOHSTLyk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772116488, "uuid": "dcc7e3ac-608d-4cf5-bdc1-26e85127da4d", "value": 61100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116488, "uuid": "d0103a09-ab6e-411e-9a9b-b166b72bb156", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f7129a5-1320-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772116491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772116491, "uuid": "900fbb37-4512-41a4-908f-7bfa94f739f7", "comment": "Malware payload (Mirai)", "value": "b8d895382ce7725fc43b505b312fd095", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772116491, "uuid": "5e3b87b2-7da2-4e4a-b28a-90ae3e569559", "comment": "Malware payload (Mirai)", "value": "4dbb6edddbca8a72fd6b1554d5737263cf93326262c296595c7d5c3cfb1604b1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116491, "uuid": "65cfa601-f312-4410-a1b5-bfcaf678cbe9", "value": "T14EB150C922930AB43DE7DC2371AA8814B5C8B186EDC58F15E0DCF4FA658DF097941A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116491, "uuid": "38124341-ec47-43d3-8953-47e7e29d78a4", "value": "96:2RKhEcfEnsTE11XACXAkjLNxz7XfNx3/pN3V:2Mu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772116491, "uuid": "c6773aa7-5878-4822-a2b0-8722afd945e5", "value": 5101, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116491, "uuid": "ae85f818-a713-46da-9049-53b46e9f6048", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "664b1df0-1321-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772116959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772116959, "uuid": "28dfcad5-93bc-464e-ad4b-23bd4ffa17e1", "comment": "Malware payload (Mirai)", "value": "e10055d5783f3817d82a4e0e3d96cfaa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772116959, "uuid": "68577fde-c6ee-4086-8665-4d8cb593f760", "comment": "Malware payload (Mirai)", "value": "f5db4505f9723b43e7332cbed2f9da2d60c323306bf9dd2f9e4e082c140aaf92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116959, "uuid": "ab861ea0-5d81-4685-b442-3ead402bb6af", "value": "T151F33AD7F800DDBDF80AE33B88570905B270B7A254820B376257B96BFD3A1990567E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116959, "uuid": "ba1c1525-0c0f-4936-a1ee-c00b9747005d", "value": "3072:pNvCknyrs8RvRYNth2oWtyWQhJDyG3h4UkHIqmDzqVIjbitLgJ8yIk3:rqrsAvR8CyWwJDyGR4ejDzmLcik3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772116959, "uuid": "a63c1be7-9311-4579-9dc8-c0cfacc55808", "value": 172608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116959, "uuid": "52bc60bc-b48d-4527-aba6-a0b47b8c3bbc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4b01137-1321-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772117144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772117144, "uuid": "67e36b66-ce40-4cb6-97ab-4155676f2ad4", "comment": "Malware payload", "value": "d35e3369f6351dacb16864da203a371b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772117144, "uuid": "cf904c36-2a25-4d04-bfea-9bebbc885b46", "comment": "Malware payload", "value": "02aae14f637bd9da0a023be12e4ffa9128c3ac4d4ff22012d1b477f9af100d37", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772117144, "uuid": "8d20d51f-4ce5-4c26-9e91-e9bf6673a73b", "value": "T1E78309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772117144, "uuid": "7728ce7b-a667-40c7-b229-a86dff9c8ac4", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnRWacVN/:XEKltp9txAX/yr2pbRWZVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772117144, "uuid": "b192c9fd-d2c9-472a-b1c9-691eb995d56d", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772117144, "uuid": "1c2e086b-0b51-451c-aba2-2748c881d99d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fb87384-1322-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772117270, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772117270, "uuid": "6dc3dd05-edc5-4877-b168-e7694074b71d", "comment": "Malware payload (Mirai)", "value": "c4cbb93f9247e07b3d92a0068bbfbcb0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772117270, "uuid": "d13355c8-092f-4204-b26c-8b9b1c720f7c", "comment": "Malware payload (Mirai)", "value": "3b15e851ec9b5d6a1d8122e3ec60b47b251051df98cb3f1dda492764422d0ed8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772117270, "uuid": "5f5a515c-0c03-4502-b0ec-cfbf18958565", "value": "T165730230AAAC55967A204CB7FE818487DB9DD3F4E1FFF941411247992FE702A2EA39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772117270, "uuid": "a162fced-50e7-4aba-919b-7076c87c06e7", "value": "1536:zEw+BiOelGkPfc+3l9oNXrmGoCA1nDZEToDJH7UiqLgNNTxkISSm2bdkl6PNbZkm:4hiDlhPD3LoFVrA1CToNAiqLg1zSSm2b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772117270, "uuid": "f0245c62-ab17-4dfb-894f-54aca6d399c7", "value": 75380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772117270, "uuid": "231a447e-6ade-470b-a3bc-3bbed296f863", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "449ff06d-1322-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772117332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772117332, "uuid": "b8c3a0c1-8826-4410-9d28-00b875e5b12b", "comment": "Malware payload (Mirai)", "value": "dce2dc553e3d11d061137f28a696f10d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772117332, "uuid": "f8aff3fd-727a-4b89-98af-fd5560089b4c", "comment": "Malware payload (Mirai)", "value": "521d9724680423f45631397d4185cd6be86abef5489eaab8be647cbf54186865", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772117332, "uuid": "d21b771b-3a47-4bd5-a376-d38a5eb3b34c", "value": "T1D4D36CB3C83AAF58C654D4B4F0318F792B93A55482472FBE19A6C2B55083D9CF6493", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772117332, "uuid": "319dcaf9-8cbb-4d55-b9b4-6ad2c12cdcb5", "value": "3072:17XSgrZJxeRXUA5tKwhROXqxWkH7UwE0A:17XSQA5tVhBckYV0A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772117332, "uuid": "0cc04774-e2bc-427a-8174-82d7a4a43aae", "value": 138016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772117332, "uuid": "2a5b764a-b225-40e3-8a61-529eb42558f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e55dd33-1325-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772118610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "078b9f85-78a2-4dba-b9d6-b917ce4afd39", "comment": "Malware payload (Mirai)", "value": "2ff798f387be417c023f9b4c029e83b8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "8eab6939-e750-430d-9606-6e7834b44f6d", "comment": "Malware payload (Mirai)", "value": "d115125dee219d807d58f9c85369c5fd074d02c249a6bb10cfc9c64fcde50d77", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "112df32a-822a-4506-896f-b24996accd80", "value": "T126C2D0E07726FA31C420AC3DE52B4C893A91067C81FE353764258D358FC1A9A67F48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "1b563683-3ec3-4a29-9a0f-921661714cfd", "value": "768:JMKyhegCCMqfizjoNpd2vJdX6vwrP9q3UELuC:OKy4qfqoeJdXWg+L/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772118610, "uuid": "9c94862c-3bc9-4b73-9e17-c0dd91e58099", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "0ebefe93-faab-4b23-b245-38f0e15dae45", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e59e5a1-1325-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772118610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "d9b35deb-c558-4fe8-b27e-2c3302c18ab9", "comment": "Malware payload (Mirai)", "value": "56ac2935cae0c8612c2ccff573bfb87a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "8523fecf-e75b-4b44-96b3-9853c587b604", "comment": "Malware payload (Mirai)", "value": "5a67527e1dba49be4b5fcaf4532dcb2a11bf0fa6c67c09528c885f9a0acd9aaf", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "808c6a8b-861b-4d34-90d2-607101ed18f4", "value": "T197A2D025D345AEF4DFEF9D9056C2C2C2B6E543C6278AC8E240EEAF017906046FB49D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "d78e75a4-f2c6-47cd-82b1-e408fce514e6", "value": "384:m/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5ehlgM4uVcqgw05VxJ8:mRxsSVsMD6xiJJE5zRWNat4uVcqgw09C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772118610, "uuid": "7bc843e4-4bdc-4d58-9986-831d03da04e4", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "4289eb2d-fec5-4f64-a4eb-38d2d60ec426", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e5baf40-1325-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772118610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "081ad58a-90cc-4af2-a8b1-a94533bd7438", "comment": "Malware payload (Mirai)", "value": "0227b1109d12afe6dbdea1416b93ef78", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "ea274eae-1d61-4fd0-a51e-66de8b3979c0", "comment": "Malware payload (Mirai)", "value": "5b7279042d0692145d02729aaa419c0f9f6e01f609b864deee34a936fb3567b0", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "1e763380-a314-4a8c-9deb-1371ad1af731", "value": "T127B2D0CD61543084CA8D7C7C1B8D4A674F6CA1D0BADDCB26E350CD98B3BAA8B385D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "8c4f76e4-2539-4eb9-b579-7b64ed7cde78", "value": "768:c4rQlS07dEv0UXqUhvQE+CXQKMQKCXBpbZq8Wv6:BQlS07FUXqIYSXQKqu9qc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772118610, "uuid": "785414c3-b19b-4bd2-91f9-926b7d32df61", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "9819e373-f47e-478d-adca-d7b00374b11d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e606726-1325-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772118610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "9db2afd7-bd5f-44bd-8acf-dda6ae43ccd5", "comment": "Malware payload (Mirai)", "value": "d54a3c361f0b04448f0dc4dba9f6d7b3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "8108a151-180f-4745-b6c4-a14fb0f188a9", "comment": "Malware payload (Mirai)", "value": "b1bdcf8666ae9c3b912cf78decfe1df4fa3dd41a588a2e2c75c4a504a10c3924", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "7315e971-e82f-4323-bc0f-93c67fa6c525", "value": "T111A2E119BF1C868BC832693551D9EAD61292FC72F2DCCC096940D16FB4A33A96474F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "711cd47f-b893-4c8b-9da2-7fe3da3dc57a", "value": "384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAKF:O98o08kxofBE+ZkXaqGbp2F2TWul0c5c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772118610, "uuid": "ab267405-b749-486c-961e-1a911dfbde09", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "bf7fc013-125d-4642-aefe-6e5aec6da784", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e61aa99-1325-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772118610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "f2fc74be-a009-4495-b27e-7926e79f5e59", "comment": "Malware payload (Mirai)", "value": "b35ad75c76f4b4910bea92056d29082f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "3bd58d4b-fe55-4f40-95d3-feb3321430cd", "comment": "Malware payload (Mirai)", "value": "eb5dbc80dd23bffb286a79fc0fd7a71cdd88d77e7209cb944fcf837dbfcd6334", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "239b4ec2-e852-4b1a-b179-3eb1a3936e7e", "value": "T18882DF3061AB35E5DBF10435EAEECEC6971A0BF8D1FC369217587B78894210251F92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "b35e1585-ff48-4d5b-b42d-d8a48a919647", "value": "384:MjWzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMaohymdGUop5h5lk:6GV0P6+kom0tVAoNvm+to1os3Uoznlk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772118610, "uuid": "c33f9e56-1af8-442a-9175-070bc432b089", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "4a32f215-22e6-4b83-939f-185e068f8e13", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e65a432-1325-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772118610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "8e211507-21f7-43b3-8156-e24cea97319e", "comment": "Malware payload (Mirai)", "value": "f855de9fc6a092ec4bf696c207e6e2e0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "cdf9b149-3b33-4f18-83f2-682628548ca6", "comment": "Malware payload (Mirai)", "value": "f1a80a7b5b571b980f0939adcd0b3b895e2bdcff8eeab7f1261ceb81389452c3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "a7eea500-8f15-4aa9-88b5-92995fbf872e", "value": "T167933A85BC815A22C6C112B7FB2E028D372653ECD2EF7203DD216F2576CA81B1D37A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "a84f68d3-ce0c-4055-a717-121cb1876e4f", "value": "1536:xLnCJAwYCGXReq5PdOP6vrER5uwZt9zZ+Bn52GH5ZoLyrLAKtYxpOvNDCzNwbZnh:xLnCJAlKP6Yc8zqnhvoLyrcUkpwbZnh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772118610, "uuid": "6fad8b63-85c1-4ee4-8e5c-647cf0c06ab3", "value": 96944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "fe513239-75ef-4be0-baf0-626665cf4b0b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e66b566-1325-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772118610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "bf7387ee-9895-4f9d-aee9-8565d1fd768e", "comment": "Malware payload (Mirai)", "value": "2566ee7ed4931c517179fed64263f731", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "8559d498-4631-4800-a7f4-14b38f70c03a", "comment": "Malware payload (Mirai)", "value": "97c12d4b122390a40e96fd9f9cb571ed8363060cea33787c97735c3ff65353d3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "85884533-b9d7-409d-bf0e-7abafbfabf19", "value": "T1C8B2DF3C1B151F98DA1EC0BD439D0B513CB81F7591829E4B6206ADD7AF968B43453B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "44bfe0f5-a4f9-4fa1-ab1a-6c024206bc9d", "value": "384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtui1u+EmdtJgGlzDpH7uNj1a:YeD8ZSWvZHZbs1row697qohQvg98+EiF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772118610, "uuid": "05f68518-c82c-41da-8848-c71df674b807", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "fea07e90-ec18-4b77-a2f7-4391f9806a7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e6b4110-1325-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772118610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "5ebeaefe-4e96-4d21-b356-b6b7f67a1489", "comment": "Malware payload (Mirai)", "value": "4e51dc548bbf5b17741122d6e3917aa0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "9d71996c-5957-4b4b-be78-5abd0b623e54", "comment": "Malware payload (Mirai)", "value": "0956f047757f99c216633dca158da119da4b50e709c9a1f7c76e40cff59feeb6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "ab3fb9d3-230b-48bc-95cb-2be009fc248d", "value": "T1A8330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2757BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "2145e432-9093-4a0d-891a-e8a19808f5df", "value": "768:gduPBFnHooqR8qOCKq2cH4Fje+TK806MMUVjzMfQXOtHud2oG7:r/hqaJMcjeqK806MHdMfQXoHuC7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772118610, "uuid": "360655a8-aea0-4744-88ff-2d63cba14abd", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "08dbee03-2ecc-42d6-960b-b12698c96268", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e714851-1325-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772118610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "4539b90e-ae32-4038-a179-9bf0dbed88ec", "comment": "Malware payload (Mirai)", "value": "f648dbc3c9802c04dcbfa522d2e72e9a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "0deafdc8-6e59-4f99-8d2d-f97e430e19dc", "comment": "Malware payload (Mirai)", "value": "a656d5353098e93945258f296b702a642d5b4e3444a94a09f4ca91c2f7a03bda", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "4305731b-d5e4-43ac-9cc9-0bb7d8762b05", "value": "T1E7A2E11176A32D56F3ED1C3DC96AC357F9A71BFC90F6327678412630C94D20A2E38A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "c3a499da-17de-4e1c-803e-c5fbf928156e", "value": "384:TvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjKwhymdGUop5hK:TvQn4j+ZO5fKAlxWws3UozY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772118610, "uuid": "7704136e-284a-4421-8c89-558d4d962c01", "value": 22168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "d75548fc-6b9b-49db-874d-30ed54f7461a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e7d4fb5-1325-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772118610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "8c2939c5-98cd-4636-8556-602d5bf41ef2", "comment": "Malware payload (Mirai)", "value": "2db68184587871b9e68861a2e297e7f2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "16cdb39c-e67b-422d-a49e-447c3a82ade1", "comment": "Malware payload (Mirai)", "value": "20c0960a29d2bee00d54ffba698214fd732ab05e0d9084cf0de1ddb0840f8288", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "27a699d6-a539-4fb3-869e-99598d45996d", "value": "T1D9230271880E8EB125703C72DBD9D39376E11AB1C5673023D6284A382F657131E5BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "55c929ed-350c-49bc-8016-3bcc9f89d4db", "value": "768:D/TYCoIxdEk+AxoTZAZHFeq8b36c9q3UELbUXfi6nVMQHI4vcGpvI:DECFd+A6YHAxOLRQZI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772118610, "uuid": "86db81eb-ab2b-4c24-913d-6dd56759382f", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "52655629-74f6-47ab-a5b2-25375bc00800", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e8a7e38-1325-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772118610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "94decb67-56be-4ae1-a4ce-1ea0b9b78e12", "comment": "Malware payload (Mirai)", "value": "647e3cadfae9779f061dc6bc6abd264c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "541bacf4-fe01-4d7e-ab61-d45057eaa78c", "comment": "Malware payload (Mirai)", "value": "5162a3669a7636e0af5f3b7cefcab109fcaf167a8e60db0b7612cf2f4e6fa5f9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "ee0e6e78-cec7-4639-9251-2b98a15dfd40", "value": "T1E8B39DDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657969791CF8905F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "bfc84c21-960b-4c67-855b-838329b4e963", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1S/LWy:c9sSyzz36YaWWgg1Sq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772118610, "uuid": "c1de1a26-7163-443b-bba3-1ea029ea20c5", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118610, "uuid": "53afdb12-eaaa-4dd0-832e-bd3a7a2c5caa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4123b322-1325-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772118615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118615, "uuid": "9734a720-213c-4bb5-a12b-b61e12ad93e4", "comment": "Malware payload", "value": "3544e75d2dae8949a43818dc36fd4f2d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118615, "uuid": "22441179-b299-4379-8cf3-82c3428d6807", "comment": "Malware payload", "value": "be8adc196213154b10bd4209098ff94083d5ade71abeeacbf9d4cf30e3403234", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118615, "uuid": "60c23b36-1255-49a7-87f2-ab3ae2c897a7", "value": "T1069633C6F32A596DC4B245360DAA07751B029E5ACAE7470B25A8376D783FAC44F8DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118615, "uuid": "c3cb725c-3bb9-47b3-917a-73e4aab049a5", "value": "196608:b+gawQ7T9k4Ec4x3R1zCMV9xeEcbnInN8wtY3i/O9kJ6zlHpMoviPPlpgoLyStnS:SgawQfyv1zCCanInN5t7/OE6pBvsPlp4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772118615, "uuid": "1855c42b-5fe9-427d-8ccb-81813cff3efc", "value": 9423006, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118615, "uuid": "5ad663ff-717c-4cab-b4a8-58d27f78037d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4758c076-1325-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772118625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118625, "uuid": "6a357797-bacf-4335-a2de-f73eece117dc", "comment": "Malware payload", "value": "9ea5e8621ff9c527ef8d24783dc5c63c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118625, "uuid": "3caa90ae-73a0-4dac-b35c-8f37748fdfce", "comment": "Malware payload", "value": "6120a64b5e26ea15f9a7155c3d0e47c8457d5735b19692cc5138dbdbbeaea756", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118625, "uuid": "547bea53-1439-4bce-884b-4fb1da951a0b", "value": "T1B0052311D818542AE39D5B7032A6F9D0189A3D354695F80FE86CFAF26C7A2F348732", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118625, "uuid": "72a9223a-a102-44f5-b68f-5295c4c5a433", "value": "0ae29a9fdc0b1a1907f6c62e8035b929", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118625, "uuid": "20779ca7-d7af-4e09-8d95-273aa7c5f1d8", "value": "24576:NKpAFDJ4Jl72B3jKrlzAs4bR89DDUt/m4ZEfc:ked8l72BTK5d4bRIDDUtVl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772118625, "uuid": "48ebe564-221e-4e0d-80e9-04b70178fb60", "value": 802200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118625, "uuid": "01b37afe-dd0e-492f-800d-d7529042b00f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "494a9436-1325-11f1-8369-82aee05be84a", "comment": "Malware payload (TrustConnect)", "timestamp": 1772118628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118628, "uuid": "a391eba6-e5d9-4ab5-a179-703c9011eaee", "comment": "Malware payload (TrustConnect)", "value": "f55a1ee56f84bd6237f6833789b3a7ac", "object_relation": "md5", "Tag": [ { "name": "TrustConnect", "colour": "#EFEA3F", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118628, "uuid": "e819a5bd-da03-4384-9484-a5da4ae7563b", "comment": "Malware payload (TrustConnect)", "value": "6641561ed47fdb2540a894eb983bcbc82d7ad8eafb4af1de24711380c9d38f8b", "object_relation": "sha256", "Tag": [ { "name": "TrustConnect", "colour": "#EFEA3F", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118628, "uuid": "a2dd0a59-46bc-40ca-8dbc-fc6afbe9ed38", "value": "T1E5871256E2FD00E8D5BBC0B8C6575517E7B1341913309BEB66A48A692F37BE0AE3D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118628, "uuid": "d2e7d7c2-cdae-427d-905b-065800a4b14e", "value": "70d2e884fa127843c5bcbb53da86b6c8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118628, "uuid": "373e132c-4e19-43f0-b319-558d6cc08877", "value": "393216:+KxapWfk7IVr4SvhZ6sRvI9cR8vq/mQFgeyh0LfHPQu2jYvnUwEbc/810:A4wKr/vbpvuY7Key+7PJsYPUlbY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772118628, "uuid": "d525eba9-4de4-4c85-bf07-ac0dbfd1cef3", "value": 36331560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118628, "uuid": "efe33bbb-bb0a-41b1-8089-fbc93c887f9c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d89fb458-1327-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772119728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772119728, "uuid": "2feab01c-378f-4dad-b56c-4d5a38710f62", "comment": "Malware payload (Mirai)", "value": "12b0fca196da071b2e4a52e2827fb87d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772119728, "uuid": "d1b03864-e11c-4fe6-8638-83a6e1e9a14f", "comment": "Malware payload (Mirai)", "value": "8dc52499441b6194c01a41a006a486098a8e48f9ca4c06f415e3e53969b89207", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772119728, "uuid": "1150b19e-37ff-41ae-a94b-97c90c8597f8", "value": "T19C53018EFBA1B496C08BCC30751549B0E59F626032FB1F8E63114C08775AF8A76A7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772119728, "uuid": "2d33d1a8-eced-46a2-8679-771859dc516c", "value": "1536:jvwFsm2lp46TQG6pcK6hUySACBPhVgHcb7MU:jvwazlp46TEkhdSAYPhSHEMU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772119728, "uuid": "3ac326c5-4bc2-4fcd-9f9c-dd9952e305f9", "value": 63320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772119728, "uuid": "226fde35-97d2-4026-ab45-552d65b42e28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "976c6415-1328-11f1-8369-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1772120048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772120048, "uuid": "0cc8ba6e-991d-4132-85e7-42c2496f2159", "comment": "Malware payload (QuasarRAT)", "value": "dd68d711b341a01fadc92f45ecd6eb1f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772120048, "uuid": "8db356ff-439f-49ef-af80-2c227c8a8571", "comment": "Malware payload (QuasarRAT)", "value": "b807c38ee39c19386a5483070bdaf554dc3904658d25b6fdea79b49f3849e95d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772120048, "uuid": "a0f103ab-14d1-4842-8e81-e54308bb81aa", "value": "T1E8E54A1477F85E22E1AAD373D5F1541763F0FC2AF3A3EB0B6191667A1C93B4088426", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772120048, "uuid": "7acdba0a-dd52-4907-814e-f91a0fc3220f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772120048, "uuid": "222ae1ac-7429-4ece-bd2d-508cf5578ea6", "value": "49152:Ovkt62XlaSFNWPjljiFa2RoUYIWZuqbjmZvYoVdbQsTHHB72eh2NT:Ov462XlaSFNWPjljiFXRoUYIKuqbNx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772120048, "uuid": "c7b246da-4ff1-46df-a369-886c2f5e7d9d", "value": 3265536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772120048, "uuid": "b037eeb7-e3c7-4d56-8d18-02c991551d70", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6771c66-1330-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772123643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772123643, "uuid": "6887c646-94d1-423b-9c49-00ace7a331fc", "comment": "Malware payload", "value": "ccf5491e2f5d260cf7f69e9a328eb825", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772123643, "uuid": "1c1f5e57-f0ce-44c3-bc57-e5e3032ef192", "comment": "Malware payload", "value": "2045f583c1c8163fc9d69a9eca0c1dfa2dd8b9c08f1acbbad1b6bc03f80bcdc1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772123643, "uuid": "c28e3d47-460a-4aaa-9621-d706a7e02fa4", "value": "T1F936126E62483718C41E89704433BD89A0F7561D4EE9D5AEB6EBFAC07BEF810D505F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772123643, "uuid": "249a915b-eb70-46c5-96b8-9450ef7fca5a", "value": "1c9ac2acbaf0b716e789dce48e3499d6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772123643, "uuid": "4103b6ac-3288-4a55-9347-b7ed0999b202", "value": "98304:JSzQJqwdAlcn6mB5LQMCnoHfUKFTB+aZ66w8E5Bpq1vMfSF3gL5:JSzQEID0rnofUmTLZG152vMfy3y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772123643, "uuid": "3d2384f1-5b88-4310-97b7-f8e7a54d3db0", "value": 5039616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772123643, "uuid": "2c77a97f-e154-41cc-ad3a-70ca81dde09e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19d9d46e-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772124076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772124076, "uuid": "ab7efe2f-7416-4759-a824-50154669832f", "comment": "Malware payload", "value": "195e35ce0fad619aef8c8c638f981467", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772124076, "uuid": "f74cf74d-27d1-437f-9cbe-7d489ac074b4", "comment": "Malware payload", "value": "d5aadfcde4a266619be66a0b06d156f644e151283856630e6cd849adcb51e032", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772124076, "uuid": "d4e0ba16-216e-4f1b-9444-c89944bd840a", "value": "A313028336953F73D1218CF4D7FCEFCAA14A7D94AFD9141BA8113A99B07135C28C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772124076, "uuid": "213e23b7-62db-476d-b240-149470d7e905", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEK:yYI0ARqw1qAEW67UIWi7M8gmJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772124076, "uuid": "a907530e-6302-4b31-acc1-42589a14b1e6", "value": 43440, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1772126047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126047, "uuid": "99894bc0-7c92-46ef-9052-5780f04ddbd3", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126047, "uuid": "316c7d34-0ff8-4ebc-bf1f-170f14974484", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126047, "uuid": "38244592-2d46-470d-b9c0-b49686f3e9c4", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126047, "uuid": "cc61f9b6-3448-4d9f-a1ee-c0b2231d3bcb", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126047, "uuid": "b9329adb-6701-46b3-9d8e-b2190507e044", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126047, "uuid": "6e20321e-0679-40cd-8bae-5ef6011c9fa2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126047, "uuid": "310aa1e9-b03b-4c6d-b8b0-a9bcd69067e9", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1772126048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126048, "uuid": "ed17cab7-9848-43e9-979f-82f825020025", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126048, "uuid": "ee50931e-145b-4f5e-98bf-fdc0cdeee249", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126048, "uuid": "619200a7-e469-43ac-896a-98f2312ff1f6", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126048, "uuid": "97cb0917-db61-409a-8647-1a827b5b3a25", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126048, "uuid": "2d99c013-48d5-4a5e-b0fb-8491e031bac8", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126048, "uuid": "820fc513-ecc4-4c57-930e-8cbb3ae80ef4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126048, "uuid": "0144c16a-efd6-4772-a235-87d889c7e42a", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1772126048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126048, "uuid": "f46d1d3f-5b7e-4e6c-a744-4639088736ff", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126048, "uuid": "0c74d7b6-543e-4dc8-81a7-0b3b281f63bf", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126048, "uuid": "b302ba29-86a6-4c15-86c0-5f57c2351e94", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126048, "uuid": "420f1278-577c-4b0b-bff3-d84fea2de45c", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126048, "uuid": "a9070083-3306-4338-ac8d-d7aa71423537", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126048, "uuid": "ca71cadf-c843-453d-bc01-593df5c9e782", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126048, "uuid": "3d5f2fa5-aea2-4529-9d7a-c64f170a0ec2", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa7ce9e-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1772126059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126059, "uuid": "6e984d68-a6f9-4226-a716-8fb0c37680ff", "comment": "Malware payload", "value": "df64a5c787f34c5b38c8103a67e3d97c", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126059, "uuid": "fa008d64-bbe7-4929-b445-f48af9beb86e", "comment": "Malware payload", "value": "6f1bbcaa6efc41ee257919a85acc9ea5b1f82c8def103e39629e0b5161800ccc", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126059, "uuid": "5e5fa3fa-47f9-471b-9d7b-927f1fcf3640", "value": "T11D356D56F9808EA2C5D8177BB75DC35833234B78D7DEB102CD08672477AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126059, "uuid": "9c3cad00-792b-47ee-9216-9dd05384b8bf", "value": "12288:sQFoCapOujNJ7h8SYIhU1wwy7zh36bV7CIBolbVtE7ZdXjboyjBNY3v9fQbLv:sQFbJi5Pa/CbmzotVqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126059, "uuid": "04706766-fed8-4fa6-ad0b-47c6af855fb2", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126059, "uuid": "72ea3746-0359-4ee7-adb0-3e298a970d8e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126059, "uuid": "729411f4-1a1b-49e9-89f2-8ebbbfe279db", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1772126116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126116, "uuid": "54faa55c-9566-4e41-aad3-8e1f91111e1c", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126116, "uuid": "b614a757-0e01-475b-bbe6-214414ce6893", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126116, "uuid": "8b7fb2c3-8f8a-4ce6-89be-4fc856d96096", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126116, "uuid": "96119e55-3e86-4a54-b827-59e04e9fad79", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126116, "uuid": "69259701-393b-4ef3-a440-573153edb8d7", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1772126117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126117, "uuid": "7dd4d665-f413-471b-9bc5-156bcb4966e3", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126117, "uuid": "200f36cc-e565-49c5-986c-43c85221b0a5", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126117, "uuid": "f104e045-11fb-4675-83e2-377cf59d2b6f", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126117, "uuid": "a7841405-c360-4a92-a1dc-d418714bd4d2", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126117, "uuid": "1ccf1e1a-4a6d-4ac5-9c57-1be9ef6e89f2", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16700dde-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772126135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126135, "uuid": "1d58631e-ef8e-4f96-8216-7b546a9bd40d", "comment": "Malware payload", "value": "e7acf29a52dd9c0f04cf2cb5f463bdf5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126135, "uuid": "0170c853-1c9d-4e91-85ac-5ba0af94b5df", "comment": "Malware payload", "value": "4952024944397f022d24740ddaa55e415c88ff8c67edf990df9d0583b4809a6c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126135, "uuid": "bca3484d-03f5-43d9-91dc-cac1be973f84", "value": "0D23029223A53F72D52148F8D7BCEF8A614A7E54EFE6181FBC113A94B47135C28C981E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126135, "uuid": "b8db91df-fdf8-4921-a5bc-48968d2b8311", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1XZ:yYI0ARqw1qAEW67UIWi7M8gmfmJZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126135, "uuid": "e6ed1244-5f13-4fce-babc-9d8fd8ea6e2a", "value": 46336, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa669647-1336-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772126227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126227, "uuid": "0200ae1d-2ff1-432b-8b6a-1581161728cb", "comment": "Malware payload", "value": "c3e66500a4669476b9da782846acf44e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126227, "uuid": "0fbdbba6-b5c2-45c9-a6fa-2c4482c9ed36", "comment": "Malware payload", "value": "89f552217574ae11452116503db748fc74a8cdd1cc7cb017b4e2b93da0467a33", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126227, "uuid": "e515f105-72d0-4b4c-a723-81bdae66dc89", "value": "T1EF34CE760B3591372F2E6B66E37135C61CE885F9743F358A217AB6E37E0230C8A566", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126227, "uuid": "d1f0c036-1a60-4e45-ae46-e656108388af", "value": "6144:JALiU9FUYdHP7EvOiLJszWg2l40nMWOBA:JALiU9FFHP7EvOoszWg2u0nMlA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126227, "uuid": "666d8ace-6002-428d-aa25-0208ce4f0210", "value": 239697, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126227, "uuid": "19374e69-ca0d-4871-b5ef-f3cb9fe1af99", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0492efc3-1337-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772126244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126244, "uuid": "cdf86c94-9118-42c5-937a-257bada18c51", "comment": "Malware payload", "value": "3472b97d42b1cd0932355ead8ab89063", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126244, "uuid": "4308cea6-1c9d-4325-9aee-dfda29940d45", "comment": "Malware payload", "value": "bf410ce02977b3e5b798d9f2b20f2686e4283a737df81c66a6a250a724f98d2f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126244, "uuid": "2b20a9ad-d6ff-4177-982d-ffe3afcc132e", "value": "T1CF54121E6D522D3C16E0E15697DC68A3B00A4344B8E1F7908EBC4F77E54E769AB08B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126244, "uuid": "db76a2e5-834d-4fee-a88c-da2af94f563f", "value": "6144:Nsk3C6oqjRrGVRITFgVU+f40F8Vvd1rm6ulMS9MBf8+p9Y:NOWKuF6Un0GBy6ulMkMx8n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126244, "uuid": "4c36c9a9-a630-47dc-af44-9b25797e5a36", "value": 290678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126244, "uuid": "ab601942-075b-47e3-aab5-48fdbb472b8e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60610931-1338-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772126828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "284cc9f8-ccac-4d43-a50e-afdf9568aeb9", "comment": "Malware payload (Mirai)", "value": "665df57351b0cf124b85be0bb7c8b2b8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "118fa976-dbdd-42cc-8241-8fc1c813c79b", "comment": "Malware payload (Mirai)", "value": "da1a17681484368a877e61257c05270dc973b0f4b5f0df51f8c86ea86b4cc441", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "7a261606-85b3-44f6-b8de-af176c5dda84", "value": "T15A935D27B552C6BBC08752B42BDFEA615833B4BC0B32720B33D47DA52B259D91E6DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "1809df37-ae71-4cd1-8410-1b4d59e73785", "value": "1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3UyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKkifUm/KWOXFE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126828, "uuid": "137006c7-bad0-42f7-9f71-e105483a21b3", "value": 94679, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "8efbd029-3de6-4bd9-bae9-eef171c366ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60614b1f-1338-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772126828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "bd69224a-e6bd-4052-9409-23f9888a09a9", "comment": "Malware payload (Gafgyt)", "value": "da95ceac737589dc99f17efc2606e554", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "aecbacf4-e734-4c51-9505-395469029581", "comment": "Malware payload (Gafgyt)", "value": "f10701603f0c51366540cb6b4a1de70a049da52e6837064dfb460bbdc34dbed3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "c6150440-54e5-40c4-9357-217dafb15560", "value": "T19EB31845F8408727C2D327BAE78F479D3B36579467DB33116A38BEB42BC17892A295", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "24912908-e342-4f73-833b-825705f7d702", "value": "3072:MSY+46m1qOzssBFPPKNy+AmkZrQAhPDCXFke:06mgOzJBFPzmkZrQAhPDCXFke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126828, "uuid": "c84fb435-ef5e-432b-ba13-b945e60c6f51", "value": 108417, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "17d73279-c863-4dd6-b791-4cb7ef5a2a06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6067521a-1338-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772126828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "9647ef48-36ab-4348-9ffd-fdb7f1040910", "comment": "Malware payload (Mirai)", "value": "6a50bfd3908b5de4a0742d6d9eee8512", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "82ff69cc-1273-41dd-aa4a-e31a4058cf8c", "comment": "Malware payload (Mirai)", "value": "dab42df539c467b4c0297afc62fca5d7ffff43247540c9d8f32ae1e26a2b701d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "7db0c9da-7df8-40d1-8e92-76ecec87184e", "value": "T132933A47B71C0B53C59B5AF12DAB3BF08B69B9E113D76185A10AEFD00372EB12412F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "c9ec21c0-2432-44bf-801c-ad23ecc5e267", "value": "1536:QQK1n7bzX9jajzvxRq57wBRcGCMCZDxeBk+82l4umXxVqDrstKfz9e:Q97vk51RcG7A8l4umXxVqDrIKfz9e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126828, "uuid": "fa6210cf-4d32-489e-9157-5fef76379735", "value": 93907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "b0e435f5-6e00-4df9-922e-19acda4c8158", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60701444-1338-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772126828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "298f0b98-91b6-4f86-9d4d-0901ba1c106d", "comment": "Malware payload (Gafgyt)", "value": "2aee2b97298c54b3af6ba7fa8a161483", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "8b24048f-6ae3-4d3b-bb94-d184b56a0f12", "comment": "Malware payload (Gafgyt)", "value": "45dec729f20333a0cdefb8d49561e5282eb796adc542817b477c7666d6e2f14f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "92d969c9-a877-4de2-bd1c-b0a666e73759", "value": "T156A31A44F841872BC3D327BBE78E479D3B36569467DB33116A386EB42BC17C92E295", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "e3f4339d-0df5-48a0-b13d-6525c65e1f27", "value": "3072:VSx+i6mqaObhNknPNKV+qKmZuqQ4DPwXXtse:y6mRObnknP7qKmZuqQ4DPwXXtse", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126828, "uuid": "4a93d992-4723-418f-a5f8-352513664d23", "value": 100871, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "ccbc1f87-22c6-495f-a5c5-3b694746b8b9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60799606-1338-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772126828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "9ddf6b3b-b56d-4346-a926-c28831824fc3", "comment": "Malware payload (Gafgyt)", "value": "06789bece03e6a718c37d2287a8591bb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "43a66cf4-53a6-41c4-aa15-fada95d99a28", "comment": "Malware payload (Gafgyt)", "value": "53cb232339cee26a7c722e750a5a61ed41f6661f9d12311e840e75f512a7b3a1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "d0ad00de-e01b-49f8-b6b4-cc43d49835f7", "value": "T12DC32805D5508767C2D3237AE79F825D37325BA4A3DB33215A34BFB82BC27891E399", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "4b2170a1-62d1-4085-bb63-314893aca89a", "value": "3072:ekYPUfsgnsb0J2ag/VfVkDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0VkDy+mTQOY5R3cn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126828, "uuid": "42320b25-2c08-4ef3-acdc-d36d4b459a38", "value": 121007, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "f772ccc6-623c-4bde-b8f8-64dc606c6801", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60812d2a-1338-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772126828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "1cf66893-45ff-416d-bf11-82d83268131d", "comment": "Malware payload (Gafgyt)", "value": "13239b65fd7534f756945a8078b98dd8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "6d680d5a-1406-47f8-b314-107432bf43f2", "comment": "Malware payload (Gafgyt)", "value": "2e0183700c7ff0bcad08f28c20f9c840dbcbf662b7f4949727ecd81f09eb510f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "0ec5b717-fe56-4e47-b8b6-4da1bd0978f2", "value": "T154833B47E9A19FB7C0866A7565AB5E300B13E9912B4F1A4A303CA7F8434F4CD790EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "7acd489e-cd6f-4d88-9496-b5fa64fe5288", "value": "1536:ClN9YyOXmMSr4k9dgGwKGg0CfjGJCedojMyTRLmkxVqOEeofzee:g7OXmMSr4krG3JFBQLmkxVqODofzee", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126828, "uuid": "9d904023-0b20-4d36-b54e-2cbacbd0263e", "value": 88733, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "894235e3-1a54-4b8a-a04b-b4e68a6f7a0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60829000-1338-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772126828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "03a9694b-d574-49be-9116-22152066657a", "comment": "Malware payload (Gafgyt)", "value": "a980118951d6201c6e8f30d0226386dc", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "96d3a0eb-c9e3-4a75-a966-b82235c31a8f", "comment": "Malware payload (Gafgyt)", "value": "cc13a35938adac0591d7b2d1a70f0490dec2e8217582ce4c46f9e511b1a42f58", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "83a74ad7-0b5e-4af0-92af-088b2e6de457", "value": "T121833C02E743C6B3CC830BB2029BAE665931BDAA1E269F49F31D7DF45B128C47116F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "5691aa47-b512-4fb0-a768-70f869258117", "value": "1536:W35b9Vc4N3J6lreu5r4hWj8LXWDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0Yb2oRmEwVOz+ucfW7k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126828, "uuid": "02161146-41ac-4820-b9fe-92b3bc287358", "value": 84999, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "00d39e9c-aa38-4059-b1a2-ae3e73c53909", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "608345d0-1338-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772126828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "48152d93-d9bf-4962-973c-bed1f50a64ba", "comment": "Malware payload (Gafgyt)", "value": "3f3426639e9abb42a1a527fe6ef1f766", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "22585188-1e7e-4aae-9d13-26bc86237f07", "comment": "Malware payload (Gafgyt)", "value": "460b71258fb182ed9bf11b46c715bface5936b93cf8a363e16fa984ccb27f6ce", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "307e90cc-87d1-4c60-8ab2-cd2a94548487", "value": "T1A24160CE01650BFB2E83C832B3B486C0F499A1C194D45F17A6D97CA1A5BFCDC7845B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "bdad4904-c6b3-486d-94d7-c5b0e9deef0d", "value": "24:DKchD8tKF+DPBIkNIwIk0kshAIzoUgIVBoG1mAgKtBW1VJ8VI1tcxGP:DKID8tKIDPBIkNI5ZlzFLB4VJFz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126828, "uuid": "3c27beb5-5228-4178-93ca-56f28879e088", "value": 2204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "b844a454-29b7-466b-9d02-5a4409012d75", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6086e054-1338-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772126828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "0962e167-df1a-4f8d-9f40-f11a5161bdc1", "comment": "Malware payload (Gafgyt)", "value": "06946c16ff2738f2e8e9c0e1c38e15d2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "1b236492-0d27-400c-8072-4e6ca3afb248", "comment": "Malware payload (Gafgyt)", "value": "5007fba07a82af593bbd3530459580539a7d621ed4a30ca4681f2f8a678c46d9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "438a7093-a4c9-4b22-a041-59ec17c41fa5", "value": "T1B2C39517BB618FB7D81FDE33059A8902108DE58A12D96F6BB2B4C92CE74B94F08D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "ccbe8b80-d6b8-48bc-a134-69a88da2f236", "value": "1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Epg+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8EW+Dw8rmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126828, "uuid": "ae2fa7cb-58b5-43c1-9d5e-8a0a1789e8d7", "value": 126042, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126828, "uuid": "e6adcf79-121b-4d52-8479-34c094cc45cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61425aa3-1338-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772126829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126829, "uuid": "ea1dae36-575d-4a2c-a6ff-c94d1ba8a310", "comment": "Malware payload (Mirai)", "value": "ae6b6dcab5b71af6ec58a907b3232383", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126829, "uuid": "bb8f6570-bb16-4cd7-8b58-80ba85b8f958", "comment": "Malware payload (Mirai)", "value": "b39300df22a7975a4311ffec2866df24977137cac0aea0b3c79868983c1f7260", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126829, "uuid": "06fd8a55-3020-40d8-ae66-53e0ab95d550", "value": "T13BC3842E7E12BFBEE668863107F35F70879521D227A19382F26CD6181E7128D1C5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126829, "uuid": "64cff988-f5df-4161-9843-9d33584c03af", "value": "1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBefEdWfRZrmW+IFj:Ted0W0MZQHrd6RZrmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772126829, "uuid": "fe354c9b-4130-41b6-8eea-0eead47ff534", "value": 125962, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126829, "uuid": "dfaab894-d7f5-4686-900a-b9d1b22b2dd3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6af770fc-1340-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772130281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772130281, "uuid": "768fa0f7-aab0-4047-b2fe-bd39f1b7eb71", "comment": "Malware payload (Mirai)", "value": "d3382fa61a9fcbd9e3058fa9b597fd2c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772130281, "uuid": "913c8ac5-4db2-4ac6-8072-5b9f1623c512", "comment": "Malware payload (Mirai)", "value": "81070dfd1759cb73ff68ccf6c4cb82e51b7e1cf1358db512d468c526ccf7b7af", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772130281, "uuid": "1ef0a0b6-af07-48b9-b170-201ba574538c", "value": "T188B2D0929259D960CB343D39CBF5C7016BBB6BBC81EAB49B1D051270FA4B09F1BF05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772130281, "uuid": "b42ab5ce-61a8-4b49-80ac-b970edef644a", "value": "384:Dk7BkL13le9o6cDSxexiePFdr3r8vTcZEtBor1xXDAlHj33K2ARthymdGUop5hLu:0kLtI9o6cWxeLFdLowvAlHLqjs3Uozo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772130281, "uuid": "48591610-0daa-44b2-8076-b6b7ad752972", "value": 23572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772130281, "uuid": "1ab8012a-3e9c-40ca-b578-c02f5501aabe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "061b53eb-1342-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772130971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772130971, "uuid": "84793446-932f-44c0-85b3-25e9078d8a79", "comment": "Malware payload", "value": "2bded7f160efcb81fbdde360f7ebe1f1", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772130971, "uuid": "3b438afb-9665-421e-a199-a9eb81f515f3", "comment": "Malware payload", "value": "278af435da0cfc45a7d28f6ac37c4d4b5eb5f6eb2a4a7ffa99233595c0c01650", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772130971, "uuid": "bb278c92-fd08-45f4-8e39-779ecb3579c9", "value": "T171662321BA838036E95B1E30753D9A759B3DFE345F64B0CFA784382D5E316C05B72A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772130971, "uuid": "e0d80e76-966e-4b31-bd7b-6ccf6e29eb9e", "value": "196608:xlc4PxNgvXPtj+zc5il1FiaRg9MRuGWRHZB:jrr+/tj+QITFic+MRRWRn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772130971, "uuid": "5755ca18-3362-475d-8e42-0071e99ffb13", "value": 7118848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772130971, "uuid": "ceffe972-5ec4-4c53-bd4a-43357d3e328c", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2708fb6d-1342-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772131026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131026, "uuid": "2cffec8e-811a-4356-b9d3-e1c4c3f6bae2", "comment": "Malware payload (Vidar)", "value": "65478c8ae70ebdf9ef9b3e9bc0bcece6", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131026, "uuid": "d0653f8d-1138-443a-adf4-1eab265b7fe3", "comment": "Malware payload (Vidar)", "value": "6c5c23f6b9782be91231efc392e5752931ff1663606de87ba625da51d8a44d09", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131026, "uuid": "1287dcd8-4ac8-4851-8ecd-4e3087112714", "value": "T151B55A0F6C9828E5C2EA5279C877D2E2273BB929073A23C31E5766381D722D65D7F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131026, "uuid": "7613e863-d08d-424d-ad8e-880e46e4bcc4", "value": "ebc247a77b4d4a804b261f97a1fd075c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131026, "uuid": "453f31b7-b2f0-407f-b890-6b31ac392640", "value": "24576:ld90yukEvAqDX+pHhaq5UjIyEqd98z8ZHzVpf1rtPodt+/CNsn:ld9rukEvAqDXaaq5UE2Zr1WE3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772131026, "uuid": "bba66bb3-eecb-4207-8413-0022776f7f27", "value": 2492416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131026, "uuid": "78005b91-9b9e-4518-86c3-f9d9a4c565c2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "702b946f-1342-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772131149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131149, "uuid": "b9c87724-8dd3-4f92-893f-655c082608f2", "comment": "Malware payload", "value": "5bd9d10c6efe185c9e045ce4c1169dd6", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131149, "uuid": "984c4351-ae57-4819-971f-457114e1c99d", "comment": "Malware payload", "value": "ee6f075eadb7f5ae11888bc59f407248fb7c29e52df077d37d74b3ad03c17649", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131149, "uuid": "09d42430-8433-4d91-aceb-9e8ce6f077b0", "value": "T166662321BA838036E95B1E30753D9A759B3DFE345F64B0CFA784382D5E316C05B72A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131149, "uuid": "e471b7e0-452e-4ae8-bad5-e9c92126c687", "value": "196608:Slc4PxNgvXPtj+zc5il1FiaRg9MRuGWRHZB:yrr+/tj+QITFic+MRRWRn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772131149, "uuid": "b619e300-92d8-4bdd-b945-ca3b80fb4d6c", "value": 7118848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131149, "uuid": "bf0a38a1-5f88-438b-8536-c620b8d6ae6d", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f225c21d-1347-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772133515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772133515, "uuid": "f45749d6-eae0-43c2-a204-7b6851292c53", "comment": "Malware payload (Mirai)", "value": "0c73fab6cd34214be81468240ae472d8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772133515, "uuid": "e5bff20c-57d6-41d7-890b-d2ed03488cd1", "comment": "Malware payload (Mirai)", "value": "a4fd3c35c5c9f36fb53c52d29e123a5b8b20275486bd3fc67afcca494fb7e830", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772133515, "uuid": "1f738fc3-304c-49a6-aa56-a2cefa6369fa", "value": "T15613013E4802667BE695D07802B087E95F2E4F25F44B6C336841D2E36F424E625D3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772133515, "uuid": "a9022a18-9fe1-4577-a264-02023c539fcd", "value": "768:B3LWQMRnp943osTSxOhMsTPn8vC13D8cgqMVBFmp++i6RcIJgGlzDpbuR1JEt:lLWXX44smBsTP8aN9MVyVJuet", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772133515, "uuid": "aac45bad-cb4d-4ec0-8b7f-04e9a05fbf5e", "value": 43292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772133515, "uuid": "d6ffefaf-128a-43c1-8fdd-045593ec0d00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb71c1d3-1347-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772133784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772133784, "uuid": "45e10511-e6c4-425b-9876-7623aa72f771", "comment": "Malware payload (Mirai)", "value": "b6959543aa89959e29b4a44919def98d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772133784, "uuid": "0d533f44-2eb9-4773-9317-a121fd78cdf2", "comment": "Malware payload (Mirai)", "value": "e5f6bbf2ca49a99cb1d778ea0085853d906a5b9f6219af57eec81ce94b81c0cf", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772133784, "uuid": "9b11b2ae-6b8b-460e-a629-44bb03eb7b5e", "value": "T1BA13E1F32663A7B8C427A77B41096960F850392F25AB0F9E4DD97FBBAC468C10C51D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772133784, "uuid": "96e693fd-aea4-4cf2-abab-08ded8e5cf44", "value": "768:pQREmv11Q42CCLQGB8XoK4RhHlp4dADeMNjXDGsfFNSSxx0KJ:OEm9/u8X8D2uPNjzGYNhPJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772133784, "uuid": "f2757401-bf54-4a53-8e59-fc581227c37d", "value": 42004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772133784, "uuid": "85b90970-ee0b-4287-b444-51d0d2364a75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "406d2a83-1349-11f1-8369-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1772134075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772134075, "uuid": "9898777c-af08-4ab1-a111-61edb385d30c", "comment": "Malware payload (njrat)", "value": "3ad01ec1cb405242ad51015fb2a03a6f", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772134075, "uuid": "45a283e8-f57d-4f0f-bc48-67226ae55b75", "comment": "Malware payload (njrat)", "value": "3d274658a5e335879fd6b3529183941eb75b882b4980383229491132b454dbfe", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772134075, "uuid": "63eb67f2-9ca1-4dd7-af11-d85d756d65e0", "value": "T19C05024C1758D803CAB92B7A59B1F27807BD6EEAB410D31B4FECACDB7962B5118083", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772134075, "uuid": "1529e0ca-316b-4c8a-8e96-78eaf0ea3674", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772134075, "uuid": "26a20e15-e86f-4312-9e97-c753ed0af419", "value": "24576:SI5aO/QBOlS2B4x2BYMZgVyjSG1Uj0HTifC:DUAS2B+6/ZgVyjSGij0zkC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772134075, "uuid": "ad00bdcb-2108-4815-9454-bbced575ffb5", "value": 865288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772134075, "uuid": "e9ce6489-5fec-4f90-8d15-319726847cdb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b2edbbf-1348-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772135357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772135357, "uuid": "89d3983d-7dab-4b7d-b4b8-83fbadd4abeb", "comment": "Malware payload (Mirai)", "value": "eaa4445ea45a00d66f0606ac4e43501b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772135357, "uuid": "b4395d1a-6df4-4629-b121-5c5d0fc9ba1b", "comment": "Malware payload (Mirai)", "value": "e3ebc307950a78a838097bf77a1df0647913c0ea039e64a3b5b75b1f614d49c2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772135357, "uuid": "537dd7f2-41cd-4597-abed-261661cfcf2e", "value": "T12003F243C1CCCB4691CD813229FB378A8260D9EFD6408C1FAFD8547B16B5E9A3E2D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772135357, "uuid": "b2d04794-b703-46c3-875a-8cd44be01059", "value": "768:U/Bs3vLMt9H3itgPNWX1a49vUf4INgz9AOjDSitfYrf6WlnbcuyD7UtQRjm:U5qL69XiqP+aA+/Ngz9ljDSixzgnouye", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772135357, "uuid": "442904d7-f620-48f1-ba8c-a2a0ed3cf53e", "value": 39460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772135357, "uuid": "d019d385-6f11-473a-921a-e14b28d0e99b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1e49b43-1347-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772135906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772135906, "uuid": "5071b78e-a317-40b6-9a2f-f489f230a5bc", "comment": "Malware payload (Mirai)", "value": "c67c0224ba5803bb4b4812add5918657", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772135906, "uuid": "d0c668ea-b9d6-45df-9b26-def9a49f51cf", "comment": "Malware payload (Mirai)", "value": "d3591ff1212964ddc7bba57376a891bf9df8ee33cb85f5ba958f380236e0a7ea", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772135906, "uuid": "2a6d003c-5409-4ea1-9485-b16ca8742459", "value": "T1D783AD73C82A0D28D44848F0B0A49F3597A3E112C5972FF6999AC679D08BEDCF6427", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772135906, "uuid": "d0aa00b9-130a-4146-9547-cd19bb758ed0", "value": "1536:iYJrLxyPU8qAQKXi+dNlVKWBh88OO0r9CncizA9ypfk:ioLxzaXXbl8WZOO0r9t+Mgk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772135906, "uuid": "755e17cb-6f0b-4682-af60-addb2501a556", "value": 81204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772135906, "uuid": "9ac0e338-0111-4258-9bcd-bd6cb62a7c6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8b3f44d-1348-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772136687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772136687, "uuid": "45e09560-d05a-442d-a8a5-6275c80e170a", "comment": "Malware payload (Mirai)", "value": "9f8068a0fec019ab36c81e6056423ed5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772136687, "uuid": "5f309946-57bb-43c5-b6bb-3106e4e74457", "comment": "Malware payload (Mirai)", "value": "b4ab36feb45c65198a4eb7e4121c0a3e9c338e1b518539b39f5d145547be191b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772136687, "uuid": "99b76d8d-53dc-4b62-af25-3ad839442203", "value": "T1BF63028A5809BF32C1A29D3C52D9C0037EC84F19E56F6520B5FD4233A9F6B1EA9DC5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772136687, "uuid": "cd8901ac-52a3-4016-9ad9-de46db29609d", "value": "1536:0VVyQU79HesWMPxTRoEjlOh9/wpLcJwgELvR+Bl1E2FaMOgP:0VIQEVWa1y/wpLTlLJ+D13FTOgP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772136687, "uuid": "5b86081b-32d5-4d11-a49a-5e4cc08e469c", "value": 66980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772136687, "uuid": "c4d1ff72-d9b9-4051-95dd-f5d2d1db6487", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67871e13-1348-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772137457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772137457, "uuid": "b2f60f68-e36a-4ce2-86f7-104aaf8d52c6", "comment": "Malware payload (Mirai)", "value": "66a0f3a39f4c464eafb28f1ba92fdc97", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772137457, "uuid": "7958bf74-2295-40b7-a163-2056fc7eabe4", "comment": "Malware payload (Mirai)", "value": "0c623b12145c2c4c3f039bc2c2d29d3eb0131afb462f05916ccbbe58733c076d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772137457, "uuid": "cb3cf51d-0af8-492d-bd35-9e7281c7322b", "value": "T14D13F15CF1F15B4AC5DE29B647C914C6CB91D2E2BB9E47A023F89E01A1A921778CA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772137457, "uuid": "95ef1c5e-a403-483d-b95d-189f81ef8099", "value": "768:Nkcokixbqtp0EaMCCkqeVcgfBR6EoJWEM2voEVWXbjjXW6hWc:+fXxb0baMCqdKPNEdxoXbH1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772137457, "uuid": "5ac12c05-d5ff-4889-bacc-8801cc3b3e6e", "value": 44196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772137457, "uuid": "36e15f0c-a931-4fae-9e37-4cdb173c7dc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54de104a-134a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772138219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772138219, "uuid": "130c8fac-dbc9-4985-b0de-ab5199cde8fb", "comment": "Malware payload (Mirai)", "value": "bd1f576a3343d61fc12f8ca3960b2119", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772138219, "uuid": "d9a0b0b5-ce05-4773-afb9-ca307fa6af4d", "comment": "Malware payload (Mirai)", "value": "23a59aa45c875a645a52e51789ba1c101154fa943046bb391d73e688c95f3412", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772138219, "uuid": "e610861a-9e77-4af6-8b10-3c42f172f133", "value": "T1AB03F10385CC060CD1BE23796D8DBC4A0994F4D9379947B6AFC0345DEE62E6E7A093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772138219, "uuid": "77968c0e-2015-4ffa-a7ee-489e343aa8d2", "value": "768:sVFj9CcBYTW6unnGdNvU8zXBrkjdz0qSNhYzxXsGXcKMQRl7P/nbcuyD7UHQRjG:QgiYHunIMzzafY98wRBP/nouy8Hyq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772138219, "uuid": "d63f89ab-f666-48a1-8680-f018f3ba82f9", "value": 40664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772138219, "uuid": "84c88e17-782a-489d-a0fe-7b5b0e8dba28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f4a865c-1353-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772138342, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772138342, "uuid": "1676f03b-98f8-4ec5-8d3d-e019c3cea114", "comment": "Malware payload (Mirai)", "value": "119e7734f6603f19d4ce69f3bb80c958", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772138342, "uuid": "50b96eba-65f4-45f4-9ad8-37b1bd136e7a", "comment": "Malware payload (Mirai)", "value": "fd9cfa54b596c6cafb06a7d83af8ae3c2914ff0eff63e9f28fc6973985c7b20b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772138342, "uuid": "f028981e-6bc9-4ad4-a6bd-33e04318db0d", "value": "T1B313F18965975D88CC9F4DBBB1AD4B372F8125C632E3270EE1240ADEBE6F506789A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772138342, "uuid": "984fc257-8a47-4b79-9b8b-bf9517c36fae", "value": "768:TlgKrCw8t5h2mpuln7N6BL+f80O0RIIiRPlZMWG:T2PNtCmpiB8GEBlZ0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772138342, "uuid": "9b075317-37fe-48d6-b498-ea1336639059", "value": 43560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772138342, "uuid": "c79cac4b-62f9-488d-9439-9cd0595ac208", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064019, "uuid": "233a9d50-12a6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.107.203:47425/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064319, "uuid": "d61c6418-12a6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.68.103:55635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064376, "uuid": "f851a908-12a6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.68:51845/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064609, "uuid": "83256a7c-12a7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Niwatheking/messari-crack/raw/refs/heads/main/src/__pycache__/crack-messari-v3.7-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064623, "uuid": "8b88b158-12a7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.130.227:41822/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064671, "uuid": "a808bbf1-12a7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.51.202:48383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064671, "uuid": "a80b11fc-12a7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.133.217:52091/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064727, "uuid": "c9b20dc1-12a7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Noam-Space/nullsec-crypto/main/python/crypto_nullsec_3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772064846, "uuid": "1085c5c0-12a8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nguyetgggr5/iMazing-Crack-Repack/main/georgiadesite/Mazing-i-Crack-Repack-2.5-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065026, "uuid": "7ba135fa-12a8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nguyetgggr5/iMazing-Crack-Repack/raw/refs/heads/main/georgiadesite/Mazing-i-Crack-Repack-2.5-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065086, "uuid": "9f9ef1bb-12a8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/marcohp1985/luau-rng-cracker/raw/refs/heads/main/trinerved/cracker_rng_luau_v3.3-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065086, "uuid": "9fa0371c-12a8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/marcohp1985/luau-rng-cracker/main/trinerved/cracker_rng_luau_v3.3-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065156, "uuid": "c900aab4-12a8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.220.69.49:60502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065158, "uuid": "ca588766-12a8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.148.13:55081/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065270, "uuid": "0d47e4e8-12a9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/prosyt/Password-tester/raw/refs/heads/main/assets/favicon/tester-Password-v3.0-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065625, "uuid": "e09fced9-12a9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.143.172.66:39236/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065626, "uuid": "e16bc1bb-12a9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.68.103:55635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065688, "uuid": "064c85dc-12aa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/revathi-birapaka/RenameModules-Anti-Crack/raw/refs/heads/main/latecoming/Rename_Crack_Anti_Modules_2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065748, "uuid": "2a4c7391-12aa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.107.203:47425/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065748, "uuid": "2a5105d8-12aa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.68:51845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065820, "uuid": "54ff38b2-12aa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.133.217:52091/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065866, "uuid": "705792d7-12aa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Anatolylimbless794/Vape-V4-Crack-Kangaroo/raw/refs/heads/main/Londres/Kangaroo-Crack-Vape-1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772065986, "uuid": "b7de91dc-12aa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Madskkrrtt/bins/refs/heads/main/scale.txt", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772066226, "uuid": "4703125c-12ab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/soloobr/z-loops/raw/refs/heads/master/breathseller/z-loops.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772066297, "uuid": "713bd2bc-12ab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.87.102:42414/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772066345, "uuid": "8deb0516-12ab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/prosyt/Password-tester/refs/heads/main/assets/favicon/tester-Password-v3.0-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772066539, "uuid": "01570d7f-12ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.148.13:55081/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772066717, "uuid": "6b6d9d0a-12ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.220.69.49:60502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772066826, "uuid": "ac872ec2-12ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5347973496/Za3G3oZ.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772066836, "uuid": "b2e1356b-12ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.198.143:52172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772067138, "uuid": "66cdad79-12ad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.23.244:35776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772067316, "uuid": "d0b95031-12ad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.235.147:34912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772067554, "uuid": "5eb7f23f-12ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.143.172.66:39236/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772067788, "uuid": "ea3fa9e2-12ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.95.219:55765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772067857, "uuid": "13611d7d-12af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.235.147:34912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772067909, "uuid": "32012245-12af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.87.102:42414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772068212, "uuid": "e6b0bfb6-12af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.241.159:42097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772068338, "uuid": "321536f4-12b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.32.92:56882/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772068339, "uuid": "322d073b-12b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.188.235:49543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772068472, "uuid": "8185ee80-12b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.23.244:35776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772068651, "uuid": "ec53e2be-12b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.198.143:52172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772068765, "uuid": "302f5e79-12b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.255.128:50154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772068990, "uuid": "b65c1d60-12b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/bomm010/cracked-webpage-commenter-extension/refs/heads/main/Iliadic/commenter_cracked_webpage_extension_3.0-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772068990, "uuid": "b6664c4c-12b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/bomm010/cracked-webpage-commenter-extension/raw/refs/heads/main/Iliadic/commenter_cracked_webpage_extension_3.0-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069060, "uuid": "dfe5ecc0-12b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.107.90:34694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069167, "uuid": "1ff2af79-12b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/soloobr/z-loops/refs/heads/master/UpdateLM/Properties/loops_z_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069167, "uuid": "1ff618f4-12b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/soloobr/z-loops/raw/refs/heads/master/UpdateLM/Properties/loops_z_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069231, "uuid": "460ba450-12b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/moha-create/cracked-tab-scheduler-extension/raw/refs/heads/main/Helenus/tab-cracked-extension-scheduler-1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069242, "uuid": "4c9764ff-12b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.24.236:57581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069346, "uuid": "8a711116-12b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/JVNTfks/cracked-webpage-translator-extension/raw/refs/heads/main/febricula/webpage-cracked-extension-translator-v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069647, "uuid": "3dd3c36d-12b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Alaa-Awad0/cracked-enhancer-for-medium-extension/refs/heads/master/CSS/medium-for-cracked-extension-enhancer-1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069647, "uuid": "3dd9016a-12b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Alaa-Awad0/cracked-enhancer-for-medium-extension/raw/refs/heads/master/CSS/medium-for-cracked-extension-enhancer-1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069649, "uuid": "3f339f17-12b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Alaa-Awad0/cracked-enhancer-for-medium-extension/raw/refs/heads/master/circumcone/cracked-enhancer-for-medium-extension.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069652, "uuid": "4149c156-12b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Alaa-Awad0/cracked-enhancer-for-medium-extension/refs/heads/master/circumcone/cracked-enhancer-for-medium-extension.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772069962, "uuid": "f9cb72f8-12b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.188.235:49543/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772070087, "uuid": "4499c3a9-12b4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.32.92:56882/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772070621, "uuid": "82d885d2-12b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.216.44:42099/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772070923, "uuid": "36740a36-12b6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.243.224:47700/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772071044, "uuid": "7e81ef9a-12b6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.242.56:39363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772071222, "uuid": "e8a22297-12b6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.216.44:42099/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772071698, "uuid": "045a27e1-12b8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.223.150:58781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772072055, "uuid": "d9536d87-12b8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.243.224:47700/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772072122, "uuid": "01605a78-12b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.253.93:43028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772072247, "uuid": "4bc7b971-12b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.108.173:33647/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772072288, "uuid": "63eeb820-12b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.32:60466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772072419, "uuid": "b26da243-12b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.32:60466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772072419, "uuid": "b27b7afc-12b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.108.173:33647/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772072786, "uuid": "8d15aeb8-12ba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.49.35.249:40579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772073251, "uuid": "a2226b7b-12bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.222.30.227/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772073251, "uuid": "a2462250-12bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.222.30.227/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772073261, "uuid": "a874fc8d-12bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.222.30.227/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074098, "uuid": "9b0cbb81-12bd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.76.186:39381/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074327, "uuid": "23b1d27c-12be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hvc3Er/cracked-save-to-asana-extension/raw/refs/heads/main/exclusivist/save_cracked_asana_to_extension_2.6-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074338, "uuid": "29eeb381-12be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.44.109:38034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074388, "uuid": "47a604e3-12be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/RameeDeez/cracked-enhancer-for-slack-extension/main/unmoralizing/cracked-enhancer-for-slack-extension.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074446, "uuid": "6aaa3f24-12be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/365player/cracked-save-to-microsoft-one-drive-extension/raw/refs/heads/main/cruck/one_drive_to_save_cracked_microsoft_extension_v2.2-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074446, "uuid": "6acb3814-12be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/vansh1772/cracked-save-to-todoist-extension/raw/refs/heads/master/app/src/androidTest/extension-cracked-todoist-to-save-v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074866, "uuid": "650e7113-12bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kbusweaty/cracked-enhancer-for-notion-extension/raw/refs/heads/main/isocheim/enhancer_cracked_notion_extension_for_3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772074866, "uuid": "651d45a8-12bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kbusweaty/cracked-enhancer-for-notion-extension/refs/heads/main/isocheim/enhancer_cracked_notion_extension_for_3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772075045, "uuid": "cfa90733-12bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Ek2025/cracked-save-to-trello-board-extension/main/gudewife/to-extension-trello-cracked-board-save-3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772075106, "uuid": "f428333c-12bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Ek2025/cracked-save-to-trello-board-extension/raw/refs/heads/main/gudewife/to-extension-trello-cracked-board-save-3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772075286, "uuid": "5efb9d28-12c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/LucasRafael-S/cracked-tab-grouping-assistant-extension/main/jogglety/assistant-cracked-tab-extension-grouping-2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772075288, "uuid": "60534fd7-12c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/LucasRafael-S/cracked-tab-grouping-assistant-extension/raw/refs/heads/main/jogglety/assistant-cracked-tab-extension-grouping-2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772075419, "uuid": "ae51bcea-12c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.208.102:43469/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772075718, "uuid": "60da1256-12c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.44.109:38034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772075826, "uuid": "a0dcbc0d-12c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/alexandr300314-prog/subVerison_GTAV_Hack/refs/heads/main/subVersion/d3d9/GTA_Verison_sub_Hack_2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772076069, "uuid": "320f984f-12c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.61.212:60301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772076486, "uuid": "2a57dbb5-12c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/igoralways/cracked-enhancer-for-google-meet-extension/raw/refs/heads/main/josh/cracked_for_extension_meet_google_enhancer_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772076490, "uuid": "2c935fd2-12c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/igoralways/cracked-enhancer-for-google-meet-extension/refs/heads/main/josh/cracked_for_extension_meet_google_enhancer_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772076555, "uuid": "53cd1dce-12c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.230.243:38242/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772077881, "uuid": "69a2a933-12c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.41.202:50470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772077935, "uuid": "89f5f020-12c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.41.202:50470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078000, "uuid": "b108bdb1-12c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.230.243:38242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078001, "uuid": "b13473cf-12c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.10.12:60639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078057, "uuid": "d2c115be-12c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.37.40:57342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078174, "uuid": "18b49afe-12c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.208.102:43469/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "5b92f308-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/rizzx.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "5b97799b-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/rizzx.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "5b9a33ca-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/rizzx.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "5babd56e-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/rizzx.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "5babdda4-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/rizzx.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "5bac0537-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/rizzx.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078716, "uuid": "5bac09c0-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/rizzx.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078719, "uuid": "5d680c2c-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/rizzx.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078719, "uuid": "5d681421-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/rizzx.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078719, "uuid": "5d6821fd-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/rizzx.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078719, "uuid": "5d713d91-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/rizzx.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078766, "uuid": "7975008d-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/rizzx.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078780, "uuid": "81a16dfd-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/rizzx.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078780, "uuid": "81a1e515-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/debug", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078780, "uuid": "81ab1262-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/rizzx.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078830, "uuid": "9f748a4a-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078831, "uuid": "a042eeea-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/ambatukam/rizzx.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078831, "uuid": "a06303ae-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/ambatukam/rizzx.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078831, "uuid": "a0665ae5-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/ambatukam/rizzx.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078831, "uuid": "a06c96b8-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/ambatukam/rizzx.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078831, "uuid": "a06cbfa8-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/ambatukam/rizzx.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078831, "uuid": "a06cc520-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/ambatukam/rizzx.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078831, "uuid": "a06e7cfa-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/ambatukam/rizzx.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078832, "uuid": "a07cb5e2-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/ambatukam/rizzx.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078832, "uuid": "a07cbf9b-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/ambatukam/rizzx.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078832, "uuid": "a082d0f8-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/ambatukam/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078832, "uuid": "a0a0201b-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/ambatukam/rizzx.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078833, "uuid": "a1a0c057-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/ambatukam/rizzx.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078837, "uuid": "a3a0b202-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/ambatukam/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078840, "uuid": "a59075bc-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/ambatukam/rizzx.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078840, "uuid": "a5930370-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/ambatukam/rizzx.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078840, "uuid": "a5968c04-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/ambatukam/rizzx.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078840, "uuid": "a599e5f6-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/ambatukam/rizzx.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078840, "uuid": "a5a181f3-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/ambatukam/rizzx.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078840, "uuid": "a5a6bf3b-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/ambatukam/rizzx.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078841, "uuid": "a5d32d88-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/ambatukam/rizzx.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078841, "uuid": "a5ffd015-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/ambatukam/rizzx.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078841, "uuid": "a605ee64-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/ambatukam/rizzx.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078841, "uuid": "a60dae45-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/ambatukam/rizzx.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078841, "uuid": "a612b470-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/ambatukam/rizzx.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078841, "uuid": "a624b055-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/ambatukam/rizzx.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078841, "uuid": "a62ca33a-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/ambatukam/rizzx.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078841, "uuid": "a6386c8d-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/ambatukam/rizzx.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078841, "uuid": "a63884cc-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/ambatukam/rizzx.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772078841, "uuid": "a63b49a3-12c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/ambatukam/rizzx.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079734, "uuid": "ba64381a-12ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.67/auto", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079734, "uuid": "ba648a39-12ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.67/check1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079734, "uuid": "ba648def-12ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.67/check.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079734, "uuid": "ba65ce9a-12ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.67/checkmacos.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079734, "uuid": "ba67458d-12ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.60.214.146:47202/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079734, "uuid": "ba703bbc-12ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.10.12:60639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079734, "uuid": "ba91399b-12ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.110.15:47095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079735, "uuid": "bad7947d-12ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.67/syst3md", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079735, "uuid": "bae149e5-12ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.67/log", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079735, "uuid": "baee1942-12ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.208.159.67/Error84", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079737, "uuid": "bc4bee29-12ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/ambatukam/rizzx.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079740, "uuid": "be249103-12ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3034867.contaboserver.net/1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079740, "uuid": "be28ed8b-12ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://pls.ddosme.web.id/1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079749, "uuid": "c315303c-12ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.192.145:50840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079850, "uuid": "ffd3e8f6-12ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.197.169:45446/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079969, "uuid": "469ac28d-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079969, "uuid": "46a04dde-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079970, "uuid": "4737934e-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "4b2b9e7d-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "4b2ba241-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "4b2ba646-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/001010101010010110101011101010101101010111010101/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "4b302e0f-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "4b342a88-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "4b3d4036-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "4b4c713a-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "4b4c7403-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "4b677bc8-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079977, "uuid": "4b6deb19-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079978, "uuid": "4bc8e007-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079978, "uuid": "4bda38c7-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "4cf9cb38-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "4d1b99d6-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "4d1b9b10-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "4d218344-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "4d219e89-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "4d2224fa-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "4d222af1-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "4d23711b-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "4d2ad65e-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "4d3a79e1-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079980, "uuid": "4d3fdb07-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079981, "uuid": "4d5395ac-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079981, "uuid": "4d53e624-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079981, "uuid": "4d55b98a-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079981, "uuid": "4d55f4e3-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079981, "uuid": "4d5cafec-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079981, "uuid": "4d6f8ed6-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079981, "uuid": "4d7580e4-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079981, "uuid": "4d7da643-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079981, "uuid": "4dd203d9-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/001010101010010110101011101010101101010111010101/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079982, "uuid": "4df87530-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079982, "uuid": "4dfbc16c-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079982, "uuid": "4e31500c-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079983, "uuid": "4e8cdd28-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079984, "uuid": "4fa71af5-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079986, "uuid": "50d8bb29-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079988, "uuid": "51d8f69a-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079989, "uuid": "52630026-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079990, "uuid": "52f11bae-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079990, "uuid": "52f3ee6d-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079992, "uuid": "53ef09ef-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079992, "uuid": "542cf72f-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079992, "uuid": "542ee70f-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079993, "uuid": "549aa753-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079993, "uuid": "54db10b3-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079993, "uuid": "54eca212-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079994, "uuid": "55161399-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079994, "uuid": "551677b3-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079994, "uuid": "553157f2-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079994, "uuid": "5534f246-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079994, "uuid": "5535b75a-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079994, "uuid": "5539b56b-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079994, "uuid": "553b1741-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079994, "uuid": "553bb1a8-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079994, "uuid": "55497c6c-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079994, "uuid": "556112ca-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079994, "uuid": "55699ef8-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079994, "uuid": "556b48ae-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079994, "uuid": "5573720d-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079994, "uuid": "557a2e05-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079994, "uuid": "55807b9f-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079995, "uuid": "55aa14f7-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079995, "uuid": "561ba822-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079996, "uuid": "56940603-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079996, "uuid": "569a8637-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079996, "uuid": "56aa8536-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079996, "uuid": "56aa8985-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079996, "uuid": "56d736f7-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079997, "uuid": "56ed8992-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079998, "uuid": "5804ba30-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079998, "uuid": "5805c821-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079998, "uuid": "5805cc98-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772079999, "uuid": "5812e7e4-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080001, "uuid": "59400fbe-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080001, "uuid": "5941c104-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080001, "uuid": "5947f13c-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080001, "uuid": "594ddbda-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080002, "uuid": "5a207887-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080006, "uuid": "5c456a52-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080006, "uuid": "5c83c77a-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080006, "uuid": "5cab9bff-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080007, "uuid": "5d5bab2a-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/001010101010010110101011101010101101010111010101/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080008, "uuid": "5d791f90-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080008, "uuid": "5de13f7d-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080009, "uuid": "5e3e4a01-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080009, "uuid": "5e5c4f6d-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080010, "uuid": "5ed5f7af-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080010, "uuid": "5f036f0a-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080011, "uuid": "5f5b9911-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080011, "uuid": "5f5f1b7b-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080011, "uuid": "5f67393e-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080011, "uuid": "5f7db963-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/001010101010010110101011101010101101010111010101/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080011, "uuid": "5f82355b-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/001010101010010110101011101010101101010111010101/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080011, "uuid": "5f82f719-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/001010101010010110101011101010101101010111010101/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080011, "uuid": "5f83c45d-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080011, "uuid": "5f847725-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080011, "uuid": "5f8479a4-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080011, "uuid": "5f8ad95b-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080011, "uuid": "5f91550a-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080011, "uuid": "5f9d8517-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080011, "uuid": "5fa0e834-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080011, "uuid": "5fc4d204-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.41.96:53603/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080011, "uuid": "5fca3a2b-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080012, "uuid": "603d3d3c-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080013, "uuid": "60c6e332-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080014, "uuid": "6170ac70-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080014, "uuid": "6190f28e-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080015, "uuid": "619a446a-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080015, "uuid": "61a31cd0-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080015, "uuid": "621b2328-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080015, "uuid": "621b5ab4-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080015, "uuid": "62263722-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080015, "uuid": "62264184-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/001010101010010110101011101010101101010111010101/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080016, "uuid": "62463b1a-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080016, "uuid": "624c2e93-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080017, "uuid": "62f76dae-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080017, "uuid": "631681b0-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080017, "uuid": "631ac8ca-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080018, "uuid": "63cc811d-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080019, "uuid": "63f8219b-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080019, "uuid": "63f9a766-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080021, "uuid": "657044fb-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/001010101010010110101011101010101101010111010101/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080024, "uuid": "673273b2-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080024, "uuid": "67370a12-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080024, "uuid": "673b0925-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080024, "uuid": "673cf015-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080024, "uuid": "6745dd33-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080024, "uuid": "674957a5-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/001010101010010110101011101010101101010111010101/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080028, "uuid": "69b0de5f-12cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080869, "uuid": "5ea1d32d-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.206/downloads/sshd/ubuntu/log", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080869, "uuid": "5ec36535-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.120.95.129/l", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080870, "uuid": "5f5f1d24-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.110.15:47095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080870, "uuid": "5f86ff66-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080872, "uuid": "607b0f32-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://mailserver.ccsnetwork.cn/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080872, "uuid": "609984cb-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://mailserver.ccsnetwork.cn/debug.dbg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080874, "uuid": "61c47531-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.120.95.129/checkmacos.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080874, "uuid": "61d0e841-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.9103843.duckdns.org/1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080874, "uuid": "620f212b-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.120.95.129/check.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080875, "uuid": "624b8e5e-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.197.169:45446/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080875, "uuid": "6257a2c2-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.37.40:57342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080877, "uuid": "636c8263-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.120.95.129/check1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080877, "uuid": "637e20f6-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.120.95.129/auto", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080878, "uuid": "646daa43-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.53.241:42309/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080879, "uuid": "64e71899-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.120.95.129/log", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080879, "uuid": "64f8d2e4-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.222.30.227/debug.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080881, "uuid": "664b3fe5-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84920433.duckdns.org/1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080881, "uuid": "664faba3-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.120.95.129/syst3md", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "665fe2d6-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://9103843.duckdns.org/1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "66884324-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.120.95.129/Error84", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "66b5fd2f-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.84920433.duckdns.org/1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "66cf1d73-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://mailserver.ccsnetwork.cn/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "66cf792c-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://mailserver.ccsnetwork.cn/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "66e2864a-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://mailserver.ccsnetwork.cn/spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "66e2dd86-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://mailserver.ccsnetwork.cn/arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "66ee2835-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://mailserver.ccsnetwork.cn/ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "66ee3264-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://mailserver.ccsnetwork.cn/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "66f2901a-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://mailserver.ccsnetwork.cn/mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080882, "uuid": "66f2b388-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://mailserver.ccsnetwork.cn/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080883, "uuid": "670ad198-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://mailserver.ccsnetwork.cn/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080883, "uuid": "6711dcaf-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://mailserver.ccsnetwork.cn/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080883, "uuid": "6713c520-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080883, "uuid": "671e1c6f-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92031819.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080883, "uuid": "67216a45-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://0837234.duckdns.org/1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080883, "uuid": "672b1731-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.92031819.duckdns.org/1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772080883, "uuid": "672cd592-12cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://dndn3829.duckdns.org/1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772081767, "uuid": "76148352-12cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Furinini/cracked-webpage-bookmark-manager-extension/raw/refs/heads/main/Rajput/webpage-cracked-manager-extension-bookmark-3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772081767, "uuid": "761cc943-12cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Furinini/cracked-webpage-bookmark-manager-extension/refs/heads/main/Rajput/webpage-cracked-manager-extension-bookmark-3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772081767, "uuid": "7630d6dc-12cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pollob99/cracked-tab-session-saver-extension/raw/refs/heads/main/gastrodidymus/extension-cracked-tab-session-saver-v3.9-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772081767, "uuid": "7634d03c-12cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Pollob99/cracked-tab-session-saver-extension/main/gastrodidymus/extension-cracked-tab-session-saver-v3.9-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772081772, "uuid": "78fadc3c-12cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://mailserver.ccsnetwork.cn/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772081772, "uuid": "7918c587-12cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.237.82:47910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772081772, "uuid": "795ebfa2-12cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.163.31:59931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772081779, "uuid": "7d0698d8-12cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.0837234.duckdns.org/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772082133, "uuid": "5034fa90-12d0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.192.145:50840/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772082188, "uuid": "71168786-12d0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.148.189:8080/kurayami_mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772082499, "uuid": "2a9fbc0c-12d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.3.207:35790/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772082921, "uuid": "2631ec51-12d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.129.194:39679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772082970, "uuid": "430f02f5-12d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.237.82:47910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772082972, "uuid": "449eaca4-12d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.28.103.46:60067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772083148, "uuid": "ad7c65d5-12d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.163.31:59931/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772083568, "uuid": "a7596e26-12d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://186.169.75.221/a.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772083569, "uuid": "a81dde79-12d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.148.189:8080/payload.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772083570, "uuid": "a8f9d3a0-12d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.148.189:8080/kurayami_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772083756, "uuid": "17c07acb-12d4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://hanzzmypanel.paneldo.my.id:8080/payload.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772083757, "uuid": "188913e7-12d4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://hanzzmypanel.paneldo.my.id:8080/kurayami_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772083757, "uuid": "1889209a-12d4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://hanzzmypanel.paneldo.my.id:8080/kurayami_mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772083868, "uuid": "5a9c2194-12d4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.101.82:36056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772084297, "uuid": "5a1ba35a-12d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.96.203:45436/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772084347, "uuid": "77bb59a6-12d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastefy.app/WSBxlMpn/raw", "Tag": [ { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772084410, "uuid": "9d4365ea-12d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://yaso.su/raw/utlwCJNi", "Tag": [ { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772084663, "uuid": "34197680-12d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.22.75:45169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772085196, "uuid": "71f1778b-12d7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.117.82:59154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772085256, "uuid": "9591f45c-12d7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.188:32929/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772085487, "uuid": "1f7074c4-12d8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.188:32929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772085615, "uuid": "6bb5d785-12d8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.101.82:36056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772085668, "uuid": "8b0f8731-12d8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6260748665/SJlwfe0.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772085741, "uuid": "b709b0f2-12d8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.147.204:47063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772085798, "uuid": "d8a44b93-12d8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:51725/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772085798, "uuid": "d8b71365-12d8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.76.196:49636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772085853, "uuid": "f9636c17-12d8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.28.103.46:60067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086038, "uuid": "681798fb-12d9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.207.34:57228/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086161, "uuid": "b144d107-12d9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.85:49486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086280, "uuid": "f810edff-12d9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.22.75:45169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086578, "uuid": "a9ea5d05-12da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.241.244:49515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086579, "uuid": "aa3b9dd0-12da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.76.196:49636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086707, "uuid": "f6d67f86-12da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.20.85:54584/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086766, "uuid": "198af67c-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.85:49486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086881, "uuid": "5e7161bc-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.157.4/ambatukam/rizzx.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086882, "uuid": "5eae55bb-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086884, "uuid": "6058b588-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "609a50e8-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "609af9f2-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "609c126f-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "609c1823-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "609de43b-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "60a42c57-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "60a4ab28-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "60a55bd2-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "60aeee82-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "60b11d26-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "60bde2c0-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772086885, "uuid": "60c18b5e-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.96.203:45436/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772087049, "uuid": "c294c2c7-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://storage-secure.lostproject.it/public/update.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772087063, "uuid": "cafee589-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://exonautis.com/download/Exonautis.zip", "Tag": [ { "name": "GootLoader", "colour": "#2b08dd", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772087070, "uuid": "cf2ccd3f-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.20.85:54584/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772087072, "uuid": "d033276d-12db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.248.32:46120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772087491, "uuid": "ca1db535-12dc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.147.204:47063/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772087540, "uuid": "e6f52b59-12dc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.207.34:57228/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772087959, "uuid": "e0e2b9e1-12dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:51725/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772087961, "uuid": "e2371710-12dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.241.244:49515/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772088085, "uuid": "2c12982e-12de-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.137.251:54502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772088442, "uuid": "00c8847b-12df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.248.32:46120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772088502, "uuid": "243c4057-12df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.219.193:42433/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772088861, "uuid": "fa9d83c3-12df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.152.238:37237/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772088924, "uuid": "2030127b-12e0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.252.138:58697/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772088982, "uuid": "429c0a5a-12e0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.219.193:42433/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772089055, "uuid": "6e2c8860-12e0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.101.151:52268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772089402, "uuid": "3cd8d3a5-12e1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.70.50:46675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772089470, "uuid": "65bc25c6-12e1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.181.85:36483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772089639, "uuid": "ca3d2f57-12e1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.152.238:37237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772089884, "uuid": "5c449fb5-12e2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.70.50:46675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772089885, "uuid": "5cbcf623-12e2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.96.85:38960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772090614, "uuid": "0fa24cd9-12e4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:34726/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772091149, "uuid": "4e74eec9-12e5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.33.113:44945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772091207, "uuid": "708f74df-12e5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:34726/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772091268, "uuid": "94f37448-12e5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.229.20.23:50980/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772091446, "uuid": "ff6f030d-12e5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.63.15:59048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772092047, "uuid": "6539241c-12e7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.181.85:36483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772092345, "uuid": "170ef3ba-12e8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.147.211:35444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772092537, "uuid": "89524a77-12e8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.120.203:33143/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772092703, "uuid": "ec8b590f-12e8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.33.113:44945/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772092871, "uuid": "50752e44-12e9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.63.15:59048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772092951, "uuid": "8013cd6d-12e9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.141.254:39852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772093166, "uuid": "003df8c1-12ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://uswebzoomus.com/zoom/process.php?download=1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772093360, "uuid": "744c376a-12ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.147.211:35444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772094140, "uuid": "44f18fc4-12ec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.96.85:38960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772094620, "uuid": "634c9d0e-12ed-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.152.220:50651/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772094742, "uuid": "ab988e2c-12ed-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.237.39:41258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772094859, "uuid": "f1db19d6-12ed-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.88.242.17:51579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772094923, "uuid": "1786fa2c-12ee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.141.254:39852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772095350, "uuid": "16021771-12ef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.231.206:47178/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772095350, "uuid": "1603f2e0-12ef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.220.151:54067/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772095390, "uuid": "2e52a4d3-12ef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.233.136:44854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772095760, "uuid": "0ada5fd6-12f0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.152.220:50651/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772096058, "uuid": "bc2c0f00-12f0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.88.242.17:51579/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772096607, "uuid": "036bdd53-12f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.116.131:54081/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772096777, "uuid": "6917879e-12f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.220.151:54067/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772097127, "uuid": "396e7aee-12f3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.167.77:58506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772097251, "uuid": "835e7549-12f3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.110.183:40838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772097547, "uuid": "339045e4-12f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.231.206:47178/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772097676, "uuid": "80bfcfdc-12f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.75.147:34752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772098515, "uuid": "74e3311b-12f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.167.77:58506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772098638, "uuid": "be096987-12f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.120.10:47713/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772098872, "uuid": "499c0bc1-12f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.110.183:40838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772098999, "uuid": "94f50e6f-12f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.38.67:56116/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099123, "uuid": "def5b457-12f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.116.131:54081/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099176, "uuid": "fea949ab-12f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.41.251:52730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099361, "uuid": "6d293728-12f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.101.7:56026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099467, "uuid": "ac1a733f-12f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.69/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099478, "uuid": "b2d4d512-12f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.69/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099478, "uuid": "b2da2b92-12f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.69/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099478, "uuid": "b2eb0979-12f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.69/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099538, "uuid": "d665bad6-12f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.69/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099538, "uuid": "d69b70fa-12f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.194.92.55/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099595, "uuid": "f87fc8a6-12f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.69/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099595, "uuid": "f880f6f7-12f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.69/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099661, "uuid": "1fe06d68-12f9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.69/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099665, "uuid": "21e6e9f2-12f9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.sunamien.jp/cgi/up/uploader.cgi?mode=downld&no=55", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772099894, "uuid": "aaa33ec3-12f9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.228:34172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772100201, "uuid": "619b60ac-12fa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.123.60:38560/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772100249, "uuid": "7e35c367-12fa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://g88kkpkk.crystalforge.digital/?=check&&actmn=ZsVYTgfFabLVLfXw", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772100617, "uuid": "597056b1-12fb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.204.108:42065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772100739, "uuid": "a284fe14-12fb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.138.244:43135/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772100983, "uuid": "33c5dc38-12fc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.101.7:56026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772101292, "uuid": "ebbebc21-12fc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.193.33:46787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772101518, "uuid": "7299cf42-12fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.205.117:44630/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772103138, "uuid": "37faf629-1301-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.169.196:59816/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772103497, "uuid": "0e067339-1302-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.225.34:45414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772103980, "uuid": "2e25014a-1303-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.27.82:43810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772104214, "uuid": "b9926f28-1303-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.18.59:55942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772104451, "uuid": "46bfaab0-1304-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.86.202:45484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772104936, "uuid": "67cf8356-1305-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.137.34:50034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772105166, "uuid": "f1478113-1305-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/xkf95lbdgtxjofs4uem8c/ZoomApp_agent_x64_s-i-__fca21db2bb0230ee251a503b021fe02d2114d1f0.msi?rlkey=zvmjseot8z5gyzj6s0eu01myp&st=h0ulds3h&dl=1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772105169, "uuid": "f2dc261d-1305-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-462189601a584e8fad4889d4ed31f4f4.r2.dev/Zoom%20Setup.exe", "Tag": [ { "name": "DattoRMM", "colour": "#167832", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772105411, "uuid": "835e9931-1306-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.150.74:43262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772105424, "uuid": "8ae4b885-1306-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.221.37:48028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772105721, "uuid": "3bb2272e-1307-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.18.59:55942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772105840, "uuid": "82beb45a-1307-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.27.82:43810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772106551, "uuid": "2abbe179-1309-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.137.34:50034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772106689, "uuid": "7ce08ba9-1309-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.147.208:50583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772106857, "uuid": "e1307fe0-1309-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.150.74:43262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772107520, "uuid": "6c4c353d-130b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.120.150:58801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772107757, "uuid": "f931e5c8-130b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.45.159:38934/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772108058, "uuid": "ac8a9712-130c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.45.159:38934/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772108236, "uuid": "172d6716-130d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.138.244:43135/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772108348, "uuid": "59c60b19-130d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.250:46222/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772108416, "uuid": "826a7e61-130d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.147.208:50583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772108593, "uuid": "eb8143ab-130d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.224.73:60021/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772109012, "uuid": "e5b2284f-130e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.69.56:52798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772109380, "uuid": "c086cfc0-130f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.250:46222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772109623, "uuid": "5183d993-1310-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.33.232:58734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772109850, "uuid": "d8ca2ffa-1310-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.92.242.163:45949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772109975, "uuid": "237051e7-1311-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.197:36856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772110030, "uuid": "4472f08a-1311-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.237.235:53478/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772110099, "uuid": "6d476ff6-1311-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.233.136:44854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772110573, "uuid": "8821eff3-1312-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.92.242.163:45949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772110574, "uuid": "888d4d6d-1312-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.108:32783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772110637, "uuid": "adc025cd-1312-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.69.56:52798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772110998, "uuid": "857308c2-1313-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.108.152:51598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772111058, "uuid": "a9167ef8-1313-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.237.235:53478/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772111288, "uuid": "31ee205b-1314-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.33.232:58734/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772111356, "uuid": "5ab23a27-1314-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.229.49:41758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772111474, "uuid": "a101f315-1314-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.197:36856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772111718, "uuid": "329ef103-1315-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.108:32783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772111782, "uuid": "58bf1ea6-1315-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.118.60.186:36571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772111832, "uuid": "76427c07-1315-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.75.147:34752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112265, "uuid": "78aaad88-1316-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.1.254:33787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112314, "uuid": "95dc40e1-1316-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cubana.cloud/LogMeInResolve_Unattended.msi", "Tag": [ { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112320, "uuid": "9904842b-1316-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://us28meeting.jexar.sbs/Goo/Meet/Windows/download.php", "Tag": [ { "name": "DattoRMM", "colour": "#167832", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112320, "uuid": "99309ec0-1316-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://connectfilesview.click/Bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112321, "uuid": "999ea2c6-1316-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://store1.gofile.io/download/direct/ab9c8e74-ea91-4f76-b055-30fe4a28c656/REVISED%20PROPOSAL.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112321, "uuid": "99c624ce-1316-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cubana.cloud/zoom.meeting-online/Windows/download.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112323, "uuid": "9b07cd97-1316-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://relyaccessed-virtual.info/zoom/Windows/download.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112325, "uuid": "9c154ae8-1316-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.65.180:46089/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112383, "uuid": "bef194e8-1316-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.76.47:51107/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112500, "uuid": "04b801ef-1317-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.108.152:51598/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112667, "uuid": "67fa1e47-1317-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.197:5124/1/pp1/nsjd.png", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112674, "uuid": "6bf8ce0b-1317-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.183/arquivo_20260224055001.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772112726, "uuid": "8b381db8-1317-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.23.177.223/90/gftyrggdgfdsd8f787d8f8d7g87fg88sdf778fdg8dsf8g.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772113108, "uuid": "6f117249-1318-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.41.96:53603/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772113582, "uuid": "8949ede5-1319-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.1.254:33787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772113880, "uuid": "3ae23fde-131a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.76.47:51107/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772113979, "uuid": "75d7510f-131a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.137.156:40644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772114007, "uuid": "8680cb7e-131a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.65.180:46089/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772114062, "uuid": "a72cff8b-131a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.56.232.109:36023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772114125, "uuid": "cd3c99d9-131a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.198.6:58048/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772114901, "uuid": "9bac348b-131c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.56.232.109:36023/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772115082, "uuid": "0773ba98-131d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.232.34:39865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772115145, "uuid": "2d3398e3-131d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.42.79.69:33648/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772115230, "uuid": "5fba4f22-131d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.137.156:40644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772116224, "uuid": "affcf0b5-131f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.83.53:47404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772116520, "uuid": "60be9609-1320-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.147.8:42881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772117060, "uuid": "a22e75d8-1321-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.83.53:47404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772117060, "uuid": "a2b386af-1321-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.200.65:45829/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772117182, "uuid": "eb1e42b4-1321-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.119:44410/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772117182, "uuid": "eb2145c4-1321-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.198.6:58048/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772117360, "uuid": "553ff0f9-1322-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.249.209.93:59554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772117597, "uuid": "e2606acc-1322-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.119:44410/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772117828, "uuid": "6c34f4fa-1323-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.151.147:46066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118137, "uuid": "247afc22-1324-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.151.147:46066/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118563, "uuid": "21fcbce9-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.200:34145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118609, "uuid": "3d83a095-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-na-phx-1.gofile.io/download/direct/bf66389b-eeb0-4fd6-8353-be8214ffa81f/EM%20Receipt.pdf(25).msi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118609, "uuid": "3da111f0-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://updatesafefix.pages.dev/Adobe_Standalone_installer_V1.0.43.90765.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "3e75dbd0-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/hiddenbin/boatnet.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "3e761054-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/hiddenbin/boatnet.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "3e763191-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/hiddenbin/boatnet.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "3e777695-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/hiddenbin/boatnet.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "3e77bf49-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/hiddenbin/boatnet.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "3e77f6a4-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "3e8139b0-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/hiddenbin/boatnet.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "3e870d13-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/hiddenbin/boatnet.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118610, "uuid": "3e90d363-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/hiddenbin/boatnet.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118611, "uuid": "3ebbca83-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/hiddenbin/boatnet.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118611, "uuid": "3ebd58de-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/hiddenbin/boatnet.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118611, "uuid": "3ec618a1-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.242.30.234/hiddenbin/boatnet.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118612, "uuid": "3f70b9f2-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.126.212/5r3fqt67ew531has4231.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118612, "uuid": "3f70d749-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.108.152:50685/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118613, "uuid": "3fcbdd21-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.236.195.25/x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118615, "uuid": "413ec7cc-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://tik-privateuz.sbs/TikTok18.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118618, "uuid": "42e0a6c4-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://tt-privateuz.sbs/TikTok18.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118623, "uuid": "45d4bc48-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8079848160/h31rdu3.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118623, "uuid": "463a682d-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.57.109.214:60114/linux", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118624, "uuid": "466c333e-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.24.11:41426/Mozi.m", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118625, "uuid": "4780aa86-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-2c8a34977b014356ac5822485e6ad392.r2.dev/Form%201099.exe", "Tag": [ { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118626, "uuid": "47e0c652-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://dubapkg.cmcmcdn.com/c/186def/%E7%BD%91%E6%98%93%E4%BA%91%E9%9F%B3%E4%B9%90.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118628, "uuid": "494160e9-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ljav.blogre.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118629, "uuid": "49c1be66-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://waynelimck.com/bid/MsTeams.exe", "Tag": [ { "name": "TrustConnect", "colour": "#EFEA3F", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118645, "uuid": "532002fe-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/hpExecuter.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772118677, "uuid": "6602482a-1325-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.200.65:45829/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772119211, "uuid": "a4bc4769-1326-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.232.34:39865/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772120045, "uuid": "95e9076a-1328-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.232.103.250/pulsar.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772120048, "uuid": "976de56c-1328-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.232.103.250/color.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772120048, "uuid": "97762b70-1328-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.232.103.250/quasar.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772120300, "uuid": "2db07a12-1329-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.176.242/170/fsd878g87df8g787878sd798g798d7fg98789dsf7g89.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772120527, "uuid": "b50072a1-1329-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://rj48gr6v.quantumridge.digital/?=check&&actmn=VgrJnDVASkmxsUYD", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772120712, "uuid": "233f9abe-132a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.186.115:41491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772121016, "uuid": "d8880e4b-132a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.107.59:59092/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772121380, "uuid": "b188e60a-132b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.40/public_files/160064.jpg", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772122513, "uuid": "549c919e-132e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.195.179:48996/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772122632, "uuid": "9b73b656-132e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.187.137.7:47657/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772122761, "uuid": "e868460e-132e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.195.179:48996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772122867, "uuid": "27e8ea2d-132f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.107.59:59092/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772123178, "uuid": "e10f26a6-132f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.230:52904/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772124255, "uuid": "62cefcc3-1332-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.230:52904/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772124319, "uuid": "8903ca67-1332-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.192.136:55257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772124851, "uuid": "c5fab092-1333-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.17.99:60004/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772125149, "uuid": "77c97870-1334-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.17.99:60004/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772125277, "uuid": "c4313d53-1334-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.192.136:55257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126048, "uuid": "8f6c6760-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.40.126.82:8084/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126048, "uuid": "8fa73aa4-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.145.81/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126050, "uuid": "90a354f4-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.124.72:8085/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126051, "uuid": "9131da25-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.1.154:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126051, "uuid": "913af1ed-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.1.154:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126051, "uuid": "91409856-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.1.154:8083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126051, "uuid": "91709e8e-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.56.103:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126059, "uuid": "9640f77d-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.105.48.197:8686/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126064, "uuid": "99334a63-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.151.198:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126068, "uuid": "9b9949e8-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.142.77.163:8024/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126115, "uuid": "b7e2b1c5-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.169.245.98:25252/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126116, "uuid": "b81863a6-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.128.128.60:33487/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126117, "uuid": "b892a6fb-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.51.58.126:7603/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126117, "uuid": "b90e11e6-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.38.58.242:8555/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126118, "uuid": "b9a29fa8-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.160.59.151:42952/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126120, "uuid": "ba62b3e5-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.229.228.126:4703/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126121, "uuid": "bb63a5de-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.251.133.225:18910/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126136, "uuid": "c406c1c6-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.211.255.166:49054/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126227, "uuid": "fa81fed0-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.92.169.87/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126228, "uuid": "faf7f97f-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.120.20.86:8888/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126236, "uuid": "ff8aa011-1336-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.190.250.28:5521/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126245, "uuid": "051bb46e-1337-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.153.7.211:443/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "6066bacc-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.104.118/x-8.6-.Sakura", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "6066e3e7-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.104.118/a-r.m-4.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "606eeecf-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.104.118/p-p.c-.Sakura", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "60768a8f-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.104.118/a-r.m-5.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "607f55d1-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.104.118/a-r.m-6.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "608e999a-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.104.118/i-6.8.6.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "6092d037-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.104.118/s-h.4-.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "60a5271d-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip118.ip-51-81-104.us/s-h.4-.Sakura", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "60a7dd02-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip118.ip-51-81-104.us/a-r.m-6.Sakura", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "60a7eef7-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip118.ip-51-81-104.us/m-i.p-s-e-l.Sakura", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "60a7fdf0-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip118.ip-51-81-104.us/Sakura.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126828, "uuid": "60a96db2-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip118.ip-51-81-104.us/a-r.m-5.Sakura", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126829, "uuid": "6118ce63-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip118.ip-51-81-104.us/x-8.6-.Sakura", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126829, "uuid": "61291a48-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip118.ip-51-81-104.us/i-6.8.6.Sakura", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126829, "uuid": "61291bea-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip118.ip-51-81-104.us/p-p.c-.Sakura", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126829, "uuid": "6148fc11-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip118.ip-51-81-104.us/m-i.p-s.Sakura", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126830, "uuid": "62103f2b-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip118.ip-51-81-104.us/a-r.m-4.Sakura", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126840, "uuid": "67bdabba-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.104.118/m-i.p-s.Sakura", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126840, "uuid": "67ca3754-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.104.118/m-i.p-s-e-l.Sakura", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772126840, "uuid": "67d8d6a6-1338-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://51.81.104.118/Sakura.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772127197, "uuid": "3c79222e-1339-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.76.36:49542/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772127430, "uuid": "c7a73753-1339-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.33:38150/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772127619, "uuid": "382fd2d5-133a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.24.11:41426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772128039, "uuid": "32a8bd0c-133b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.76.36:49542/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772128111, "uuid": "5d17a5f3-133b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.126.49:35104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772128216, "uuid": "9c309e93-133b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:54572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772128516, "uuid": "4eefa8ac-133c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.45.206:34956/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772128697, "uuid": "ba541158-133c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:45952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772128875, "uuid": "2470c22f-133d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.45.206:34956/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772128933, "uuid": "4774cde4-133d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.33:38150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772128998, "uuid": "6dc722b4-133d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:45952/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772129587, "uuid": "cce5627b-133e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:54572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772129718, "uuid": "1af0294b-133f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.126.49:35104/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772130016, "uuid": "ccac73bf-133f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.107.59:56852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772130254, "uuid": "5acdaf4d-1340-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.25:60783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772130377, "uuid": "a3e5b09d-1340-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.25:60783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772130440, "uuid": "c949a19d-1340-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.73.7:45268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772130906, "uuid": "df5254d8-1341-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://confidenceprocedimentos.com/v1/recaptcha/config.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772130918, "uuid": "e6a28145-1341-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.10.237:42952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772130972, "uuid": "0680c3f2-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://app.action1.com/agent/33d868b3-07bd-11f1-9347-319dc56e4065/Windows/agent(My_Organization).msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131026, "uuid": "2713d7ed-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5924614076/iXSdtjb.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131036, "uuid": "2d018e52-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.78:40785/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131037, "uuid": "2d53ca3e-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.73.7:45268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131105, "uuid": "55b9e6fb-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.217.117:45205/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131113, "uuid": "5a7da9aa-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.43.215:55341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131149, "uuid": "703a75b6-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://app.action1.com/agent/dd435514-0cd9-11f1-abe6-cdc440c3d9d8/Windows/agent(My_Organization).msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131222, "uuid": "9b738a25-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/udopxu.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131333, "uuid": "ddcc70c3-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260209214807.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131335, "uuid": "df06a4b7-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260211173246.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131336, "uuid": "df61e3d4-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260204201425.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131338, "uuid": "e106a319-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ksda.ct.ws/arquivo_20260225190035.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131339, "uuid": "e1257e4a-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260212000125.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131339, "uuid": "e12afdc1-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260206215739.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131339, "uuid": "e12f50d6-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260211195327.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131339, "uuid": "e12f9bd1-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260202225645.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131339, "uuid": "e146d487-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260204201408.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131339, "uuid": "e150099e-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260201201507.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131339, "uuid": "e150d095-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ksda.ct.ws/arquivo_20260224234736.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131339, "uuid": "e15995f2-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260210154443.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131339, "uuid": "e18f5ba2-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260208182927.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131341, "uuid": "e2c2ac94-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260202155318.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131342, "uuid": "e3547738-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260207221741.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131342, "uuid": "e3667966-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260201201531.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131343, "uuid": "e3b493d6-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260202225711.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131346, "uuid": "e564ee92-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260209230632.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131346, "uuid": "e5920cf9-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260209224954.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131347, "uuid": "e5eb7feb-1342-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://scxzswx.lovestoblog.com/arquivo_20260215181338.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131507, "uuid": "45514fe0-1343-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pt-pba.s3.eu-north-1.amazonaws.com/ref-amlin/wkd.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131508, "uuid": "45fbefdf-1343-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pt-pba.s3.eu-north-1.amazonaws.com/ref-amlin/wkd_loader.html", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131627, "uuid": "8d06c900-1343-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://roverbot.info/killxd.bat", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131685, "uuid": "afad2c66-1343-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://roverbot.info/result.hta", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131685, "uuid": "afd4b3ee-1343-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://roverlink.io/result.hta", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131807, "uuid": "f867838e-1343-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://roverbot.info/killxd.bat", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131866, "uuid": "1b3e47d0-1344-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.9/result.hta", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131866, "uuid": "1b3e8469-1344-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.9/result.hta", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131866, "uuid": "1b42f544-1344-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.195/result.hta", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131866, "uuid": "1b42ffe0-1344-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.195/result.hta", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131866, "uuid": "1b510e90-1344-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://roverlink.io/result.hta", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131866, "uuid": "1b635af0-1344-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.78:40785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131925, "uuid": "3e9917e9-1344-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://roverbot.info/result.hta", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131987, "uuid": "635be65c-1344-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.195/killxd.bat", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772131994, "uuid": "67b9f7d1-1344-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.102.239:43753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772132000, "uuid": "6b781e00-1344-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.195/killxd.bat", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772132417, "uuid": "63d8a86b-1345-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.10.237:42952/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772132466, "uuid": "81630b9a-1345-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.168/bin/support.client.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772132467, "uuid": "816981da-1345-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.169/bin/support.client.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772132467, "uuid": "81f5f5cb-1345-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.59/bin/support.client.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772132468, "uuid": "82154e6e-1345-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.55/bin/support.client.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772132471, "uuid": "84388d97-1345-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.168/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772132471, "uuid": "84402f31-1345-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.55/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772132477, "uuid": "879c59fc-1345-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.169/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772132484, "uuid": "8bfe92e4-1345-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.59/bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772132532, "uuid": "a844016f-1345-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.217.117:45205/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772132769, "uuid": "35de29b8-1346-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.107.59:56852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772133257, "uuid": "584962b9-1347-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.112.79:60216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772133435, "uuid": "c29153f9-1347-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://hui228.ru:82/hosted/FRPWrapper.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772133436, "uuid": "c312758f-1347-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://hui228.ru:82/hosted/ctrl.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772133450, "uuid": "cb9f0951-1347-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.102.239:43753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772133725, "uuid": "6fd0f4b5-1348-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/cat25/SECURE.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772133726, "uuid": "70174bda-1348-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/yugo25/yugo/etkmy6kupbnt14m9hcekv2Ntfi.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772133787, "uuid": "94574a6b-1348-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/cat25/cat/y6kupetkmbnt1Ntfhcei4m9kv2.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772133801, "uuid": "9c8da0f3-1348-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/myplugman25/plugs/ebnt6y9tNkmu6pktf3m8kcev2hi.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772133850, "uuid": "b9c336da-1348-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://one-graup.com/HWE.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772133875, "uuid": "c8bccee4-1348-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.69.223:43694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772133979, "uuid": "06d10401-1349-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.120.150:58801/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772134044, "uuid": "2dbae556-1349-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.12.20:57447/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772134525, "uuid": "4c76b57c-134a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.112.79:60216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772134879, "uuid": "1f694054-134b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.225.110:41737/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772135301, "uuid": "1b055814-134c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.12.20:57447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772135477, "uuid": "83fb771a-134c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.108.161:46336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772135539, "uuid": "a87e086c-134c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.115.78:36829/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772135544, "uuid": "abc0d38a-134c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.69.223:43694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772135552, "uuid": "b0ac5c02-134c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.100.136:47018/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772135605, "uuid": "cfde5235-134c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.154.11:56966/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772136517, "uuid": "efa2e0bc-134e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.64.18:47775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772136616, "uuid": "2a75af3b-134f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.17.222:50691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772136801, "uuid": "99110324-134f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.186.109:44787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772136921, "uuid": "e05923ea-134f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.235.99:60477/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772137224, "uuid": "951268e5-1350-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.225.110:41737/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772137528, "uuid": "4a284894-1351-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.181.75:44076/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772137640, "uuid": "8cf4bff0-1351-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.235.99:60477/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772137822, "uuid": "f9b30d33-1351-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.224.73:60021/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772138365, "uuid": "3d39d579-1353-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.186.109:44787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772138365, "uuid": "3d6824e7-1353-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.17.222:50691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772138720, "uuid": "10f06ab8-1354-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.181.75:44076/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772139016, "uuid": "c10fa186-1354-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.205.203:52643/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772139258, "uuid": "517c2c2f-1355-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.154.188:54111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772139370, "uuid": "946129e3-1355-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.197.41:38808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772140087, "uuid": "3fb5597a-1357-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.200:34145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772140338, "uuid": "d50bce1d-1357-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.83.173:51984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772140458, "uuid": "1c910d12-1358-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.84.18:49108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772140635, "uuid": "8609b40d-1358-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.130.58:45589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772140763, "uuid": "d23b6c49-1358-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.24.168:35386/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772140938, "uuid": "3aa12cb6-1359-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.83.173:51984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772141419, "uuid": "595786ab-135a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.108.152:50685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772141891, "uuid": "729b8631-135b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://3pf82esd.globalframe.digital/?=check&&actmn=XVSVitsCbUSAfQqW", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772142137, "uuid": "054f598d-135c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.146.213.39:60941/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772142198, "uuid": "29c9e329-135c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.58.192:35367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772142311, "uuid": "6d550b66-135c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.64.18:47775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772142373, "uuid": "9241e702-135c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.126.81:42342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772142438, "uuid": "b9213c34-135c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.58.192:35367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772142686, "uuid": "4ccadf7d-135d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.160:38514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772142800, "uuid": "907a617d-135d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.151.53:34683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772142856, "uuid": "b1c14402-135d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.216.245:60852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772142977, "uuid": "fa525c91-135d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.59.129:34771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772143277, "uuid": "ace1b006-135e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.189.30.64:53231/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772143628, "uuid": "7df25405-135f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.13.2:46302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772143696, "uuid": "a6ea6cc9-135f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.230.91:55261/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772143818, "uuid": "ef676787-135f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.59.129:34771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772143938, "uuid": "3725e7de-1360-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.146.213.39:60941/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772144014, "uuid": "642b66ad-1360-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.126.81:42342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772144118, "uuid": "a2421dc1-1360-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.213.107:38418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772144132, "uuid": "aab067c3-1360-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.146.30:37055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772144351, "uuid": "2cd820c8-1361-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.216.245:60852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772144356, "uuid": "2fdc5ed9-1361-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.200.113:44773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772144719, "uuid": "0855d542-1362-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.13.2:46302/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772144766, "uuid": "248ed6d4-1362-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7290860719/OWG82sl.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772144777, "uuid": "2b0c4e96-1362-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.23.193:41981/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772144898, "uuid": "72eabb60-1362-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.200.113:44773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772144958, "uuid": "96c83a9c-1362-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.196.50:33668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772144959, "uuid": "978a2c47-1362-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.47.77:55821/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772145072, "uuid": "db13694a-1362-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.213.107:38418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772145139, "uuid": "0305e302-1363-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.230.91:55261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772145190, "uuid": "212d8fc5-1363-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.45.241:51543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772145549, "uuid": "f719dfa3-1363-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.136.105:50755/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772145621, "uuid": "21f56a6c-1364-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.146.30:37055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772146115, "uuid": "486a53ca-1365-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.188.244:53773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772146152, "uuid": "5e53e909-1365-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.23.193:41981/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772146272, "uuid": "a60bc0fc-1365-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.167:44804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772146386, "uuid": "ea1cf1c7-1365-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/deepSHRAVI/cracked-enhancer-for-asana-extension/raw/refs/heads/main/unjuvenile/enhancer-extension-cracked-for-asana-2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772146386, "uuid": "ea2567bb-1365-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/deepSHRAVI/cracked-enhancer-for-asana-extension/refs/heads/main/unjuvenile/enhancer-extension-cracked-for-asana-2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772146507, "uuid": "3235ce64-1366-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/izul123/cracked-save-to-zoho-crm-extension/refs/heads/main/pastoralness/to-extension-crm-cracked-save-zoho-v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772146508, "uuid": "329189e0-1366-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/izul123/cracked-save-to-zoho-crm-extension/raw/refs/heads/main/pastoralness/to-extension-crm-cracked-save-zoho-v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772146638, "uuid": "805191fe-1366-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.196.50:33668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772146878, "uuid": "0f562a63-1367-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.45.241:51543/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772147354, "uuid": "2ae381fd-1368-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.136.105:50755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772147715, "uuid": "02520613-1369-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.167:44804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772148373, "uuid": "8aa70846-136a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.201.138:48054/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772148610, "uuid": "17e3f8ad-136b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ASFANALI/file/refs/heads/main/8.txt", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772148967, "uuid": "ec4d33b6-136b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/p4blo3d/cracked-enhancer-for-dropbox-extension/refs/heads/main/conferee/dropbox-cracked-for-extension-enhancer-3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772148969, "uuid": "ed7fdb5d-136b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/p4blo3d/cracked-enhancer-for-dropbox-extension/raw/refs/heads/main/conferee/dropbox-cracked-for-extension-enhancer-3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772149154, "uuid": "5bcea674-136c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.125.5.13:44604/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772149873, "uuid": "085f63a0-136e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.79.57:33864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772149993, "uuid": "4fceb737-136e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.201.138:48054/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079964, "uuid": "434932fc-12cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "0837234.duckdns.org" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086866, "uuid": "553f0349-12db-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.116.52.44", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118605, "uuid": "3b951928-1325-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.236.195.25", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126044, "uuid": "8d93bb99-1336-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.124.72", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772110564, "uuid": "82672db9-1312-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.31.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772068324, "uuid": "2988e33f-12b0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.32.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772123165, "uuid": "d94bff80-132f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.39.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772114106, "uuid": "c173dda7-131a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.198.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772139007, "uuid": "bbea977b-1354-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.205.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772127425, "uuid": "c43a3f52-1339-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.237.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772146084, "uuid": "3649b4e0-1365-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.188.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126105, "uuid": "b1df9d0f-1336-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.169.245.98", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772107744, "uuid": "f19b2651-130b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.45.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772100185, "uuid": "58017c04-12fa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.123.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772091244, "uuid": "87272d2f-12e5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.229.20.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126224, "uuid": "f8b9b49d-1336-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.190.250.28", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772081765, "uuid": "750d8afa-12cf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.163.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772144344, "uuid": "291fbf3c-1361-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.200.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069223, "uuid": "416a276e-12b2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.24.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772133844, "uuid": "b67d8d86-1348-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.69.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772139366, "uuid": "919895fc-1355-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.197.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772144106, "uuid": "9afc1286-1360-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.146.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116505, "uuid": "57df34c2-1320-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.147.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064664, "uuid": "a3c33f46-12a7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.133.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772134864, "uuid": "1695d2cd-134b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.225.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772115065, "uuid": "fd034ce7-131c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.232.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772091424, "uuid": "f26a66e3-12e5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.63.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772135585, "uuid": "c4145e31-134c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.154.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772122506, "uuid": "50b1c9bf-132e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.195.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079725, "uuid": "b4f4dc7a-12ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.60.214.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772072225, "uuid": "3e7ff26f-12b9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.108.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772116207, "uuid": "a5e8a4be-131f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.83.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772084285, "uuid": "52bb3eda-12d5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.96.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772092925, "uuid": "70f0f80c-12e9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.141.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772092505, "uuid": "76ac77db-12e8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.120.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772140745, "uuid": "c7826f4e-1358-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.24.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772142665, "uuid": "407399aa-135d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.94.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772106664, "uuid": "6e09301b-1309-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.147.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772140445, "uuid": "15292a1c-1358-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.84.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064305, "uuid": "cdb6d5b1-12a6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.68.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772084645, "uuid": "29587394-12d6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.22.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772082484, "uuid": "2144f9ee-12d1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.232.3.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772142845, "uuid": "ab734e5a-135d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.216.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772149144, "uuid": "5634a787-136c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.125.5.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772111765, "uuid": "4e6766b7-1315-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.118.60.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126044, "uuid": "8d934ea1-1336-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.151.198", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126044, "uuid": "8d93afe8-1336-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.56.103", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772136606, "uuid": "2496835e-134f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.17.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126224, "uuid": "f8b9c3e6-1336-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.153.7.211", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772142185, "uuid": "21cbb981-135c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.58.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772140625, "uuid": "8061c6b3-1358-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.130.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772098985, "uuid": "8cfecda5-12f7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.38.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772089865, "uuid": "511d75c5-12e2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.96.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772142124, "uuid": "fdde8952-135b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.146.213.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079725, "uuid": "b4f4c19c-12ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.192.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772136484, "uuid": "dc4b81ff-134e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.64.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772092326, "uuid": "0bb5389d-12e8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.147.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772094725, "uuid": "a2042c03-12ed-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.237.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772124844, "uuid": "c22ed97a-1333-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.17.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772124305, "uuid": "80b7c4c7-1332-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.192.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772091125, "uuid": "3fc02819-12e5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.135.33.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772110985, "uuid": "7d29e4b2-1313-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.108.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772076544, "uuid": "4d121248-12c3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.230.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118606, "uuid": "3ba4e84b-1325-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.24.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772144944, "uuid": "8e8f6236-1362-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.47.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772088484, "uuid": "19fb61ba-12df-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.219.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772115125, "uuid": "21377937-131d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.42.79.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772082964, "uuid": "3f835518-12d2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "173.28.103.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772072105, "uuid": "f77072b3-12b8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.253.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118605, "uuid": "3b965bd1-1325-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.108.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772086024, "uuid": "5f7c98a3-12d9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.207.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772089445, "uuid": "567d7749-12e1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.181.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772109844, "uuid": "d575aaa7-1310-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "177.92.242.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126105, "uuid": "b1df6f3c-1336-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "181.211.255.166", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079845, "uuid": "fc7457a9-12ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.197.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772144944, "uuid": "8e8f7f86-1362-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.196.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772087047, "uuid": "c19257cf-12db-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.248.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074085, "uuid": "93168c1c-12bd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.76.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772128505, "uuid": "4810d134-133c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.45.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772136785, "uuid": "8f7b03c3-134f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.186.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772065144, "uuid": "c22807d4-12a8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.148.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772142784, "uuid": "872694db-135d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.151.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772103125, "uuid": "30543f8b-1301-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.169.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772136906, "uuid": "d795df54-134f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.235.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772120706, "uuid": "1fb53e52-132a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.186.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079725, "uuid": "b4f3ef27-12ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.110.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772107505, "uuid": "6337027d-130b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.120.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772070906, "uuid": "2c422462-12b6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.243.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772097244, "uuid": "7f5afe0f-12f3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.110.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079725, "uuid": "b4f2d795-12ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.208.159.67", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772083564, "uuid": "a50fb841-12d3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "186.169.75.221", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772120285, "uuid": "2474fa9f-1329-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.3.176.242", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772132464, "uuid": "7ff48006-1345-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.55", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772132464, "uuid": "7ff48914-1345-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.59", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772112724, "uuid": "8a2a4d79-1317-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "198.23.177.223", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126105, "uuid": "b1defaf9-1336-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.160.59.151", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118605, "uuid": "3b94fb25-1325-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.57.109.214", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772082185, "uuid": "6f0236c4-12d0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "206.189.148.189", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772068324, "uuid": "2988e841-12b0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.188.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772099345, "uuid": "634a1cfa-12f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.101.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772117044, "uuid": "991b8a3a-1321-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.200.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772148363, "uuid": "84b72954-136a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.201.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772095324, "uuid": "06ff07d2-12ef-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.231.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772095324, "uuid": "06ff109a-12ef-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.220.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772085724, "uuid": "acbd1912-12d8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.1.147.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772117824, "uuid": "69fc9466-1323-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.13.151.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772134025, "uuid": "22448088-1349-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.12.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772144765, "uuid": "23b96652-1362-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.23.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772121005, "uuid": "d21e0d8d-132a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.107.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772133244, "uuid": "50e37686-1347-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.112.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772105405, "uuid": "7f71711f-1306-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.150.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772070605, "uuid": "7922fd3f-12b5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.216.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772069044, "uuid": "d6eaccc6-12b1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.107.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078044, "uuid": "cb2b524f-12c6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.37.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772143264, "uuid": "a56fe0e6-135e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.189.30.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772142366, "uuid": "8e18f57f-135c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.126.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772144106, "uuid": "9afcabb0-1360-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.213.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772145185, "uuid": "1e2636a3-1363-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.219.45.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772103965, "uuid": "255b0170-1303-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.27.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772072765, "uuid": "80a20f4d-12ba-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.49.35.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126044, "uuid": "8d93c2c4-1336-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.142.77.163", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131085, "uuid": "4a331010-1342-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.43.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772068744, "uuid": "240f1e0d-12b1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.255.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772141887, "uuid": "70b5245c-135b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "3pf82esd.globalframe.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126044, "uuid": "8d9392d6-1336-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.146.1.154", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772096585, "uuid": "f61fdc31-12f1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.116.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772066824, "uuid": "ab93b7f3-12ac-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.198.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772139245, "uuid": "49a6fca1-1355-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.154.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772074325, "uuid": "2270cd92-12be-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.44.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772108586, "uuid": "e7b53db2-130d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.224.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772067305, "uuid": "c9f7e549-12ad-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.235.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772110024, "uuid": "40eea51a-1311-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.237.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772127185, "uuid": "35361350-1339-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.76.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131985, "uuid": "6266713f-1344-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.102.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079994, "uuid": "5596ee31-12cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.41.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772101266, "uuid": "dc844ba6-12fc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.193.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772100606, "uuid": "52dda72e-12fb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.204.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772098625, "uuid": "b65bb492-12f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.120.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772076064, "uuid": "2ede17dd-12c2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.61.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772081765, "uuid": "750b63a0-12cf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.237.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772099465, "uuid": "aade6a60-12f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.156.87.69", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772099525, "uuid": "ceb9087e-12f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.194.92.55", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126224, "uuid": "f8b9b7a2-1336-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.120.20.86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126224, "uuid": "f8b9b0ab-1336-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.92.169.87", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126825, "uuid": "5ea48479-1338-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "51.81.104.118", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772113925, "uuid": "55efc480-131a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.137.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772128084, "uuid": "4d48a7cf-133b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.126.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772145544, "uuid": "f458d78c-1363-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.136.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772088065, "uuid": "2052de13-12de-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.137.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772137506, "uuid": "3d477b8e-1351-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.181.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772064664, "uuid": "a3c36d77-12a7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.51.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772067124, "uuid": "5e856c2e-12ad-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.23.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772142965, "uuid": "f30fa650-135d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.59.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131085, "uuid": "4a32e32f-1342-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.217.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078705, "uuid": "5553a693-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.171.157.4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772121365, "uuid": "a83f5be4-132b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.60.226.40", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080865, "uuid": "5c3b5cdb-12cd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.120.95.129", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118605, "uuid": "3b963959-1325-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.110.126.212", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126044, "uuid": "8d93b8cd-1336-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.145.81", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079964, "uuid": "43434c98-12cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84920433.duckdns.org" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772120045, "uuid": "9571ff95-1328-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.232.103.250", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079964, "uuid": "433df6ff-12cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "9103843.duckdns.org" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126044, "uuid": "8d93302c-1336-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.40.126.82", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079964, "uuid": "4338e07f-12cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "92031819.duckdns.org" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772132464, "uuid": "7ff37458-1345-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.168", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772132464, "uuid": "7ff2fae4-1345-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.169", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131805, "uuid": "f75a0240-1343-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.195", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131805, "uuid": "f759fdfc-1343-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.9", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772114045, "uuid": "9d1f3f69-131a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.56.232.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772130965, "uuid": "025c942e-1342-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "app.action1.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118606, "uuid": "3baded63-1325-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-na-phx-1.gofile.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772130905, "uuid": "ded1ee8b-1341-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "confidenceprocedimentos.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772112306, "uuid": "908ec020-1316-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "connectfilesview.click" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772112306, "uuid": "90906d72-1316-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cubana.cloud" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079964, "uuid": "433f183a-12cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "dndn3829.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118609, "uuid": "3d7f51b6-1325-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "dubapkg.cmcmcdn.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772087050, "uuid": "c2e8a7b0-12db-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "exonautis.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772100246, "uuid": "7cc7ebef-12fa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "g88kkpkk.crystalforge.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772083745, "uuid": "10e6d73d-12d4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hanzzmypanel.paneldo.my.id" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772133425, "uuid": "bcd59eaf-1347-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hui228.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772126825, "uuid": "5ee4d704-1338-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ip118.ip-51-81-104.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131332, "uuid": "dcea6ac1-1342-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ksda.ct.ws" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118606, "uuid": "3bb3b96d-1325-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ljav.blogre.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772080865, "uuid": "5cc8679c-12cd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "mailserver.ccsnetwork.cn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772133846, "uuid": "b7cada7d-1348-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "one-graup.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078824, "uuid": "9c341012-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pls.ddosme.web.id" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131505, "uuid": "4486f3ac-1343-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pt-pba.s3.eu-north-1.amazonaws.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118606, "uuid": "3bc3b579-1325-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-2c8a34977b014356ac5822485e6ad392.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772105165, "uuid": "f03db8ab-1305-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-462189601a584e8fad4889d4ed31f4f4.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772112308, "uuid": "91cba188-1316-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "relyaccessed-virtual.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772120525, "uuid": "b36d240e-1329-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "rj48gr6v.quantumridge.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131625, "uuid": "8ba04dd7-1343-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "roverbot.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131684, "uuid": "aee8a002-1343-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "roverlink.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772131328, "uuid": "daec79a3-1342-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "scxzswx.lovestoblog.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772087048, "uuid": "c1c34dfa-12db-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "storage-secure.lostproject.it" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118606, "uuid": "3bb59a7e-1325-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "tik-privateuz.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118606, "uuid": "3bba0c63-1325-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "tt-privateuz.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118606, "uuid": "3bc83041-1325-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "updatesafefix.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772112306, "uuid": "908fa4a2-1316-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "us28meeting.jexar.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772093165, "uuid": "002a4dda-12ea-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "uswebzoomus.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772078824, "uuid": "9bcafb60-12c8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "vmi3034867.contaboserver.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772118606, "uuid": "3bae51eb-1325-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "waynelimck.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079964, "uuid": "435a8d58-12cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.0837234.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079964, "uuid": "4360cf3a-12cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.84920433.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079964, "uuid": "435cfb4e-12cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.9103843.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772079964, "uuid": "436214fd-12cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.92031819.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772099647, "uuid": "17942e4f-12f9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.sunamien.jp" } ] } }