{ "Event": { "published": true, "date": "2026-03-25", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-25", "timestamp": 1774484127, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "e15ed4a4-05aa-4eb1-9727-9164371a15bf", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1774398134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774398134, "uuid": "93e71e34-6d59-4ab6-b980-6f7206c3a5c1", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774398134, "uuid": "6865a7bf-c55b-4412-8e0a-36d03de0d945", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774398134, "uuid": "a2b6cfaf-8bef-42af-9a87-ac0e4ac244f1", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774398134, "uuid": "e9e5780f-159b-46e9-ae8f-a5b259d3fb34", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774398134, "uuid": "61a622c7-8ff8-4018-b8ff-629fc749b8af", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b6bb080-27e5-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774400199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774400199, "uuid": "5a9ca84d-1748-4f36-97da-6cbecd0f522b", "comment": "Malware payload (Mirai)", "value": "13e7f16669758a08ea038a2d22337280", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774400199, "uuid": "e0c32830-cf4f-459b-8889-b94089c0ddaf", "comment": "Malware payload (Mirai)", "value": "9508e6aa7034739d398178dbfe5ca5e614a61a6febeb0fb592c55a6777d258db", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774400199, "uuid": "c8ab7107-fd19-48e2-a903-9248c93df9f7", "value": "T1A493E506BFA10FF7D8AFCD370AA91B0524DD551B22A53B357974C828B25B24F49E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774400199, "uuid": "9f329e4b-9d60-4dcf-9fb4-2fe42616ccf4", "value": "1536:3xWXSO9fWl0kifOZXmwwuPS5PjchsdUUZtgqrwTJTLG:dO96GOaL8s6APiLG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774400199, "uuid": "5dca5c4f-4717-4c5d-9f95-e857a28eb61d", "value": 92928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774400199, "uuid": "01a0af5a-f24b-4c64-a81f-93983ebf0886", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774401135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774401135, "uuid": "fd79a59c-5a30-403a-9a5e-08d919f41762", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774401135, "uuid": "ffdade75-3768-4080-b4dd-da337381981a", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774401135, "uuid": "4601605c-2a4d-44da-aeb0-36f4cdbc6c91", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774401135, "uuid": "8186b30e-f90a-4a5a-b734-89b55e6ade08", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774401135, "uuid": "1003d610-069b-498f-988f-08aab6820c3e", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1774402326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774402326, "uuid": "44c6caec-2ee0-446f-ad6b-32326031769a", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774402326, "uuid": "92490ce5-4b2c-4055-ac79-4cc63edaa30f", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774402326, "uuid": "82f6be97-6a87-452d-8492-7b11e86733d4", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774402326, "uuid": "421ce9ec-2230-4d71-8cf8-45ec6825d219", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774402326, "uuid": "473a1187-a716-4a5d-a8bb-e878ca3b3d5f", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774403653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774403653, "uuid": "8e3ddaf6-9833-4f93-9444-5964b2c12c22", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774403653, "uuid": "7f921e00-391f-4cb3-987b-1320a187e901", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774403653, "uuid": "109dbd57-d587-45cf-a713-b2ef8535e29a", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774403653, "uuid": "476a2b5f-8fb8-477e-8472-3821ce55a123", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774403653, "uuid": "dd3d309d-af07-4145-82c0-7385b994241c", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87fd48fc-27ee-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774404086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774404086, "uuid": "2e61319f-23c5-4671-8630-9e3b0e299aae", "comment": "Malware payload (Mirai)", "value": "49e1236e46903d2161f18d8d4d7b189b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774404086, "uuid": "139605f7-4aad-430e-94ca-b34b4fe6b8d5", "comment": "Malware payload (Mirai)", "value": "7f9916380636475ab94df74c93f8c7dc4244c2a23338ea19709c78ed588156a8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774404086, "uuid": "54907270-7827-4c08-903e-f274f003b838", "value": "T1F053AE77C47A6D94D28442B478708A742B63E14491A72FFB9556C37A800BEFCF61A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774404086, "uuid": "706fb91d-b96f-4804-b6db-3fb662db7738", "value": "1536:VygBwtgRtobSGMHDRiKYOJ+7uO3hCUDYdJj:VyExi7CFYFR3hYv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774404086, "uuid": "df34d269-18fe-41dd-aba7-5bf32e4ebc7f", "value": 62788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774404086, "uuid": "41a1973f-8794-4fbe-bb93-69d52d66956e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92edd384-27f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1774407111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407111, "uuid": "78b0aced-1b9f-458d-81fe-28e3d82fa5e2", "comment": "Malware payload (Vidar)", "value": "248accd6697b4d5a328254ac7bb1dcb2", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407111, "uuid": "6a0bcfeb-8bf4-48f7-bce3-28c5163afc26", "comment": "Malware payload (Vidar)", "value": "163a5205b973dd5a139e04d14c720971c077f263a908d1201e6ea70ad1eb3085", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407111, "uuid": "ec9a783a-b861-4247-b8f9-8d903238b4a0", "value": "T11766082BE25146B9C16D8E3EC0928F06D5F361782F32C9E7C2A117158A45EDF4F3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407111, "uuid": "995329a5-aaaa-474a-b485-316b5c27894e", "value": "0cf6c829fe1a947ec2ed56cc573f7341", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407111, "uuid": "97309479-1116-45ca-a924-187726a06b11", "value": "49152:+A4Tpe/C9u/T5QWpG8/NPXbzM/cSQ+u11HMNscMdy/EibHTP1:+AZtDvMNnMdy/Hz9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774407111, "uuid": "5d165546-d1ed-4718-a175-d3a06e30917f", "value": 6656512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407111, "uuid": "fa4cda51-c077-48ee-9ea0-74614f03f55b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acc3ecba-27f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774407154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407154, "uuid": "203812c4-6c50-4043-be1c-463c0dc1d8eb", "comment": "Malware payload", "value": "55bc5ce16f2cabcac365aa3f286da5b3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407154, "uuid": "06a33ba5-2791-4911-af4c-66bd0e86c2ca", "comment": "Malware payload", "value": "b33fb1884cc0693dc5ba68a4b8b2f22e422fa5dc9d08c068545b8e7c8ad2270d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407154, "uuid": "bf856415-7a9a-47a4-bbaa-af567fba9b86", "value": "T19924BE96DF9890EF162D729597DC63C78052B83B8A763CDBC39E059C31084963336A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407154, "uuid": "44adff6e-bb3e-448d-ba16-587a49ddd451", "value": "3072:ARUQLyiO/rKNVCE7Gz/0xWWDxzBT8jojToYgjkv+fEupqiqRvSFW72Siq5x4FqJo:CUSyicev0/KfZFUY+kvzxzSU72SiyeVN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774407154, "uuid": "76039e81-70e7-4c47-98bd-f6275bf3f018", "value": 209995, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407154, "uuid": "cc6797f3-25a3-4e7c-92eb-70099a01f881", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe6439da-27f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774407291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407291, "uuid": "0076c9c0-f7c9-4d8b-8e01-1ff6b1f341fe", "comment": "Malware payload (Mirai)", "value": "21bae1ca8516c830350301adf0d5c775", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407291, "uuid": "6c8fb76f-76e7-4770-9b74-d1d3aab35920", "comment": "Malware payload (Mirai)", "value": "a669fa44cfa2be303f1264055a488b9752517de95afb8ebff7a2b5274678ef66", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407291, "uuid": "12423089-61b1-44f0-b01d-e0ef5c739f8b", "value": "T127E33B46EB818F13C0D21775BAAF424533239B64D3DB73069928AFB43F8679E4E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407291, "uuid": "2f3b89de-dc0a-407a-b9a5-58174b3db315", "value": "3072:KqDqmPAG0HkzJE7EFSzakRE4cb12zXP0YWDNifFrSM/9Ni2:KqDLAGoSKakRE4cbAzrecfFmM/9Ni2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774407291, "uuid": "b85dcc69-c588-47ba-b9c8-bc17616c843d", "value": 151085, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407291, "uuid": "318f7879-82e2-4ba5-9210-bd54f4d7c2f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "524365a1-27f6-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774407432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407432, "uuid": "39b82e9c-f336-422e-8210-1ae51b053a92", "comment": "Malware payload (Mirai)", "value": "00c3c69adec4d3ea6595a67268927cff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407432, "uuid": "9940d527-d4d7-44cc-88dd-615eafca2c45", "comment": "Malware payload (Mirai)", "value": "c49d9939314af2b594121db151924976d5ca3885bc62a3a1f66df48bc2568a07", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407432, "uuid": "6670dd92-1dc7-4a9c-9264-31a947113dfd", "value": "T1BF13E6741915F67CEEE10079E04331EA29630A1C36DCE3D3A1834676EEB5B4C79A9E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407432, "uuid": "52c83ed3-c97e-4c52-bfe8-eda827bdb85d", "value": "768:IBGT6c6c2LRMYEOLYEkQHl+xmMQYOcJAl:Ikh0vEOMEkQHl+kMOcJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774407432, "uuid": "61e46af2-2f8c-42e1-986c-e14c7e6f9395", "value": 42648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407432, "uuid": "34634b8a-4016-4aea-a019-5fe1f2ad3bb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f95126f8-27f6-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774407712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407712, "uuid": "12b24774-5ae9-4f3c-afb2-b32e7def9182", "comment": "Malware payload (Mirai)", "value": "6f87f0518142c971c804e4ddce7266c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407712, "uuid": "b6dc48e4-5194-4286-acee-3c0f876b5a3c", "comment": "Malware payload (Mirai)", "value": "13b69e5e86b0dda92a25097f3e647ad98e185462dfd205139aa81ab4ce24652c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407712, "uuid": "07e7fd88-79d8-4e93-b909-bb6a26de088b", "value": "T147634B96BCC19A12C6D02277FB6E028C372653E8D2EF3217DD216F51378692F0D6BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407712, "uuid": "4b0c3f4a-20f7-4079-97b5-5b9f5ab2b8bf", "value": "1536:xi4I4fRJ58j0/xvAwrumFqJOTYs7QZB8laaN1rsnlGTIzJK:xi4Ic8cvAeFrW0aa4lGD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774407712, "uuid": "6315eb7f-3cce-40da-abca-f63ab7a1dcd9", "value": 70984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407712, "uuid": "75f696d3-19b7-4efe-b82b-c845ba633fab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e37d2b9-27f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774407801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407801, "uuid": "a54fe13c-0438-4d42-bc12-d0ae4526a5e7", "comment": "Malware payload (Mirai)", "value": "94b32bf47d7baf47ae403151df542419", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407801, "uuid": "f2e89e26-b76d-4f08-8fbc-2b1ede3d7664", "comment": "Malware payload (Mirai)", "value": "21f216dbc983db48eac26942d7bc2e4fa6d7b6688f3daf0b5f2200db9f60c688", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407801, "uuid": "a7dbb809-907e-4f2e-99ba-ead0382dfd9c", "value": "T12573185AB8818F11D5C112BAFA2E118D331357BCE3DE73129D106F24778BA2B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407801, "uuid": "7e70345c-c263-4245-9642-c06f10cd0404", "value": "1536:Bmn8PjdGaWTzIuWj+9Ief/2bY9z6GWa6npKw37MwiBDJWP5vYRJhn:PQaMzvWj+lnw0z6GWa6ODJWPVmn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774407801, "uuid": "83b7db01-203c-412f-81b7-aaf04fc28c1f", "value": 79508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407801, "uuid": "9266be6e-cc8f-4abd-8689-6390386e4b97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33a89103-27f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774407810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407810, "uuid": "171f9611-b538-4caf-93b2-f8f2a8e255fe", "comment": "Malware payload", "value": "9c7887e40599dd8e08c7c9eb65d01c19", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407810, "uuid": "c986d9e5-7987-4cb2-8486-305b97fb2fef", "comment": "Malware payload", "value": "b6986c5d620979cdb24aaf0276b7d81ced92c48ee7fe74e9a97f081603923c56", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407810, "uuid": "9dba8181-5148-4df2-b46b-2750aa1f7c5f", "value": "T10E931A3174AF052A166F836E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407810, "uuid": "ac472a0b-5388-418e-b2a7-e1e0b5bd863f", "value": "1536:9Byp1tF/uwMmAIa14oXflI1epeV7tb73WdxCrCitkb5fv2v05xuNr4iMxsCZKS6x:98gIO0GitkbFv2v05xuNrExsCZd6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774407810, "uuid": "16870340-dad9-487b-9189-dcf3b15533e6", "value": 94599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407810, "uuid": "a6bb7ebc-a162-4c6f-917d-0f8d71085496", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a9d0887-27f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774407821, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407821, "uuid": "5ca02570-0efb-42bb-aaf1-9b37db33ee50", "comment": "Malware payload (Mirai)", "value": "6f699f0e35433fc0e6f0621c898858f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407821, "uuid": "45d6e822-c436-4b27-8b3c-9265db0a0351", "comment": "Malware payload (Mirai)", "value": "bf33104054f6a81723a5d69896085fd91bdfa7989b944ad9f22db9135ea13b37", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407821, "uuid": "878a08db-8fe6-4afd-bd75-e558c0056e55", "value": "T12F93E85E2E319FACFB98823547B34E31979833D626E1C685E25CE6011E7034D745FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407821, "uuid": "929477ce-d3e7-4858-86c7-41c86e0a06c7", "value": "1536:sUercTlDRTGh+b29XT2zzUMA3nwIHMAz6H6bclrCZeGHIJQOuYdA:QrcTlDZl29XT2zzUXVHMAz6H9WzRX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774407821, "uuid": "b58552f2-d6ad-49b3-839e-89fea4fdc619", "value": 92928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407821, "uuid": "9b783452-cb41-47fa-950b-c5853c3d5b4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0d323d4-27f8-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774408557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774408557, "uuid": "30f78381-1dbc-48d2-a8fe-006a23a8996f", "comment": "Malware payload (Mirai)", "value": "c251c437635cacdcad7f4b710858afc4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774408557, "uuid": "8dcb05ce-4a9e-4e4a-812d-9b626d488584", "comment": "Malware payload (Mirai)", "value": "b195c5ca8f37f553004a8cea512f01eb0ec71dee613a9b397bcf655773eff664", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774408557, "uuid": "a8702b57-d9a0-4d0b-bfd3-e182cceea78a", "value": "T1DA536CC5A583C8F5FC0605716137AB379777F07B202AEA86D7DD6933AC42A01A61B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774408557, "uuid": "d721df6d-7495-4313-8139-86acf5eec0f2", "value": "1536:RywpuZ/ECtLcZCq9wWBH43aHTT739Q6gLWzzLlSser:RyouZsCze1BH43YT73+6gaPFer", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774408557, "uuid": "633324e5-ef14-4ab7-860f-79f0f3422962", "value": 62604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774408557, "uuid": "1e87381c-ce6b-4a4e-b145-f5e66b249f96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47320611-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774409131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409131, "uuid": "eef3e8f1-c8f4-402b-adb0-4db4523cc62d", "comment": "Malware payload (Mirai)", "value": "0d44f6a5bbe6245be97f082e2737faa3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409131, "uuid": "aa7b057e-9558-4f0c-aeaa-3926e7c812bf", "comment": "Malware payload (Mirai)", "value": "4881418fadd3ac3929b37e01d5a57ce123ffb2fb953ce2a2a73051a2d6342a18", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409131, "uuid": "6f456a48-0512-4999-a346-6cfe6ff46c24", "value": "T1BF634C42B31C0947D1A35EB13A3F17E193BFE99121E4FA892A0F9B468131E721586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409131, "uuid": "e192e923-77ac-408e-b94d-7b01e314ad8f", "value": "1536:xIYVKQB+Z1I4ssJ+FsFOjvJhr17mmPTeeJ+C:X47aI0sFCx7zTYC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774409131, "uuid": "dcddcb4e-60c6-45c0-b49b-64e50fd38133", "value": 68776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409131, "uuid": "11ce7bf6-2b1c-4b19-a481-952f05982ca2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85c9967a-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774409236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409236, "uuid": "f49446e9-f10b-4564-9849-9bf7f02472c8", "comment": "Malware payload (Mirai)", "value": "e920e8e746881012e701f528bd5f7e95", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409236, "uuid": "5e1a95d3-8716-4c81-b7db-689e99bd8919", "comment": "Malware payload (Mirai)", "value": "3839ae560b31338ffea089499f316081605f4951cd980ae85354d370b797a1b3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409236, "uuid": "8bb2fcf1-bad8-43a9-b782-2c68087ba66b", "value": "T16D018FD20332EB75B8957D1970B1758A63C7FEA4219E6F8CF9B8492114598B0B801B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409236, "uuid": "b4e79e45-b98a-4494-ba61-7bac6a5e5f46", "value": "12:BN1n1UoFaJewzpOWNn+031nviEU5JewtXpZt+JGy:7qB6BK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774409236, "uuid": "34febf79-6caa-40b5-814e-234749a92238", "value": 677, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409236, "uuid": "04eb1338-1707-4181-9c36-d59457dd2a77", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb777d83-1fb2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774409236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409236, "uuid": "18822700-4482-4201-9552-afd4f7e0a133", "comment": "Malware payload (Mirai)", "value": "f3b983127bbf9b812992634562ff355b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409236, "uuid": "80f496f7-e0bd-4559-852b-95b4996d3ac6", "comment": "Malware payload (Mirai)", "value": "5fb59eb6db2c7f5260e6c037341caae2a680b1f57d20ab7a2b6a702c9f333da6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409236, "uuid": "130fb344-c332-4fdb-8856-450c01300cea", "value": "T16D63F186099B16DFC83D8D3CB27E5A239B40B16B3219A364F7258CB4DF9514DA9CCC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409236, "uuid": "84381e3d-423d-4f45-b677-4b598ec47fd4", "value": "1536:9GuejZRjSzWlr1BrK+11llGwIPXGRYnT9+VACL:9GLRjSzgbK+1blGGReIl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774409236, "uuid": "32328fa9-3768-42e4-9fc3-42b3be3ff160", "value": 68516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409236, "uuid": "b41ed470-8ebf-49aa-a94a-669478d9d15b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efa3d7d6-1fb6-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774409236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409236, "uuid": "ea894382-4c2c-467b-841b-61fddf2a84ba", "comment": "Malware payload (Mirai)", "value": "bc466cf2852d7bda85d96bf258618441", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409236, "uuid": "06f94fdf-a34e-454b-9816-6dc3ee60fb73", "comment": "Malware payload (Mirai)", "value": "022079ee159c5b8dd3997a722d50c0a7f51843bc68e77f0782ff1b0e9e5a786c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409236, "uuid": "e17ee94a-c938-4ed3-b57a-c98da9701112", "value": "T1CF53F136870052A4E1AD58F556C942942D744EE396CED99A3DC1D701DE083ABE8C3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409236, "uuid": "78ad6906-869c-41ce-bac9-45fcf428bb1d", "value": "1536:YmBYqJ0rAqbk7NApNzgkKiwxFIMIIaQ+FxzW50VSU:Ypo0E+mKskKPxFXwi50Vn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774409236, "uuid": "128d6c83-835e-47ce-9427-384a050c95db", "value": 65732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409236, "uuid": "2f75b940-2b56-43d0-acce-5a2b4c4f1dfc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85cb51eb-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774409236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409236, "uuid": "512dad51-2910-4216-ad35-b479c46fd35d", "comment": "Malware payload (Mirai)", "value": "c87638699d89be33d0d1b8cb7f1e664d", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409236, "uuid": "97a1a2de-7030-48d9-b352-f8d058b9084f", "comment": "Malware payload (Mirai)", "value": "1ebb00f9161825d2827bc90a2efa80dae9911d26b01f38879a27f2176954ea2e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409236, "uuid": "c34775c0-a6b8-4a98-980a-f6caed1b7c22", "value": "T1F6431272D8C97D2000308DB6F8D7C341DBD7CDAA76E736E60028E59E63DBAAE16704", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409236, "uuid": "1a8813ac-824b-4bc4-a62e-7457293c8ef4", "value": "1536:DAAIK5nHVJPVKrbrKQK8QqQACuv7n4Jry0IHV2prcLTOAPht:ketHVGrKQ0yUc0qV2pC6ct", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774409236, "uuid": "cf57f365-86ec-45fd-9197-1507a965ab28", "value": 60160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409236, "uuid": "d496c7cf-4af7-44d7-aafe-dd94421dae28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed58ca98-1fdc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774409236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409236, "uuid": "f28c3fe7-3503-429c-b812-bff6ae77ed1d", "comment": "Malware payload (Mirai)", "value": "84521eccc35d9f7927807625eb7c47fd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409236, "uuid": "55175357-efc1-46e4-bad1-dd9fba926793", "comment": "Malware payload (Mirai)", "value": "847d5f434315ba60695793f10e296fee855b2f214ad106cb58655dab2b2c064d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409236, "uuid": "8937c256-78a2-49fd-a597-7761e6aca8b6", "value": "T17933F1E2C4F9CD72D66821BFA6ACB3550852921FBD44D2BF760C3921E0D4B60579E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409236, "uuid": "f68c5051-d069-4ac2-8ad3-28cbacd16f59", "value": "1536:fYxPhIOFFp5yN8PlRI9X1QrSX+xGw8nouy8Z:CR5yN8Plq9SSX+gwcoutZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774409236, "uuid": "5a8678b6-7558-4f50-8339-2e839e64b4c7", "value": 53468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409236, "uuid": "ba83f9f1-1297-4e3f-98ab-84c4bdbee21d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a258773d-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774409284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409284, "uuid": "54675ce6-5240-4370-a0ee-351df1bff8bd", "comment": "Malware payload", "value": "7fed9d3b61c7c8431025f44b415c4a9d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409284, "uuid": "d91ff18c-a9d7-48ee-9c8e-bad8a0dc81fd", "comment": "Malware payload", "value": "56c7e578b86c3e4f7ea3b981cbed89f9909020e78acdcbb3c375747996820327", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409284, "uuid": "06f14930-be2a-4d94-a218-d2655e7927ae", "value": "T19F44165B6E328F9DF661C63682B78861E39833D752D1C685C5ACFA101E3064F642FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409284, "uuid": "91fe463c-ea93-48ff-95ac-91501611b4ac", "value": "3072:IKXi0nIgUIHIyRKDJdDc+LgWYyapnlKkqbMwMFT0eX9CEnTievqvVB3e:5SPUoyRKDJdDcH7ZwctCKTTvqvVB3e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774409284, "uuid": "0a0c0e24-19ff-4c52-bd7e-f11ef552657b", "value": 255672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409284, "uuid": "74cb3192-138c-49d6-ac87-4cee915bd3ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f23f1fd8-27fb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774409847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409847, "uuid": "16d9f3d5-bbb8-48f2-89cb-ffcb71a76507", "comment": "Malware payload (Mirai)", "value": "0ff64004710274e1577fef5e08e926f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409847, "uuid": "ee345f7e-74eb-42f0-bfa5-c6b2d910e017", "comment": "Malware payload (Mirai)", "value": "558a24f07c4ea9cb4abae72584bb576e70569a02cedc5def2d64a32143e21c0f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409847, "uuid": "f802c2d8-5364-42f2-9382-e978279a63ec", "value": "T13973299BF800DC7DF84BD77A84630909B631A3511A930F2B7357B967BC722A45926F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409847, "uuid": "40f5cd72-3c12-4486-8d2c-57b988ff24ed", "value": "1536:pZ/m3dDvFoxrihnp/N6V0ALCaIN8kQyBSRq0/FEtbPwt8iBBgD:pZ/mRhoRLCaI+JqkF4QBBgD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774409847, "uuid": "5b01256c-eea3-4829-a591-11babde4db5b", "value": 75264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409847, "uuid": "9a2190ab-167b-444a-a6ea-2114ab3b4bfe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46ed970d-27fc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774409990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409990, "uuid": "822419af-e7a4-4aec-8956-c9596f1d9d1e", "comment": "Malware payload (Mirai)", "value": "12e49345add5b2280ceb100fe03fea25", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409990, "uuid": "7d4f8fce-7b56-471d-88a1-34220057468e", "comment": "Malware payload (Mirai)", "value": "fc8114ab930c5b9f41719f9d2f7162854c6900af832272d648b1b02fdcb3858c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409990, "uuid": "1fc804bd-7e74-4529-b0ba-95de10fce4ff", "value": "T15B733A56BC819A13C6D412BBFB6E428C332613E8D2EB3217DD266F11378792B0D7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409990, "uuid": "d470364c-d9ac-4be4-84e7-0fc94b41943d", "value": "1536:Xq6l3mRv1Rf7nBx05/wtDlaKZ9UqORC710bj77x7ZIvVtglBj1jCtvpJWB:Xq6l3yff0MDQ/TjjhFim", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774409990, "uuid": "122613c6-4f13-4eee-a381-375849a58759", "value": 75080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409990, "uuid": "e1753292-322a-4be0-bf83-f0b1e6e0086f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c58925a-27fd-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774410536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410536, "uuid": "dea4618f-83c3-4f2e-82d6-cef7b8a26aa8", "comment": "Malware payload (Mirai)", "value": "9f768fc0868096a0ac5839c3e0dd8534", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410536, "uuid": "2e84e2d5-93f9-4e68-848f-73b9d11f2221", "comment": "Malware payload (Mirai)", "value": "a1627ade7bf028db460cea6b9cdb4b11bdccd6ab5d7a706ded017d821f926094", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410536, "uuid": "2e5e7dc4-5a8e-4d68-a108-f6d2289349af", "value": "T10F0418457E419E33CBD0667ABBEE42CD732223FCD3EA7113EE014B16369652A0E365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410536, "uuid": "aaa8e578-7806-47ce-8fde-b06642d5f38e", "value": "3072:GRmSbwhtw/8lmlanL5SklRZakanihOQ6yYFH1d2zFeqGDSzWNndp/blSFbisGiYy:GMSbwhta8lmlm/lRZynihOQ6yYFH1d2/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774410536, "uuid": "bada0e97-21ee-4508-89b7-f54efcb5a1e5", "value": 187448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410536, "uuid": "b152c5da-b070-4a80-b21d-ec08dc4f7319", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "feb34ca7-27fd-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774410727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410727, "uuid": "2dbbaa69-6707-4e40-9b10-2fd599aa638a", "comment": "Malware payload (Mirai)", "value": "5d26f9e4405abb73650aeb1a6bbf5d09", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410727, "uuid": "2fbcbbec-e851-45a8-a501-de0566d19237", "comment": "Malware payload (Mirai)", "value": "16f6c84618daaf1aefc1f3f2fae49d3559fd0306b53f053aefd36c39c150ef72", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410727, "uuid": "017baf3b-6bf5-4def-be21-6c7c96c845a7", "value": "T1BF1179DF2BD52721449ACF50F3914C66A11EA3E560D2DA9CB88E3D67BE94840B54CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410727, "uuid": "30a0afbd-0866-4951-9370-b7f925c329f3", "value": "24:boWBG05pELMk0aNwJPJR8q/Li2Kbwatkk0:boGGMpzaoPP8qTi2vat/0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774410727, "uuid": "04714e96-11ff-405a-b32b-efe36d445a3d", "value": 1110, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410727, "uuid": "b2659e0a-629b-412a-98b1-6111f41d30ae", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae9e9fcf-1b31-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774410756, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410756, "uuid": "960de42a-b6f7-4a66-a0d1-bf61a4e26e5c", "comment": "Malware payload (Mirai)", "value": "2b173b39bea6336f5cd5a624ee7cccfe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410756, "uuid": "ddbcfd0f-eed3-4840-87bb-1764aa5aa4a3", "comment": "Malware payload (Mirai)", "value": "64d50b757f2bf71304810e5b1c500462e2232dac2f9985bfde8719fba7726492", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410756, "uuid": "b46d6ca9-18e4-463e-adc8-6dc561ae65b5", "value": "T10F13F1FA1745C5ADE1B6E1B6363887D02A650B6191809EC7178DBAC3E898C35390B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410756, "uuid": "0df6d929-bc4d-4fb4-af78-bde365ecef57", "value": "768:p3HQSGrNCfslD2ES6/fhlp3h/ZwlZe8dDHQYt8jbAI/qFb5zk3owrpC3HjmaYvVh:ZwSaNCo2EJnp3h/Z6XdDdI/q55zuCTmx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774410756, "uuid": "c32aa080-a3da-4059-b1d2-5792bf5184ec", "value": 45436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410756, "uuid": "545548ed-8414-47b7-b539-ad0285838086", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45923e39-27fe-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774410846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410846, "uuid": "dfc425eb-871b-49b7-ab38-4e3196e3a787", "comment": "Malware payload (Mirai)", "value": "5e32e966aeb719106385f0f5899e660f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410846, "uuid": "9dd52ea8-3a18-41ef-af6f-6ab9c9063cb1", "comment": "Malware payload (Mirai)", "value": "06b2cdc266c03715e8451f8a627752578a3c697f3e5fead325f05196742790ad", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410846, "uuid": "5045c715-565e-41cb-a33f-80f1530a391f", "value": "T1BDF0A2DF06D829511089FA2CFBA30C66A20867ED64C7CB8C584C1E373D8D99CB959F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410846, "uuid": "d2588253-4ea7-4ab9-a509-526bcfd02725", "value": "12:t94CoZDeChHWhy2hHWyzv/zMHWOIjDtIMHW1D1HWq:t94VZaWWhtRWyznzGWO6hW1xWq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774410846, "uuid": "53a8d71d-6ed0-416f-b50a-7292f01c69d4", "value": 637, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410846, "uuid": "6acb9b98-9dd3-45fc-9195-172007ddd12e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "097ea3e8-c90b-11f0-85ba-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774410847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410847, "uuid": "1f16906b-939a-42e0-8a02-c7e9d2c01387", "comment": "Malware payload (Mirai)", "value": "991a773789b2a027ad4847daa4e21c7a", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410847, "uuid": "01db7adb-8a83-4a81-a134-060a8778801d", "comment": "Malware payload (Mirai)", "value": "3a74de900be4054b7638d9ca9dda23ccb4a21d088f0726d30010c10273c92f4d", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410847, "uuid": "b454a4d1-d07e-46e7-bbe6-ee4b1aef01bc", "value": "T17364F1CAEF11BC3AEA85077135A70B5DB7B4D99A82C3E090F2D4C55E3CA92C5BB611", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410847, "uuid": "cc43023e-137d-41a4-bf64-dcaa860cd4cd", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioBa5POdOQ33Q:p3lOYoaja8xzx/0wsxzSilPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774410847, "uuid": "4d96d5ad-837e-4778-ac2b-a6080fa07564", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410847, "uuid": "85d315f0-ba4d-4bd1-a78a-26a37a0d42db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76eb58f3-27fe-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774410929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410929, "uuid": "024a3a2f-4c74-4e99-aabb-52a565774d3a", "comment": "Malware payload (Gafgyt)", "value": "a1314b5d8d872b3d4e58c621b0324011", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410929, "uuid": "662d4f81-5ff5-4853-8fd5-0f146786dbb7", "comment": "Malware payload (Gafgyt)", "value": "c333b6b2480c9215d30e6af45a013183d9626cf60ff95a61116cf71b45970374", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410929, "uuid": "7b029bc3-b7b9-4260-a391-3787569f3cc1", "value": "T1B8F32913B89484FDC496C2784BEFA626D965F84DA034B12F1B957F263E9CF209B1D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410929, "uuid": "51eb9d9d-bfa7-42a0-aca8-95e7f4072d78", "value": "3072:qUtiex2l/U3dp2hT5FM+62PIhHUK8W+x00iafORhVTYqjc:8e3ji5FM+62Qrodhfqsq4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774410929, "uuid": "fbea3a5b-19bb-4bb9-b88a-6b46810e7ddf", "value": 159808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410929, "uuid": "282ebf3f-1495-4d32-a6c8-9b5308830180", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57e4a006-2800-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Blackmoon)", "timestamp": 1774411736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774411736, "uuid": "217b7db4-5312-4b63-abb9-04eb871fefc4", "comment": "Malware payload (Blackmoon)", "value": "2362cefd03b002ae9436374a39ca5a1b", "object_relation": "md5", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774411736, "uuid": "c64a3092-7112-4444-b160-192c28b3ddc0", "comment": "Malware payload (Blackmoon)", "value": "879fcbdced40d6f3afa581ce38be4128d38274a548782a53b2eaa35881d5a7ed", "object_relation": "sha256", "Tag": [ { "name": "BlackMoon", "colour": "#60449c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774411736, "uuid": "5f0109ce-ac31-466e-9895-f1fd9853ec05", "value": "T13FF323A0BC33F563E7130336141E6161A4FD794B80FA2CF88D5B129791AA5F98EDE5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774411736, "uuid": "60809fa4-3ea6-4664-af09-0db6d7654a1f", "value": "3132d421b651cb32e5afcb8e36efc36f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774411736, "uuid": "77e41c6b-83fa-4259-98d5-9ac4fdd723f0", "value": "3072:gmn6Y2vLeWC2s3K0xBOtK8lt4Zldkp1wJYAAm98U8dwiHj+/ZRQMGNHxv:Szilxm7lt4ZHkbbAP8CiHjKZRQMGT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774411736, "uuid": "3eaa9f2a-a32c-4509-bc1e-30c67f923292", "value": 165376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774411736, "uuid": "7ec4e85c-b1a4-4b06-aa18-04a42ebf44ab", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10909a3a-2801-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774412046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774412046, "uuid": "27b831b7-1daa-4f36-b0f0-140ac5333c1b", "comment": "Malware payload", "value": "3ce2f1da8d3b6280d7edb88d737853b6", "object_relation": "md5", "Tag": [ { "name": "Adware.Downer", "colour": "#fe1fdf", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774412046, "uuid": "0eb42111-3715-4fd4-aaae-8a4a6f513658", "comment": "Malware payload", "value": "90885271a7c1785cc1daf66784a9148bb87de2cf2abd6e280cba0d8a00152f28", "object_relation": "sha256", "Tag": [ { "name": "Adware.Downer", "colour": "#fe1fdf", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774412046, "uuid": "57795569-1b6c-481a-b734-fef7a2c74d6f", "value": "T135F2841EC577029D3407D4B53BA567873290212BE78AE82CBFDCE5144F46DA986E2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774412046, "uuid": "f070ca49-e80d-4e81-854f-5c16419b58ee", "value": "768:o4rFlFaOrFEFa81b2m2rdX0X3f0FwDwPIaut2:H3z2jl2m2Sf/yIaut2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774412046, "uuid": "b47300c8-ce94-4af3-9d31-96f5aeec02bf", "value": 36912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774412046, "uuid": "2bae0952-a73c-4199-9229-80f52874ab73", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b8734dc-2802-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774412494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774412494, "uuid": "e0b89711-2ded-445a-a7b1-bf3d63825e35", "comment": "Malware payload (Mirai)", "value": "e2dd2044ea97688c8f1f8002e40797b2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774412494, "uuid": "136e6b98-d107-4b75-b859-a25d59a0640b", "comment": "Malware payload (Mirai)", "value": "8f2ba1e2c1af27d3b3324bc609cd21a625d6b0c1f9bbd36cad21bfe449445467", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774412494, "uuid": "59043771-1247-47c4-8be3-10e82cc53870", "value": "T137242A55BD415F22C6D126BEFBBE81CE33232BFCE3DE7112DE045B21268A85A0E355", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774412494, "uuid": "143e490c-ba3c-4fb6-a9af-35265bc75a99", "value": "6144:1wd7SKaAVATX57/+LZmpbC7ki/XaH9wIGXGmQzQtaTHUldE+uqwP5MUMwx4gqZp:iYK4z9/fbCn/XaH9wIGXGnzQtazUldEY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774412494, "uuid": "ca944d6e-7677-4077-b568-12973647ff9b", "value": 224460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774412494, "uuid": "73fa06f0-d9c3-4014-8d37-96a656812b1f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fec1b2c4-2804-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774413734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "57c50c94-abdb-42ee-bc59-9e33bd56708d", "comment": "Malware payload (Mirai)", "value": "91afa62d8fc4952cda060f716a6e0a0d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "cc414bb8-c180-4532-8cb2-489f3c321821", "comment": "Malware payload (Mirai)", "value": "e42b42da2d78f6cf9b7f01151f06d92c8b38eab6879c206fd3192f598613f792", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "f32d3e55-43f2-4284-a4cd-a6f9b9a0f30f", "value": "T187438D36E96E1E74C08641B074748FB56F23B5C883972EB61AA9C2795483E9CF504F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "94c460a8-1efa-49b1-b675-a6b9a39a565d", "value": "1536:Naa0brW/Od9hlCRbKrZJKwXQCcpvDCM12+W/:Nv0brWGd9X9rZwwapvDM+K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774413734, "uuid": "92a1079d-c4ae-4c52-b021-ffbc5832ba19", "value": 58740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "83dde80c-8397-47f6-9a34-c467f85a6c6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fec92aa5-2804-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774413734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "1a49b59a-229d-4346-8073-a70799744a9a", "comment": "Malware payload (Mirai)", "value": "765a5d2c4b30969eca489793782c630f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "1b12f16f-4476-42ee-ac78-e1589969cedb", "comment": "Malware payload (Mirai)", "value": "a1d138c993d49a64d123e80489b9e764da1d3335a6c1415bd7b74486bd0d0e20", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "2cdc8711-8dda-4f7d-a756-2e302c7bf405", "value": "T1A8730856B8814B12C5D512BAFA2E118E332317FCE3DFB2129E206B2477C696B0E37D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "1954f54b-6b38-4b9f-8fe6-479f46488936", "value": "1536:mlnHaxP6XkC/zTkS7IDHtfMwoE9Oe9a5p02IPQiizfKvcIs+5UYIWe:3xiX1LgbtfbX9avzfKvcIs+uRT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774413734, "uuid": "0ef53caa-e2c0-4f02-9737-bcc60b3b21c6", "value": 79160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "ca12d372-b148-4cf0-ae5e-b4df205fcec9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fecae6c2-2804-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774413734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "c73c7a5d-a580-4f43-9507-5f8fc2f382cb", "comment": "Malware payload (Mirai)", "value": "f1d6357ea20793d37fbbb50da9c29064", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "c6523a5c-91a5-4799-aa1e-255752f33098", "comment": "Malware payload (Mirai)", "value": "62d8c17ef6f2a0e14d7cc97593cd11dd222ad2525f857e121f429e5aea5ff1a4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "f59cd8bf-2599-45f7-8ec9-d7b550b71251", "value": "T198632891BC819613C6D1127BFA6E028D3B2613E8E3DF72079E225F2137C696B0D27A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "5ba0b144-904f-4126-ae68-04c589b88d84", "value": "1536:ZZ1ltCm9v09nDaI/KrVJYzt+zTHcOVNu3w3qvXWT:ZZkKDiQzTHcSN8jXe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774413734, "uuid": "3d7eefd5-602f-4e78-a1dd-9d4a5ff7d041", "value": 66908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "9c4ff0be-3e0d-4f88-8539-75e27a9e7f16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fecb4db3-2804-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774413734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "1c33b985-5288-44d2-b321-6061bec1e69b", "comment": "Malware payload (Mirai)", "value": "88e4d90b7d08e1c7f018b957bba837c6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "1f88cb47-5fed-459e-9625-b92ab01ad21a", "comment": "Malware payload (Mirai)", "value": "d24d4b2f6c831807bfad1eaead15fe4bd59f051ade6c8cca256b00db8adfbba9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "a5b97e3a-6851-4b82-a587-150330a212af", "value": "T15B534B02B31C0E07D0A31AB0253F5BD197BEEAD022F4F684656F979A9675E361182F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "1bb4992b-a2dd-4afb-87b9-e4cd3b075c5f", "value": "768:SEE5hjcoCkhVRGfRnbmX7/mG1nhG9UmtTy5EMBW/J9iSzEv2xRgN0L6FV+tg6wWn:+5HAdOmGyZtTAdMiSgOxRgN+e+aTWAe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774413734, "uuid": "743ae9aa-5139-48bf-a19d-9581d258445e", "value": 62996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "9539b492-b1aa-4ea2-bdcd-b419ff2fc297", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fecb8650-2804-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774413734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "51538e3c-7376-4e93-8fed-af7ba904a5e2", "comment": "Malware payload (Mirai)", "value": "ced5389e942e67f4bfdad9b125c1f230", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "fa038f69-97a6-4126-af20-c983d735dd86", "comment": "Malware payload (Mirai)", "value": "16c2bac923abbe3ccae861f5f62da28034f54a253ead71ed86c28fac52d0400b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "29b95759-1932-4aa1-a63b-aa112272c4c6", "value": "T149633A21BA761E2BC4C1947621F74B25B2F143DA26ECCA0A3DB10D9EFF719846543A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "8667fa1d-e877-4cc1-b657-08bcde43a5c8", "value": "1536:lGRaTYmol/hGIAs4PNvApQ5Gm75123tStjV:lya7hJXGmVDtV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774413734, "uuid": "ff6d1374-7a7c-4ba3-a663-7683f7cda1b2", "value": 67320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "ca20b671-f734-4bdb-9688-921c3b4f0a7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fece95d3-2804-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774413734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "c4939869-2105-401a-aef5-7ed6ef035693", "comment": "Malware payload (Mirai)", "value": "40ae03fccd67fa7bebcecd99e3aa19eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "ab94aa03-f268-415d-9a91-7952a9a39d97", "comment": "Malware payload (Mirai)", "value": "391ad2e268541b92a79164116870933af82dc2a0cf12a3a9ab4462dae9bb46de", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "4a20c398-6566-49dc-992c-de00e2fa23e0", "value": "T1DB637EC9E283D8F6FC1705706036E73BAE71E0AA211CE696C778D5B1FC86941A117A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "baf63711-13e4-48e1-bf27-c9f207c6431d", "value": "1536:pnUQJZdRlDAXO6QyQwOaOAKrxsxhP2J7RvsuIr5bhE8e:pnUQJ7RlUXTQpwOaOAaxsTPC+uWVe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774413734, "uuid": "284bc877-5ec9-496a-bd8c-53bae9738512", "value": 70736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "8c7dc773-e220-4e86-b681-76c362f22ca7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fecebf8c-2804-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774413734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "076488cc-4b41-4e25-964f-5b7b1650e324", "comment": "Malware payload (Mirai)", "value": "b937fa39787807914023604cbeb334c2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "76e07b10-2925-48b8-b95a-ca9142db6a1f", "comment": "Malware payload (Mirai)", "value": "92a4956cfcac87ee2ca8e6a913bb49bc90e5b0a659037cac4ddcd9961644db27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "561da657-5f64-4691-a6cb-86e5310613b6", "value": "T112E33B56EA418B13C0D61779B6DF42453323ABA493DB73069928BFB43F8679E0E239", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "04525ffb-ffde-4fe4-b946-3f04d3551d70", "value": "3072:yJTc2dBEBXp/c1agvzj4djHhhfxQrld8cXMknM/9fY:yJTcVE1agvzj4djhhS/8cXMEM/9fY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774413734, "uuid": "1c6717b9-0841-48e4-81c1-bca4e828615d", "value": 150618, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "48052a06-2a6a-4c11-9788-f2a609d97c2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fed0e594-2804-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774413734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "02c578ab-aa7a-45ec-af95-71be0d7cf5e6", "comment": "Malware payload (Mirai)", "value": "efe8ba09307f19f9ac088acbce765182", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "881a48c3-7800-48a8-96c5-8f0a0025d09c", "comment": "Malware payload (Mirai)", "value": "3d1209392b3091b1233600a52584b70fe443a5c75bc5a0f3cde99829175be344", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "46adefa7-6080-4375-aaf2-c6f601750a37", "value": "T167534B17B54280FDC09AC1744B2BBA3AD93775FD0378B2A67BD0EB262CA6D211E1DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "b960418d-75e0-4199-9b50-85345f77c935", "value": "1536:dpmbSQ6U3q7cCBT/lZsK/0DiQ0LiKimfFoktCe3fYRM2:WShU3q7cEDlCK/0DM9i8Fok06fYRx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774413734, "uuid": "4be20500-254d-426b-bdf6-71f1214b6006", "value": 63296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "517f29a2-d5b6-4d89-9a55-e5dc30bdfac3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fed21004-2804-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774413734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "0635137b-ea38-498a-822b-d76a8b61b4ab", "comment": "Malware payload (Mirai)", "value": "40d16912e9d4ec42cb84e0a9496946b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "5aadbe9b-9b12-42b0-b878-14c5bc18e96a", "comment": "Malware payload (Mirai)", "value": "440d42ae1512c61c5ae92fbc50b45afb750a698cb5606e68fa2d91548e1e0aab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "ff4ff0ac-4467-4b50-a6be-5f32e81a82c0", "value": "T1F583D606BB510FF7DC6FCD370AE91702348C594A22A97B367634D828F65B24B59E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "07de7ed5-806a-4954-8490-c78922b1ae1f", "value": "1536:iVLyu95K8Fkj752dCexuV/8UZlDwfkJ4MYfWn:iVLyMgTFezxu5VD1ea", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774413734, "uuid": "adf469c8-d54d-4c8f-9a5a-1b0ffa0dcdae", "value": 84780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413734, "uuid": "6bdf34b9-fd06-44c7-b0c7-33b97305c8f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2313e622-2805-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774413795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413795, "uuid": "3c7d5526-44da-4c73-80c0-7f1ad31ade62", "comment": "Malware payload (Mirai)", "value": "5f40a69f229f177f4c8f72c59a508d0d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413795, "uuid": "2f6c3bc4-ada4-411c-aa64-db41903b3aba", "comment": "Malware payload (Mirai)", "value": "70c1e0f0bb43ff0f168169ec0cde292a7afa267d96f4f6d9f744741f97651321", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413795, "uuid": "d7e7eb84-7874-4c7c-a2a9-5f6c2c61d086", "value": "T1B1436BC4F643D8F5EC8705702077FB379B72E1E922A8D647D3B4DA32AC52651E606A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413795, "uuid": "ed856325-0dde-4233-a7f7-fa2d69acad4f", "value": "1536:JeESt/basV2rcZhG6ySN7nayRe9xzWOIaEjrqMH:JeESt/basVTgS7nayw9BtXESs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774413795, "uuid": "5f2c2aba-b21d-445a-a840-15be488009e1", "value": 55632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413795, "uuid": "bb5c95b6-c506-4401-857a-29cee3c50ed1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2314c6cd-2805-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774413795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413795, "uuid": "ec0475ba-4642-43d1-9f37-f8cf0fdf9f3a", "comment": "Malware payload (Mirai)", "value": "99da46cc05eafd2b6e6040138109b6ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413795, "uuid": "2b4d163a-b261-4435-9477-04049a97cd1b", "comment": "Malware payload (Mirai)", "value": "966e84772c4a50b992733a6086e4a53e562a1f54b56aa2ccec41c53e5eec7321", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413795, "uuid": "2f3f02d4-4b16-4337-a111-0dde26a88e00", "value": "T1DA030751B8829A77C2E1137AB66E5A8D337163E9C2CF7217DD204B20BAD651F0D23F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413795, "uuid": "ceedb34c-c3d5-41f8-9f67-a7e25de5edbe", "value": "768:EgA/dgCbIsG5f0OJnlUlcOlF5AdwADb9X/Wh2v+blDN05XoTt+/NjwWU:EfBbXG5fblUlfbgNO4v+A5S+CWU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774413795, "uuid": "0c029fc5-5100-43fa-801f-672a8e90a831", "value": 40752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413795, "uuid": "80cd166f-ad2b-4aea-913a-323d678fff70", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "231f0ecf-2805-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774413795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413795, "uuid": "d58830cd-2385-430a-adc4-42fae10a645e", "comment": "Malware payload (Mirai)", "value": "a946a2f12cb9155f21da50160964fbd0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413795, "uuid": "cfba8296-5f23-4d72-bd58-060d29e00e7f", "comment": "Malware payload (Mirai)", "value": "96b666ea26920c5d07603612cd9646c350d5e3511c02d7e6478263925bc3edd5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413795, "uuid": "eb093591-4c6b-4851-b1f7-842332aba9fa", "value": "T12483A51E7E228FADF76D823147B74E25A69833C627E1D641E16CD6012E6034E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413795, "uuid": "9603d7cb-ecdf-4fbf-a1f0-e182f934e912", "value": "768:2ty6IP7M/kq0INRhfuN2Eo9tl/de2YIwHKRH0I84EH6UTz7ZDYovZ73x/nL8y8QC:Rakdn2Eo3ePu5GTzRYo99Be037WHv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774413795, "uuid": "e85c9dd1-f377-4018-91ae-9adf183ebd40", "value": 84780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413795, "uuid": "9a499ec7-6c95-49ee-a2b1-9f128f098278", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23264a6d-2805-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774413795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413795, "uuid": "dd3e02e6-8abd-46dc-ad6e-a122f1155b9d", "comment": "Malware payload (Mirai)", "value": "46e6292c699cdc45e7178a5f026b290b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413795, "uuid": "5dc25631-3943-43db-a3a5-e47754b6ba03", "comment": "Malware payload (Mirai)", "value": "313d159697b96aa2e5939148d8d5205d41f1325acbfcd1f1e0ac3470ce0e2a00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413795, "uuid": "cb556425-57ee-45a7-8a51-dddc14572965", "value": "T11D632BDAF801DD7DF81BD77A4457090AB630B3D502831B3B639BB9A7BC721A81D12E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413795, "uuid": "f43df9f0-b4eb-4936-bc67-4e03eb97a8e5", "value": "1536:vAgVfinxEYruDY7Dm8VJyyE1sxQWbxdJ3rWNzE+VQ1i:vAQqnOY6E7DiyE1GQSx/B+VAi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774413795, "uuid": "2e8b91b1-f8ce-424b-80a1-ea04b776bcca", "value": 69636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413795, "uuid": "c894df2b-f803-4c5c-8c28-0ca8db604090", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf189aa2-2815-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774420929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774420929, "uuid": "af0bec51-c15c-4ec9-9612-43b7596d9b45", "comment": "Malware payload", "value": "dd8c244eb2c29dbaf451ee2ab8e60f75", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774420929, "uuid": "a93b6a20-8dab-4b48-93e4-c64bad93923c", "comment": "Malware payload", "value": "b45dbc4f22f55e981a9e432423d5ebd9f323e05444c15e423ce439f3adf8928e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774420929, "uuid": "184ffc0e-bc9d-4f4e-be8a-9691093171aa", "value": "T1AF663327F46C79C0E47FE9BEE061174483E6130DE082993595A67FD8B2E53CA48CE2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774420929, "uuid": "420831ba-940b-41dd-85d7-2b79bcabe25e", "value": "196608:+ZftzwViAb0uU+HB/OGUElH6XU8YYlbHXU+:+BPAbrU+h/PUEl0U8YYlbE+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774420929, "uuid": "477ccc19-840c-4e6e-af56-8c81ffd41acc", "value": 6560388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774420929, "uuid": "c7a151c1-d56c-4b7c-a571-5f080c6cff7f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c3963c4-1b5e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774425523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774425523, "uuid": "288e3b4f-6702-4ee8-9f50-2c5033238f12", "comment": "Malware payload (Mirai)", "value": "c778b76eb215655fdc29e5b5146b5f51", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774425523, "uuid": "0f4fcd95-a853-44ff-9e37-fda52f4ca090", "comment": "Malware payload (Mirai)", "value": "7cf3f417110eac59f230573294ac93382e1de0848b1596db51102185ae5a91d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774425523, "uuid": "e8d4eef8-15fa-426f-9faa-cbd585b89fad", "value": "T1DD13F1E2E4A5D344EDBE11B628D6228F5440766E4829FDE6C7C12349BB837B5709CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774425523, "uuid": "1ab1fb11-dfc6-4396-aa47-727462c34b8e", "value": "768:wIz4nYXX626Oy6z+R3zjbs/S9EEYZm655F3haSVOsznbcuyD7UHQRj9:lz4nY626Onz+hzjbGMEEgm655psGnouE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774425523, "uuid": "27e6592c-fbd6-4579-b701-e0cf95b9019a", "value": 42920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774425523, "uuid": "7cb6e194-bfb1-43b6-99ec-ae001e4cedc0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc05b4c2-2822-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774426507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774426507, "uuid": "f303617b-d1b2-4938-8087-6a7b76d68f19", "comment": "Malware payload", "value": "09d6794fc3f81ea8e83a2b89a9a0b9a8", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774426507, "uuid": "dfd7f353-e7af-4cd2-a799-7d8508bd7555", "comment": "Malware payload", "value": "e4a99a8d25e99f3cac39f38df058c0a8ce694189e6fdf5b66a6e2cd2dd093ab8", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774426507, "uuid": "89080fdb-c8b9-4ee3-8682-b5d3475b96b2", "value": "T11DB423103AB3FD6BFCE503A82CDB6A17D0539EB11910104BFFF55A500EBB929A68BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774426507, "uuid": "6d55584c-5c48-468c-bb54-93b28a0b61ea", "value": "12288:AXqLr7rytxqy0vGXO10H7AvpQK6x1Eeflfm9ZnPHFUwEPstWIWiYgIvsWiU:Br7OUfUOoAvpmpf69mwEPnN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774426507, "uuid": "9431622b-9ae9-4f61-afb6-6b692456d141", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774426507, "uuid": "e9847815-eb60-4d59-b637-cb38a38113ce", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0d7943f-2824-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774427347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427347, "uuid": "bc5c81cc-8bcc-4edb-b34e-d9761d5dea26", "comment": "Malware payload", "value": "e4ed441f0f6afb0d8d55af87900ec48f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427347, "uuid": "e5f252a4-477a-43b0-9e84-1e3b54c6e774", "comment": "Malware payload", "value": "09d1e604e8cdd06176fcc3d3698861be20638a4391f9f2d9e23f868c1576ca94", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427347, "uuid": "cc603aa8-291e-484e-8c79-278a65e8738e", "value": "T173937D8235E482B1C9AF05F4C97AEB066A3CB5900FF169F76B949985DE61BC0D7303", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427347, "uuid": "710d50ee-37de-4db8-b5a8-3b2f4ec67c3c", "value": "4cbe94576279d6d8408886f6ac74d611", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427347, "uuid": "494c436b-9b1c-413b-8d9d-2979e46cf512", "value": "1536:obiyVUrqIQsn1xtg6RxkkBGCGHDWbWzaecbGaBLL9Qzv6mzm:yiyLyt/xcRjWazaecbGCWba", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774427347, "uuid": "169e5f80-fa66-4e23-8389-6b759686c970", "value": 90216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427347, "uuid": "e213cf68-ee0d-4eab-a833-952d54378944", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b13ca352-2824-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774427348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427348, "uuid": "2f5725f8-0719-4205-a491-5ffb8dfcd901", "comment": "Malware payload", "value": "4d157073a891d0832b9b05fb8aca73a8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427348, "uuid": "3a65393d-ce1e-4b3f-9134-e95208621867", "comment": "Malware payload", "value": "718812adb0d669eea9606432202371e358c7de6cdeafeddad222c36ae0d3f263", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427348, "uuid": "8276535f-0ed8-4be4-b8be-c82acd890bd3", "value": "T150A417327B464DF1E48923B572C6431293F9FC654361E3C3A7DAF0692F662C6A6332", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427348, "uuid": "33e65eab-d2e2-49eb-b60d-beb3dcc3d2d7", "value": "8fe8ee8466472be6c8207404ee8d1c05", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427348, "uuid": "082d8d1f-232c-4966-9033-09422d37719c", "value": "12288:6rK6LQK2R9Y9huTJzNa/LNE4Qclv5wDAb0qhUgiW6QR7t5s03Ooc8dHkC2esjaoq:ANZ2R9Y9huTJzNcNE4Qclv5wDA0p03O4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774427348, "uuid": "a27971b6-5181-43bc-b44e-7375c77f1c59", "value": 449640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427348, "uuid": "19540295-6adf-401d-9c94-72eae45461b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8054b67-1b29-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774427411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427411, "uuid": "7b9ffe69-aeda-4924-9f9d-773746ce9fb4", "comment": "Malware payload (Mirai)", "value": "36b2ba6114251e7d4fd58ec93bfde3af", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427411, "uuid": "448dea93-b32c-4008-b25d-b906948b79b2", "comment": "Malware payload (Mirai)", "value": "3f8c6533f521847a5dea1e2ab07a114ab82a3860fc5df30257878f3bd1ed164a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427411, "uuid": "ced48b6e-f259-46cf-b759-a48ffaa96e9f", "value": "T11CB2E1346A17C4B0F360BC36FDB9C70A8B17357B97B434320A609B7D765868725B82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427411, "uuid": "fc264e18-6773-4fc9-9df0-686b428faa0c", "value": "768:BgRmftmORW2o/H0iPjmNc0njAfZws3Uoz/kJ:yw3W2mO/cfZlzMJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774427411, "uuid": "50ae2564-3ad1-4bd3-9178-c66701b85b90", "value": 25580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427411, "uuid": "b9cd346a-b80d-432f-a664-2f11bd49920e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "641e68a0-2825-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774427648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427648, "uuid": "86112102-54b1-4722-aadc-c6039fe483b4", "comment": "Malware payload", "value": "365c5c1978d08459d981ffa2012544cc", "object_relation": "md5", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427648, "uuid": "cd82321c-0949-40a1-902b-0584a019e8b0", "comment": "Malware payload", "value": "6bce2dd7b61a662650ffa16e886d1f3da01377841882bbcc4081305d17b14f57", "object_relation": "sha256", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427648, "uuid": "4cfafb2a-9a62-4de0-b0d6-ac16fd1f7143", "value": "T1F4D57DDE194555E2D3FFB7A0C2B42E2E267173325C67691BA2FCA1C8CE103A66D43B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427648, "uuid": "4ba90413-1e42-4ee8-8d90-2cedeeb2bd10", "value": "24576:8+EhkjiYLXR+bG/f2mtFfsqD+n0tkR5JoiVsgV+PYDlJBK3xrcG0dAtVJlzFrpf0:8UiYbI27TGJos+PMeIGlVTFrRid3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774427648, "uuid": "9fd45994-be4e-4cc9-91c8-238594bde82a", "value": 2939030, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427648, "uuid": "1b6d5bc4-09a6-451d-ab1f-8ccd096c1f4b", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a9e0756-2825-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774427712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427712, "uuid": "1a7cf433-9712-4960-a150-a85a001ad216", "comment": "Malware payload", "value": "05f1516fc918b9d91dbcab8327bbaef6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427712, "uuid": "5f406024-d966-4157-9492-8cbc63edafdd", "comment": "Malware payload", "value": "f826b99658274c1d0e2652097c0bd06b874a2c43ca81183d72f3623d905950d3", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427712, "uuid": "8c747ae4-017b-4321-b36f-92b5285bb5e8", "value": "T16FE4AFF65355AC8F0A1C0DB5F508074A1C6C48D7E6B8C2F87A82B4F9876A1A44EFDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427712, "uuid": "4aba6c3c-1078-4fdb-838c-629acd7379d8", "value": "12288:dFbVh8P5U4PadNf14y8kIo0ZZ2AHsZaWiaqwjalKhGPTiZu6/:dFbu7PadNNv8Zo0FHsZaWiaqwjalKhgY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774427712, "uuid": "a15ff897-e93f-4127-b6ae-c581b0f0ba91", "value": 678588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427712, "uuid": "6f4964c9-f654-4b0b-8467-11caece14459", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b140197-2827-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774428545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774428545, "uuid": "f4f42bff-562e-4783-9739-8f502fed0cad", "comment": "Malware payload", "value": "f291e47a8a9c01f906c6f331b6bf3c70", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774428545, "uuid": "9823e5f2-5eff-4e1a-b20d-3be0ee6958ac", "comment": "Malware payload", "value": "1c0b50ee256c0237bca3d9bdc1631f23cad82d8fde0a5179287c5b534469652d", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774428545, "uuid": "622262b3-e7e8-4faa-8d57-214a6e0161c5", "value": "T19EF53329C35B912C444D9111B88E299B937D8D177E1E17315E4333ACFE378AE3E8E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774428545, "uuid": "4906dea4-4489-41c3-995b-7c3c727e6b3e", "value": "98304:SyrPvG3UNpYqQLpXhHHeanDebmPL+okjWa1lub:SyrPO3UDsdXp+z8+FWyq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774428545, "uuid": "30bbde76-7532-4f91-917f-0ec747261f0d", "value": 3489792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774428545, "uuid": "25bc28b0-87de-4da8-a8c5-bc213bf5d719", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95fe434a-2829-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774429450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774429450, "uuid": "c09aab2f-a3e2-4f1d-9a6e-aa508dbc0d1d", "comment": "Malware payload (Mirai)", "value": "7f716b4160c05e05c7d1511d0cae6243", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774429450, "uuid": "32c64497-9093-4c4f-a81d-94b7cbd9f234", "comment": "Malware payload (Mirai)", "value": "d43575a360790d82abc97c75d5e300cd846d9154e4d361f54a01509392a6d586", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774429450, "uuid": "f7bd359b-75e1-4e8c-9e1d-c1bdfb7f241a", "value": "T1FBF4F50A6E72DF3CF37487314BB34B2496AD72DA17E1C585E2ACD4155E2024E192FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774429450, "uuid": "2d9d95cd-070e-4ca7-8768-ce7247dd32bf", "value": "12288:5KaBGcJUWjCZP2LYaZNHwnSkC6YtY/+w1tpxT4HXrhTg5b:5KaBGcJdO52D/QSkCDY/+wjQVs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774429450, "uuid": "4f185734-5c61-42be-94c0-e87234b26a87", "value": 729824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774429450, "uuid": "ea8c4b23-a95d-43e6-aeb1-80cdbbb7cd70", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2d3a937-282a-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1774429954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774429954, "uuid": "718c80ed-6034-4302-9906-b271c1f937f8", "comment": "Malware payload (Vidar)", "value": "9e5629a9f14004d1bf995f91fd6ce747", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774429954, "uuid": "1ab47028-e0be-47e2-8b2f-f3834359d52f", "comment": "Malware payload (Vidar)", "value": "b739b0f3d526b42a5a10d0248f81bce9750b6502db20b20310209e353aa459d1", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774429954, "uuid": "6a7d2dea-2964-4f6c-b3f3-4576d2622ce8", "value": "T1AA955A4BBCA508EAC96A9B318CB622823B34FC590B3263D31E91B57C2F767D06C757", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774429954, "uuid": "103a2fc1-2aec-487c-9407-2c57d7a48785", "value": "ebc247a77b4d4a804b261f97a1fd075c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774429954, "uuid": "972fc187-0ad6-4733-b3f9-1c4082ebd012", "value": "24576:RAGA6g/EtNrZrpHneau172/qbFxXBxfIry4Xm/8PSZls1oIn/lezWtPCwK94iy:RAGfg/EtNrZhuFzBxgryDLcoInozk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774429954, "uuid": "9f2667be-cc4f-4bf0-9f2f-f9383a288795", "value": 1962192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774429954, "uuid": "b7222912-a287-4074-b08d-428f54e9c3bd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "108d33d8-282c-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774430514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774430514, "uuid": "5a21bbd0-c4a4-41de-a232-228416366a9d", "comment": "Malware payload (Mirai)", "value": "7a0c4e4ff87e501fae0c75642bafc538", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774430514, "uuid": "b472fa5f-de1b-446e-a41d-42690ee8b6b4", "comment": "Malware payload (Mirai)", "value": "6e0d7e9eafb58c207a42fafd79f482a279f231c23164740c0f1b5e7bdeb4b69f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774430514, "uuid": "7f42b1eb-8bbe-4495-8a98-e331e80cdfda", "value": "T11EC44A59A8419B95D1D02BBBFF1D934873131B38E3EEB0069D196F246BABC1B0F7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774430514, "uuid": "14983647-a30e-4cfd-b00c-3cbf8f644abc", "value": "12288:HXUtKLC4Gn10h8zWE1HCf5UcELKsR5ZuucCyCwMPwcHrGVhaWUKXN775FoRW:HvC10hw1HCa9ZuuG+wdP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774430514, "uuid": "3ea2bdeb-00ce-450b-bb05-7e6016702d11", "value": 556868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774430514, "uuid": "d4fa7f58-4be3-4332-9f47-9a1dc648e038", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d87bc8-2830-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774432436, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774432436, "uuid": "51fbf1fb-225c-4e25-a661-163afcb7b315", "comment": "Malware payload", "value": "1cbc8a35f0085f1df73d2fa4321f532a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774432436, "uuid": "50f91c8e-acac-4d13-94a6-3145d4d7e864", "comment": "Malware payload", "value": "7ac04efc79e4db1a0363e3fdf7de933f23077b52c70f7d3f5ef8986c60391009", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774432436, "uuid": "81d74bd0-13d2-4437-824a-79270a1f798e", "value": "T11866E045E711EE06D3892B7A4153E12C4B64CE2ABB63B34F0F7CB1697E722791A013", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774432436, "uuid": "fdd416df-a104-4787-abd7-8f76114e05c0", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774432436, "uuid": "3cc148fa-bace-4fdb-a088-f18fdd5766c7", "value": "98304:q4UGXG1BhCLGMNXCrZtRqOOATe5Z811KhyYjZLhOngGBZstT0UYo3lWSoYIDgfA4:q/TsLdX6ZtRj6g1uNrRsstW0898Yo03Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774432436, "uuid": "602e358a-3101-41ec-921e-6a7f2ee559f6", "value": 6884056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774432436, "uuid": "ac6fcab2-97b6-4ffb-a9c7-f92428a5d719", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2d2addb-2830-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774432558, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774432558, "uuid": "72fd1bdc-99c4-48d9-b547-da6b0787ffe2", "comment": "Malware payload (Mirai)", "value": "4b7fa754a2781c7b826821d77efb7d28", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774432558, "uuid": "9bd54d4b-94c8-48a0-bf61-a7beb4f67bd8", "comment": "Malware payload (Mirai)", "value": "4f15a206b1b427d037d2b4cec73267d4a1269604b757f6120a8c0627f9428c02", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774432558, "uuid": "2c4b0c26-bfb1-41cc-801a-e6ab5f931323", "value": "T1A3E0A7D802847E53924CDE1FFB93508E0115A3D8600767C0B68A1B5ABD40BC5A058E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774432558, "uuid": "85d70b94-c5ad-4c69-8570-79014ef6fcd6", "value": "12:KhI5W3CtI1/TbNy1npLOhoN42yN1CzliAErN1WeqlHE:KOQyS1bbE1npLOBf2liAKXqlk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774432558, "uuid": "4998279d-ab57-42bb-a722-66df3c78fc71", "value": 424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774432558, "uuid": "13b87591-e894-4d72-9ab2-ce5656735966", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "149b56a0-2833-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774433527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774433527, "uuid": "13b682d5-79b6-4d73-8331-3c5b991a884d", "comment": "Malware payload", "value": "d232320cec3326f6c8fa3eb0857e611e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774433527, "uuid": "5fd5576b-9535-4e07-be92-7c8449dd9729", "comment": "Malware payload", "value": "9fbe0e1e4667293e6596298570486db49f3017d99a5bc2f40ad20d691b5c4e62", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774433527, "uuid": "ef9a8f89-efe9-4bb2-822c-c25e01338366", "value": "T16866EF01A792DE0BC7852B3A5163D1AC4760DE2ABB62B75F0F3DB0717A722391E413", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774433527, "uuid": "b20144f5-53ee-4816-b18c-49111b42e833", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774433527, "uuid": "429d79ac-8bcb-41ed-a094-1bacf063ae62", "value": "98304:N6DDvCD3s/V2i5xSNbqFKrIJIda941Uv20IAPRbleO/kGYYjCzrRwesAo0zbu:uM3s/pxSNbqFKBRU2vAD1TOz2Mo03u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774433527, "uuid": "cfa5493d-92bd-40cd-8e97-fee5eba21519", "value": 6558936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774433527, "uuid": "54894ae3-061d-4199-b78a-45ca61444f03", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3918f51f-2839-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1774436166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774436166, "uuid": "c8b851ed-a22f-4a10-a387-56e9b6e59f41", "comment": "Malware payload (Vidar)", "value": "e4cd08051e430d536d8f0648d6ea6c36", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774436166, "uuid": "9b6e966b-cc8c-4fe0-8229-dccbbd82f50e", "comment": "Malware payload (Vidar)", "value": "be2324584645f571601a995fe59175ce05e5d73c82aae0caa95678a42ee6ba18", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774436166, "uuid": "31d2eaf1-c080-4051-8c7b-4b122e5f4346", "value": "T18424126F74F3DD23EBF6893A4D0C1285BB167D1A54A5C52F895A3E0A31A2D93D831C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774436166, "uuid": "b2b2281f-9bee-4cf0-af86-6ea7a3ce2321", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774436166, "uuid": "f6d6300a-baa2-490e-85f6-8733bccbf2b6", "value": "6144:rzMKK3lBryooK53RwzWcM/iwnhMNJqB+:r4KQBv3wzg/iOuNJ2+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774436166, "uuid": "d66a9ee7-b5e9-44ad-8f4f-561409c69244", "value": 223232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774436166, "uuid": "0dddcdde-49e7-44de-8682-e973fee6ea83", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa73351-2841-11f1-ba1a-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1774439586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774439586, "uuid": "8be60ef4-ccf6-4b48-8bb7-7a183d153c97", "comment": "Malware payload (GCleaner)", "value": "e6bec71122de0b417b94c24f38fa101d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774439586, "uuid": "0ddef5c0-b329-4379-adbc-2b56396f8f42", "comment": "Malware payload (GCleaner)", "value": "872db027801f8a156e2110ed9e276930e7c36b5b283fe36e3f73382646ee690b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774439586, "uuid": "54983ea6-fc3a-4545-9af7-c6ec610c576c", "value": "T1EC15291EAFB3C072EE63D5B2F6645221393DB82D173885CB62B0282DE9907C1DAF53", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774439586, "uuid": "ce3c69b2-4424-4e3d-9ec5-28c77b07f005", "value": "62848721a0fe32270ffbda7abe4e1f5c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774439586, "uuid": "78ae4c98-891d-4947-a9b9-a772c1955b9c", "value": "12288:7YEd//LbpeDJ4jfiIaBRtwfESz9pfYbVC3pKEVj4988fIN:7bJIJ4TiIaBYfTz9wC3pKqH8fIN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774439586, "uuid": "b1e88775-8107-44aa-9e6f-dae9d8321736", "value": 894976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774439586, "uuid": "72823795-0ec9-4a16-8645-9092d9324610", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15035c25-0a94-11ec-b0d3-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1774441096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441096, "uuid": "c3221912-d935-4325-9052-f69da7fe2cbf", "comment": "Malware payload", "value": "b91684d21c9c84c60c16525b61b3439d", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441096, "uuid": "d98bf1de-2d47-4b62-a8d0-c228b703a461", "comment": "Malware payload", "value": "d0963a929ffc1413a410320e79da9b1610ee10d3efe715573fbd586183f620c5", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774441096, "uuid": "ef1e13de-2b43-4896-9ce1-cfe93e36bfaf", "value": "ED231782BC82865689D413BEFD7D42CD331273B9D2DF7102CD515F18B6CA94F0E6AA92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774441096, "uuid": "fe6f40b5-64d3-44fa-b180-72df9675233b", "value": "768:CMn1EjZA//+1vTRfRiOC7wYqT4JqsWA3B5d7I9ybMioW+j/LsYtXO0CurrU:CMn12A//SrRftY97WARbIcbboW+zLsYa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774441096, "uuid": "8ef17e6d-9feb-40e9-8786-19332e82f37f", "value": 46080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774441096, "uuid": "bc1bf578-8cf0-4809-9fb3-39e6063cc973", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b14802b5-284a-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1774448509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448509, "uuid": "420385b0-bf48-4aa7-a0b2-4627f60ad251", "comment": "Malware payload (ACRStealer)", "value": "8a41415be3a8c307f8d67f1d5f532c49", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448509, "uuid": "bb815f3a-6611-4221-b107-dc892a1afaab", "comment": "Malware payload (ACRStealer)", "value": "aa0477d535a2034192f0206216f86abf01d6a72f38490aed4d9b3cacde70a0a8", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448509, "uuid": "052c9e4a-e5ee-4463-88d8-98d173d5186d", "value": "T17F16A65A9C101650C3BCF030D9AB492923B538687F1407FB3B497724BEB27E9A6767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448509, "uuid": "3bccaa60-0d69-4572-a490-a43533d33345", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448509, "uuid": "ee12b2eb-f60b-4f68-8307-f67188f438aa", "value": "24576:wqswNSym1MYC6olYrFtiHVjJhuKtJrB3DWMnj9c8cWD/QvUSrbHFcL7rUXTz5:wqvsGYCvlYptiHDhuQJrBzj93Qcc3X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774448509, "uuid": "e54fae07-e975-4169-a320-a601aecf1b6f", "value": 4132864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448509, "uuid": "7d27b758-9048-4178-b792-378a4fbac001", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "912c7847-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774448769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "0967aace-6bd0-4b5d-8112-eca6c8dc05ef", "comment": "Malware payload (Mirai)", "value": "9a85f5824c986056a4e59197a186f814", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "206281f7-28ef-4f16-b871-e42b07d3adfb", "comment": "Malware payload (Mirai)", "value": "6c452598dbaf460e880d0a7268d4e732ef342482860a973524ac678ff1854429", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448769, "uuid": "f20eb2fb-673f-401a-affe-3c5c5638debe", "value": "T17AE47B5377218FA4E350D27005F38B655AA521A30BE294C6A3BCD6207B51A2C7C6FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448769, "uuid": "b97a1fa3-389e-4ba8-bb49-a0a4d7d7b58b", "value": "12288:n2q3E2KX4nn8UvpmkcuBhxBmAHrmsRFIN+z5MIEMD18p3QfEHi:MX4nnpmkcubflHrmxN+lMVMHsC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774448769, "uuid": "428889b4-22c1-4122-9cad-b213ec7a3fd4", "value": 672936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448769, "uuid": "bbdc6d07-1aa5-4da6-8dd1-8f716cf19f57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9158d36e-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774448769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "c4ac7f4a-d093-4ddb-bf12-daa8c71bc514", "comment": "Malware payload (Mirai)", "value": "4849f6bc413f07ac5f1c7aa29b6a1026", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "c0fdca60-7c37-4f33-81d6-81cedc21ad50", "comment": "Malware payload (Mirai)", "value": "f7eca4fe14be362204c8a02cf34f0c33436f5f16bd159f9f7d2f715ee3fce461", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448769, "uuid": "8af2bf85-776c-47f9-91f1-7c0e903aa8e0", "value": "T1E6C44945F8809F61C6C529B6F64D82A873174779D3EBB2069E245B343BDB86F0F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448769, "uuid": "a2ed0bd7-732f-44f9-8095-5f55e8f64aaa", "value": "12288:m7EUHc246zU9ngDzyhDyCaZfUkH1RcSUGpkPW8p1Q5u:UX40U9nlhypJUa1RS6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774448769, "uuid": "72b7d2a7-4339-4a93-9553-65be58c7625e", "value": 563368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448769, "uuid": "ea711441-a089-49f3-8c2b-78fb02f41a55", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "915f08b7-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774448769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "da8b0682-bd0f-4d33-9e6e-6bb9d93f184a", "comment": "Malware payload (Mirai)", "value": "8488cae07cc70b976370c5420bbd1d16", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "d4122d80-91a1-49db-aa11-602ee03da150", "comment": "Malware payload (Mirai)", "value": "8217adcfe254ca28e9d01cce357beeec8b39fc4a03327f0abc4f8cd481262dd1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448769, "uuid": "9b48fa3b-2817-48db-9009-71fd6ec80ebf", "value": "T169836C46F851CD4AC5C9577BFA5E128D336243B1D3CB3223CD281A295BCEA8A0B3DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448769, "uuid": "39628ec9-5e46-4440-9f7c-eafaac4bc3a5", "value": "1536:/tG3s/KpGwtuBp/fbTUOnZfuoOeq1zvbDdbIQ4PEUcZOkMtJOs:VYs/IftGpXb3ZAr1LbpDorcdMtJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774448769, "uuid": "10c63dab-637c-4850-ad20-1565db664cde", "value": 83640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448769, "uuid": "71cbe1a1-2201-4c0d-991c-645ffc7658db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9172467b-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774448769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "53a392ee-0dd3-47ca-9c4e-54d5a003a7d9", "comment": "Malware payload (Mirai)", "value": "15a819112d3326caaf734bbe20c92788", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "952dd176-b927-429d-95ff-8edbd8574954", "comment": "Malware payload (Mirai)", "value": "a4ab0aa858512faa71448502a07f12aad49e3ce5e97e61ac4462530b5681bc84", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448769, "uuid": "5f1f1c56-1180-4292-adc0-159cfb84eaff", "value": "T134B3AEEBF64715A2C85243F013C79F8E3E232290AE57A4E76D1E267B15760DB1D0AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448769, "uuid": "d51623ad-8fd4-4863-a8b1-9ba85cab4f60", "value": "1536:pkA9afIgfNMW3zC8aRGGTtJM/qrlpmxJ6nDgJF/LWW:6fIw3e8ZE3MYlphDgJFq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774448769, "uuid": "c08d6a5a-3fea-4f56-922b-c0b58cc2e3ca", "value": 115992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448769, "uuid": "ac2e522d-db3b-46c3-a19f-6b4b232b0dd3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91b8cbec-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774448770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "156be5b5-1d81-41a1-ae19-27850223e93f", "comment": "Malware payload (Mirai)", "value": "5b1d22a61f65c0faef8897269c27c44a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "c02d47ff-d811-47e1-8e19-fd08039e4953", "comment": "Malware payload (Mirai)", "value": "13e90bf340976b332d333e5351dad97ddd878022e5977fed72318ff7db1117b3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448770, "uuid": "ec2fcfe6-499d-4ac8-a9fd-a54669f896f0", "value": "T163157D5AF2B374FCC06BC030435BDB62A835F46901226E7B66C4DA352D62E711B29F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448770, "uuid": "f094d1c1-7483-495f-81cc-f8e8fd3bfe0a", "value": "12288:/I7f9muJqkzGxKBY2KhEW9YlbqBpI6nhqYmyo4W3Ym3O5k:/I7f9mukkzGxKHKhEW9Ylb8IIqHom3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774448770, "uuid": "ce720781-4c03-4fc7-a8b1-67a12ae3d048", "value": 901776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448770, "uuid": "2b502b10-cc84-49cc-bc59-fe7813d26315", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91c178dd-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload (VenomRAT)", "timestamp": 1774448770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "c0693253-8fc5-4647-bf98-1d02a63ec5f7", "comment": "Malware payload (VenomRAT)", "value": "1350b10189d061d630ab614be7935351", "object_relation": "md5", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "2cc1b37f-26d4-40ca-a167-efb2698d0bed", "comment": "Malware payload (VenomRAT)", "value": "3187d3e3b16a56070801701cb040843b67ee52f3a601be142267fd0ea0d91e3b", "object_relation": "sha256", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448770, "uuid": "7da2051c-fc98-48c4-bef6-9c92a91e9143", "value": "T113D49D7676A28E22D2895733C1CB440083E4D786B5A7F74E758413AB19073BFDE47A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448770, "uuid": "d1567193-1169-424d-ad18-d3f76c801230", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448770, "uuid": "b128943b-7e98-465a-8ced-982784fd9b9f", "value": "12288:Yu327BfcYqMzHr54K4N3hr3ZOWgB5jDIoE:McRMze5hr3ZIjjDN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774448770, "uuid": "426d5375-365b-44f1-8cad-674e18d3cc8f", "value": 643584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448770, "uuid": "aa691ace-2af5-487e-8718-99efac0c8987", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91e125a8-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774448770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "968db705-5555-4faa-9e0a-246a7cfeaf86", "comment": "Malware payload", "value": "e96e28b3824abf6496fd0971b3ba7459", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "42eb3ae6-9347-44ef-b303-854148edad9a", "comment": "Malware payload", "value": "26817725650583d99ca3e617a618dd75c0f71bd316b5761780b7361f5f824cad", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448770, "uuid": "f2512352-da49-4657-b707-84dcddcaa8ff", "value": "T12805AD127AE9D0BBD2421132CB1C6BF591FAD7680B3048C763848F5D7B359D1DA3AA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448770, "uuid": "b7315c3d-4750-4672-9068-395659a5f325", "value": "6c5965af38ef4fd6158aa40e07982ef9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448770, "uuid": "1d8ed0ff-b599-4f79-83f1-0e1e65d549d1", "value": "24576:DzwrgD+SHLYg9WITZMnYy4lbDiPw9ADbDmgZmz6yE:DU8RrYcWVvIDrdgUz6y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774448770, "uuid": "35184417-eb46-4427-9c7d-b17a68d28f9c", "value": 858112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448770, "uuid": "5136f1f1-a855-4b33-9cac-2dd46e59f71d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92821f0a-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774448771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448771, "uuid": "9bb1acaa-820e-4d7b-809c-4f3ad35d94e6", "comment": "Malware payload (Mirai)", "value": "f6462027f9ff6efb6e169b0448dbb458", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448771, "uuid": "709ace64-656c-41f6-ad3f-0c0757bf9698", "comment": "Malware payload (Mirai)", "value": "a6c4a730cc420bf8ea0c80bec14a7cfe3bdcf7f967903a20373a80fac617c1a6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448771, "uuid": "2a7ab597-a6f5-4346-aeec-236a04103ff6", "value": "T10BF2E1F791BAE07BF870B6B75C5997D0EC61A8870E02277FDA2DAF7E4CA271409106", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448771, "uuid": "e2224ca0-c07e-49cf-9c08-72aa4b9dfdbd", "value": "768:nkjvsa/voIrR6i0PrwwZufLqbUhdjKGKGRFtlFwTiUx0nZt:uzHzR6iirwdf2bUhdj1FRzHcMZt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774448771, "uuid": "97956cd6-6ad3-4c70-90e8-1fb3100b350f", "value": 36924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448771, "uuid": "c11e7fa9-86d6-4825-a6c4-c58a3b2ed5dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92828b00-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774448771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448771, "uuid": "e75e44cf-a51f-4bad-b5c9-60bd77c30a2f", "comment": "Malware payload (Mirai)", "value": "06361329069a339b572dbc7610d0fffe", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448771, "uuid": "11ee5450-d0cb-4145-9c39-4bb25e951353", "comment": "Malware payload (Mirai)", "value": "3cce1d0142e5d21c3c33705fa8b10affa0c06469dd74e14a538224ff52cea1f6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448771, "uuid": "ad5e0617-3a09-4aec-a728-29485d56e3f6", "value": "T1DDE46B06EF800FEBC4AFCD30852E875B05DE999702D1A779A5BC8D9CBA4D2690FD35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448771, "uuid": "0cafc133-1898-4e61-8b4b-f9a37e4d4d11", "value": "12288:VX+nsaznG2vCNMjn4G7DzRpekl4NkYbOs640uFbmFX/Epe8MOlk1x1/mpvpNdUdK:jl6rGGCax0hkQGJzKk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774448771, "uuid": "ce0bc2c6-071d-45c8-8c85-1b730c51f362", "value": 672936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448771, "uuid": "7168ec31-b97e-4c36-a50f-b4013b71e8d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92a9398c-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774448771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448771, "uuid": "2a5a5c69-8057-4960-8542-f72b262b311e", "comment": "Malware payload (Mirai)", "value": "8ee9712eea5eb100ef72522689346c17", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448771, "uuid": "049f42aa-eee5-4cd4-b787-6e24ba1741f3", "comment": "Malware payload (Mirai)", "value": "32e4725e4ca7048ac4bd253155778a4ec657c55a5586aa90eda49409a3e7e8d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448771, "uuid": "7f266500-eecf-4d53-9c90-608d9814509e", "value": "T116248396AF503EFFD89ECC3351A5CB0A15DC450922947FB66A34E414B68B14B99C3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448771, "uuid": "fce87d01-a5f3-4a5a-97af-d15bec921d35", "value": "1536:og4nd1O7KiNzwhs/70OQ+P9M5zKTcfmolPV/IEDtUbDr1LRDuuWigLAgElLWZn57:B4u7KiOhY70rFlTDYlDAj/n53ms", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774448771, "uuid": "c6ad2cec-7971-47fe-b3c6-f1204ef7e6ab", "value": 215572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448771, "uuid": "07758af3-59a9-44de-8ea0-849bbef35a94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b32c5e39-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774448826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448826, "uuid": "9bac0734-1e11-4c8e-9f57-d7aee5e4a393", "comment": "Malware payload (Mirai)", "value": "0cc4dcf0dc6afabbc5457914b434bd1f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448826, "uuid": "beccab41-fdb3-4dcf-ae0c-7349f8fc462d", "comment": "Malware payload (Mirai)", "value": "0c6c1012ed2a0b5556b60928b72ec2d7cac56bd9fc08dd0bee21e266190fe575", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448826, "uuid": "f3f6e9e1-193f-44c0-a771-cf013b5ac2f8", "value": "T1F3115380320673E1F537C9213AA9EC0897EAE78C23F35F6529D41867917DA403A9DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448826, "uuid": "2045d0ef-72d8-420e-9ca4-80f9609f4301", "value": "12:JCkIZQueZAuDhXeZTN4l0leZ82eZDjZBzeZNNQWleZJVeZFTeZuMDeZl/veZK/UK:Ic8uDhoNQ0PrZBuNQWQ6ZMEb/9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774448826, "uuid": "80875774-e849-4232-9f5a-63406c2b61a8", "value": 1105, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448826, "uuid": "f7585564-e82b-4050-8463-47a778d332d0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7badc40-2858-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774449666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774449666, "uuid": "2def7398-6589-49e2-ac8f-2c0120f16cbb", "comment": "Malware payload (Mirai)", "value": "b2f53d3f1f10a43dfb0c8bf91a6a4669", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774449666, "uuid": "f20582b7-830f-4ac9-bc03-32ed273300ee", "comment": "Malware payload (Mirai)", "value": "ade014e7ae33532650e34801e9c1b0405f5f2fa0c33b8b1bbc9a0fcac0b1f22b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774449666, "uuid": "ae5294bb-b86b-4069-bedc-0bf1233a0eae", "value": "T10873F85AFC419B15D5D522BAFE0E528E33136BACE3EE7212DD141B2427CA91B0F7A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774449666, "uuid": "825860f9-c58f-4e2e-8a44-5496271f4ecf", "value": "1536:oGn1qUuO7mGoVjZLtkvijy9SyHkoA1fzxUGbUcVlHTFaqMClY1ixc2Ss5:f7uOyGgttSLSyHkBrUGbUcVlHTeac2Ss", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774449666, "uuid": "0517e579-5609-44f6-a0ff-9daa1894e316", "value": 76600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774449666, "uuid": "2c12a36c-4955-496e-9854-b9c5922a737a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "113756b2-285b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1774450702, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450702, "uuid": "ae215d44-32e8-46aa-abe9-a8667f26e428", "comment": "Malware payload (Vidar)", "value": "8a6fa302467e8f368faf3d66b68789f9", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450702, "uuid": "ebeccbe6-82d3-4bdd-8c2e-98a6e075a303", "comment": "Malware payload (Vidar)", "value": "0c5c78626073b8c6337e961391deeeb10e3c4e46c32492b7ca74ec8726ba7919", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450702, "uuid": "7533c0d1-686d-4324-92f9-287b5869636e", "value": "T1B066082B625F916BC14DF2FAC0538A10A9F371741B3389E7D29D03297A8A9F44E3D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450702, "uuid": "73484f62-86e3-4148-8bf5-20e6c4ca4ed1", "value": "0cf6c829fe1a947ec2ed56cc573f7341", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450702, "uuid": "d73fe225-3c44-48c1-b2f3-b247899861a2", "value": "49152:mA4Tpe/C9u/T5QWpG8/NPXbzM/cSQ+u11HENscJz5KWH8NM/4:mAZtDvENnPVH8g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774450702, "uuid": "ff56b529-d3d0-4a1a-8ced-b22b0465952e", "value": 6484992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450702, "uuid": "58abb15d-c8ec-40d7-b915-4c929bd86010", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb45e15e-285b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774450987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450987, "uuid": "c61b9b54-192b-4de7-8ae9-98f9b992fc93", "comment": "Malware payload", "value": "5225ce0339ff3cc6c6cfd466e7edf218", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450987, "uuid": "d10be282-4ec6-411e-b823-e1224e38c79b", "comment": "Malware payload", "value": "888cb79657bb04567a2b4a67dd0873781ed8bc5487c43ced2d2784c05cba34b3", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450987, "uuid": "b2781561-6c78-4be3-af55-c4fd7ddaac63", "value": "T19FB423B221F2CF34D5DC971D6A12650FAA33B7DB718D84C0F8A05F502366AA12E641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450987, "uuid": "1d8e0715-7d3d-477d-8fe3-57025f9a5215", "value": "12288:gP3LwQ7Spmh2TRTRBfuEMhY7024QMk8ogDw1h1PBciJ:Is4W1RB2ET0PJRW1hsiJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774450987, "uuid": "7bde37b3-4625-4456-ad95-7e1b40ea26bc", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450987, "uuid": "8b8db26c-47ef-4d52-84a4-91c3235f5414", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc1f42d9-285b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774450988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450988, "uuid": "29f66665-93df-46e1-acbd-88dfa1f0779b", "comment": "Malware payload", "value": "b88b3d3f8996e05bf2b46fbb2b8695f2", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450988, "uuid": "2e6b0978-7f88-4b93-bd65-614ff21af5ec", "comment": "Malware payload", "value": "a854e593a44873be898fc3d394d68625ab6563788ae69c6842cd8553581d59e5", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450988, "uuid": "bf0536e4-d031-485b-992b-d28385b6fd9a", "value": "T12374E0B2AE3100E7BDCC2CD65C7F2D157FA063CBEC061D95C6158AAA818AB7B7254F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450988, "uuid": "fae525eb-8d84-46a2-b32f-412b660186a1", "value": "6144:3CxyIL9wfQ0zwlWCW9lmgpTHqBuFAeXg3Qit7hB:3C7CfQawUC+m+0eAEgAsB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774450988, "uuid": "9b4f5f89-128d-4af7-b069-9eb6bd32e560", "value": 350936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450988, "uuid": "aff925e6-31d7-42db-9179-3afcac65fe03", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd134edb-285c-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774451527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774451527, "uuid": "dfcab24b-27dc-44a2-b575-92e31e2c1e7f", "comment": "Malware payload (Mirai)", "value": "572171ab4ad793f6393ad5e48a1cfece", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774451527, "uuid": "5bdc97c1-915a-4fee-b0e3-9f48212812a6", "comment": "Malware payload (Mirai)", "value": "659171278a40150d45e104402bcc8b25359d53fbeaacca6de56885cf5182d7bf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451527, "uuid": "21306152-2d47-4a6a-af12-25ef4d30f6b1", "value": "T107E33B46EB818B13C4D61776BAAF424533239B64D3DB73068928AFF43F8675E4E236", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451527, "uuid": "03a824e3-51ba-4125-8e99-98533047f61f", "value": "3072:/G55mWh/acKJVkg5aKvxEosLRyHB3EOWREfjUUM/9h92:/G5kWhI5asxEosL0H/IEfjDM/9h92", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774451527, "uuid": "43cef832-ae4d-4264-9ed7-3f6352f40a68", "value": 150909, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451527, "uuid": "b5442eac-d96a-436c-a939-266f981ac0fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3490d6a3-285d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774451620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774451620, "uuid": "29f6d1aa-7c12-4020-adc4-10e6d5dd9686", "comment": "Malware payload", "value": "114c8f206d08de0f8e4203aa025ee71d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774451620, "uuid": "aed3c349-4cd3-44a4-89ff-9b8200946013", "comment": "Malware payload", "value": "b00c43ce04fc67dadef9a63af36ad136f69c140c0182148a1b7f051c3a275a68", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451620, "uuid": "ceeff65c-9f61-4017-a7d4-32a6d70b6a47", "value": "T1438308327589582A210B028FD263336C70EFDCE2D611E5B6F6F922344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451620, "uuid": "7ba1ac2b-1b80-42b6-bf32-3e1e26824bb8", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbniWakVN/:XEKltp9t2SX/yr2pbiW9VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774451620, "uuid": "d080fa3f-e3bf-4d17-9e2b-82ae74ad7b8e", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451620, "uuid": "19d9ab72-6095-40f8-8c18-e25b47104b1a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ba4bdda-285d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774451793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774451793, "uuid": "457fc320-c7ab-4a91-8fc4-cf0ed0ee678c", "comment": "Malware payload", "value": "f63a04fc28e6a24f2268756790e8652b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774451793, "uuid": "f58b322f-80f3-4439-a7d5-d770a2058163", "comment": "Malware payload", "value": "360c06ecceac5418dab5e79bf1ce92535ccbb9b7e21c5ebccdbf40da376515b9", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451793, "uuid": "f48b458d-64b8-4015-9553-4125b25dfa2d", "value": "T1D513BCD47380D40366CE5F53BF16BDE9E12AA876B9C4A84792543BAC28BC507C6B0D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451793, "uuid": "3478c48d-8722-4cfe-b4e5-03c14bfe6483", "value": "768:CE+STaSwU2TMH5flaEtU8v802ql3rnVZMlE2hXichrYc5zTn3kPHjLZwDxSjKKN:d+Z0V/XEXkPHjLZsxuKG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774451793, "uuid": "e904202e-1a3c-42ae-ab09-92ff9a6cb2c0", "value": 41545, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451793, "uuid": "6974cf4d-e37b-48db-97af-9090fabe415c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2be9536-285d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774451832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774451832, "uuid": "fb174d93-14b8-40c8-82fd-a00d5d0cafe0", "comment": "Malware payload (Mirai)", "value": "4b32f87e4517a37391f77b9bbb26bdb4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774451832, "uuid": "28ab7dac-48e7-4be8-9b49-c532d1c85c85", "comment": "Malware payload (Mirai)", "value": "dd315ca63b944a8970f974a3c440adc534fdacc07e1c421e96418f987ab58067", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451832, "uuid": "de083b84-9fa6-487d-9577-34cf2982203a", "value": "T1EB635C42731C0947D1A35EB03A3F17E193BEE99121F4FA88291FAB868135E721586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451832, "uuid": "b3239317-ea61-462c-9d00-c0fbd2fc157d", "value": "1536:kogRlQhBXsxSjdu2Hs8O4yJ6E+7CWPT2rJ2r:o4hxHs8cC7vTxr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774451832, "uuid": "5d72cd7b-fc0d-4324-afbe-7dfd64e861c3", "value": 68720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451832, "uuid": "9cc3384c-8308-4c86-ad1a-154d4909a1d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfedf0c7-285e-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774452337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774452337, "uuid": "505b78cd-6af3-40e7-a780-88a70128e51b", "comment": "Malware payload (Mirai)", "value": "3bbca541d72ab265a1b0b723c012d723", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774452337, "uuid": "fc5a2d60-05df-4db1-bc4b-19c8f2441717", "comment": "Malware payload (Mirai)", "value": "701bc2f30cd34f76d51edcfd7aa3c86b31c27ec8cb6b20f6468ad21b7a3ca7cf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774452337, "uuid": "6ec305e6-f0e3-4cdc-8b6b-421ccdf11abb", "value": "T1EC93E85E2E319FACFBA8823147F74A21979833D626E1C684E25CE6011E7034D745FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774452337, "uuid": "ec61d0bd-9130-4447-afdb-cccad604aa93", "value": "1536:y4oDQnP6fRiNhIbb/3yg9lDqJ33AFNQEtCH6D1bNeGD7Jqj/:ydQnP6fA+b/ig9lDGAFNQEtCH+broj/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774452337, "uuid": "eb75dc13-faca-4fe1-abe4-df0cdc1e09b3", "value": 89748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774452337, "uuid": "4394f9f3-89f7-4e4e-b3af-2f566bd5b7fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79097f2d-285f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774452594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774452594, "uuid": "709341a5-74b9-4d0d-862a-8cb8d7cb23bb", "comment": "Malware payload (Mirai)", "value": "5df7027f0ee2d91fc80ca1fe69e8b39c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774452594, "uuid": "e86f5743-f8cd-453b-98e9-89182c35aa24", "comment": "Malware payload (Mirai)", "value": "c83de12d32901350c7091e7a19288cc348131828b9f9e604254d79bdc3449ca2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774452594, "uuid": "307552e8-5e69-4dc6-a1a7-e3dc66a579d9", "value": "T1E6733A96BC819613C6D112BBFB2E028C372613E8D2EB3207DD266F5177C692B0D7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774452594, "uuid": "9d8db3d9-a5b9-4d7b-85a7-8227a28b9161", "value": "1536:5qkx96WoWxtge3eEt+V6jjhTWOHfsJ3sg2i3qyv5JCM:5qkxL8etacHfsphpi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774452594, "uuid": "b7f67df1-e499-4d79-8977-87eb3bb76607", "value": 75080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774452594, "uuid": "271e4c99-618b-4a27-8f17-982d3b6d87db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fa6ad58-285f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774452659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774452659, "uuid": "4b076382-6658-4a17-afe4-c57e491189c4", "comment": "Malware payload (Mirai)", "value": "0d96a3c255642b6d9372e2a360497cf0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774452659, "uuid": "1c98ff44-d246-4694-a5a7-82c038f17ca6", "comment": "Malware payload (Mirai)", "value": "161c1568e5af4058961a37232de7229d4ce1c8d875440d66612e6b488f4ec694", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774452659, "uuid": "1da57ee5-c78d-4c67-99ab-22f1c39f50e4", "value": "T157634C96FC819612C6D522B7FA2E028C372653F8D2EB3207DD226F51378692F0D7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774452659, "uuid": "5f5592ef-dfd5-4718-b665-1ae1e4a80f1a", "value": "1536:kSmtn4ADsMtapxD2xDWua3TosnWhrrsnlqLh1rvnlGTMjJf:kSmtnbIJusTz/lqL/lGa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774452659, "uuid": "e439796f-0d1f-4e1d-9f05-ffd608e9b473", "value": 70984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774452659, "uuid": "47c281c1-ac19-4f3f-a4e8-fa598c242b5a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f3f5c57-2860-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774453087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774453087, "uuid": "03e177b8-a710-4717-b835-7b76780acbf1", "comment": "Malware payload (Mirai)", "value": "cbf38e1ad12235a865d19fb83a9461a6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774453087, "uuid": "8a039d18-7862-47ce-bb74-cd10bf35d2fd", "comment": "Malware payload (Mirai)", "value": "3e2d245a41e30da1717d5cdbd5c95c642563364d771e6c4f8dd5b4625dae915c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774453087, "uuid": "c2163d83-2b66-483c-bfc5-50e9fd5d7c72", "value": "T1B673185AB8818B11D5C512BAFE2E118D331357BCE3DE73129D20AF24778B92B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774453087, "uuid": "2516824a-d358-4fa5-8a3c-73d942aea679", "value": "1536:EgnT9Nq9LEgSKHHog2uhe50HVnUCRp320GETaX9ZL23/M3iGyu4f5xYRJ/:OdEv0Hog2uMKdRpG0GETaXTyu4fbA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774453087, "uuid": "0f804a76-e8ae-49d2-a4b0-8fd8dd98154a", "value": 79380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774453087, "uuid": "45955af2-fc76-40e3-8fdc-d243991f1714", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1b44d97-2861-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774453628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774453628, "uuid": "3a2ac268-169a-43b4-8473-50a6b571b7a5", "comment": "Malware payload", "value": "fd9b56f0e8945d3cb833890c631d5f82", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774453628, "uuid": "c6d8ed47-fd3b-4d58-9af8-5a8f52a00037", "comment": "Malware payload", "value": "c83da898a813b29c795fbf1660c4c94d6f29aeea2bc22449fcce16a81e17514a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774453628, "uuid": "831ac9b0-a4bc-4270-b678-c1af722f1b62", "value": "T146931A3174AF052A166F836E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774453628, "uuid": "187a38bf-620a-4dee-baed-6e38624caab4", "value": "1536:9Byp1tF/uwMmAIa14oXflI1epeV7tb73WdxCrCitkb5fv2v05xuNr4izxsCZK36x:98gIO0GitkbFv2v05xuNrLxsCZA6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774453628, "uuid": "7069b74c-ebbf-44be-865b-35e2f2c83f7d", "value": 94599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774453628, "uuid": "6dff5d58-e903-4996-b458-b1f80fed94c1", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "778fa712-2862-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774453880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774453880, "uuid": "b70d791a-5207-4e39-a914-8cbba110bed1", "comment": "Malware payload (Mirai)", "value": "85373af7ff4e9401202fc79aa8a03227", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774453880, "uuid": "eb6a63be-bc56-4e8b-bf37-afbb2dca5114", "comment": "Malware payload (Mirai)", "value": "41df3a9d5671c1e05e5be4a7b57321abbc1971de532c7c9f0dab0db987277864", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774453880, "uuid": "7b5ed3d9-2f9f-4f99-b79b-566b37ca156b", "value": "T10B535CC59583D8F6FC1609716137AB336777F07A102AEA86C7ED7A32EC41A01A6173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774453880, "uuid": "5d7abef2-9e07-4ab9-815c-6d43d7e61466", "value": "1536:WS/51TJIiFC/udSJ5ylzoAjrjCpn1JDszUEGKdk3s1tsWOaArW3zLZLSS6:WSh1TWiFCJjGfrjCLJDGUEGKdk3srsWk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774453880, "uuid": "5699cf9e-304a-4b6e-ba0d-f6423f237bb3", "value": 62604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774453880, "uuid": "f3a44fd7-9984-4478-82f6-152556d0987a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "982b2779-2862-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774453935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774453935, "uuid": "cdf4bec5-7355-416a-909b-0a2e7e8634c9", "comment": "Malware payload (Mirai)", "value": "a355dc232d32841d922fc1db20f2cd96", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774453935, "uuid": "03de63fe-d657-43d8-8a8d-3d32328b620e", "comment": "Malware payload (Mirai)", "value": "0d12ddcd75704be29c64b7a2c8e6a5388813c78cb834401e3c1ee76d974dbb06", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774453935, "uuid": "84acd7bc-72c4-4619-a715-e4e86028feb0", "value": "T11713E6741515F67CEEE10079E04331EA29630A1C3ADCE3D3A1834676EEB5B4C79A9E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774453935, "uuid": "c3379c91-4a9d-4c7e-b275-d4544fc2a0e5", "value": "768:NNaT6cWYKbRMY0eLYEkQHluVaMQMuMJAl:Nkhgv0eMEkQHlu84uMJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774453935, "uuid": "c31252ba-42f3-41ac-9d3a-c65e750b51a2", "value": 42648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774453935, "uuid": "dc524778-2f5e-4e9d-a24f-b98a5b30e5de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc8f3b34-2862-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774454022, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454022, "uuid": "cea9f4a7-6300-4450-9fe9-e006e4f81c6c", "comment": "Malware payload (Mirai)", "value": "ba01d7e2ee5dd88c112ad0c8ad9d67f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454022, "uuid": "9e9c3ee5-0968-434b-ad22-b57a48ec1423", "comment": "Malware payload (Mirai)", "value": "dcc2d4d2a7664ac3a213d32b66564e39543c22a20b090fa70c7271bda44001d7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774454022, "uuid": "e73a5047-340e-4253-a2ce-59143de8456f", "value": "T154539D77C86A6D84E18946B470608A382BA3D04491A72FFB5496C36A9003EFCF62D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774454022, "uuid": "8e5a831f-f488-4f72-867b-969e2d140d59", "value": "1536:dgQwtbIJULKfSRSCKNYk37FSsqC9AscJC:dNLimnlNxAsqMT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774454022, "uuid": "2cccadd4-63a6-497f-be1d-1e9a4be5b2e4", "value": 62788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774454022, "uuid": "0f762ec3-c5b8-4adc-b15b-77c170e84967", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774454418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454418, "uuid": "cae55bc8-d9f9-4794-afc4-50595b1a4f57", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454418, "uuid": "762e2f40-c95e-46d2-b10d-9f6125cca778", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774454418, "uuid": "3ef95714-ce0d-40e5-84a4-c89756e17575", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774454418, "uuid": "d01b7800-e177-470a-9658-040a0cf36349", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774454418, "uuid": "1a090c6e-2bb5-4ebc-92a5-fbe65524c5d9", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb9182ec-2863-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774454423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454423, "uuid": "9e19bf60-0426-4c94-a3bf-52b504ee42c6", "comment": "Malware payload (Mirai)", "value": "2e90b3c60aa1d09ce7bf607f54eb3674", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454423, "uuid": "5c64cb63-5114-4a22-9e9d-d68f949aa4a0", "comment": "Malware payload (Mirai)", "value": "8fe046726f2dc734ac3ab36563386e5d518ab4e86e9a0655132c292ef80c4734", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774454423, "uuid": "d497ef41-aa79-46f5-a5d5-345f5d8a39cf", "value": "T12893D506BF911FF7D8AFCC370AA91B0524CD551B21A53B397974D828B25B24F1AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774454423, "uuid": "90f6d25b-f687-45c7-b737-07f3c55d9a17", "value": "1536:7ZuWYzse9s72sfuktxQAUfC/PKPAB0B+0dnw6+0cJUp:cWYyNuiGY0B+ck6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774454423, "uuid": "91c61d2d-03e4-4f9c-ae0d-362553baf151", "value": 92932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774454423, "uuid": "80b5e56a-9acb-4b28-9cb6-9b00884029da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c3532b7-2865-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774455069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774455069, "uuid": "914f5ca1-452d-463f-865e-0666e94ffea0", "comment": "Malware payload", "value": "4450d50c2c658b839c66262032a438b1", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774455069, "uuid": "d486a754-8cf1-46ff-be2b-1ce4d13d67f5", "comment": "Malware payload", "value": "fd91a1561d27c7e6e88186ecbf8411f6a4b5603942d9cea666d16acedb8d136a", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774455069, "uuid": "3c93d640-3b05-497b-b34b-b0d54eec6c19", "value": "T191D56BA688B1BF13B7BA8E4873341E5D101426370FCB150AB4BEE7C67683975346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774455069, "uuid": "7154aa67-11a0-4851-b5f2-48bb08729efd", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTIhvFRBW84FMotY:m0eF4xaDjDONijDG8ZxFT6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774455069, "uuid": "9f1c36ba-702e-4681-83c6-d765ca794671", "value": 3000830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774455069, "uuid": "df30a16a-d8f7-4a9f-beef-761c8ee65c1f", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6e95fe4-2865-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774455328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774455328, "uuid": "c84aca1b-1743-46fd-a995-7e21d8c13dd7", "comment": "Malware payload (Mirai)", "value": "27840ec2b388218ff87324bb296ca4ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774455328, "uuid": "f18b667d-1faa-4b57-8118-acc85c453459", "comment": "Malware payload (Mirai)", "value": "37c34d93921350411a23f12b0db0e29bc6df3e6d3b3183dbb438878a4451186b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774455328, "uuid": "67d605e3-735f-4b1e-a69e-c84a6eb04cc9", "value": "T1BB733ADBF800DC7DF84BD67B8423090ABA3163511A930F2B6357F997BC722A55926E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774455328, "uuid": "4a02c004-4588-40fb-af9c-9908b2eb5438", "value": "1536:v/raggz01qJLKFawslM2MZ80M3JyR1ujCEtHCG8Pc7g1:v/eLiPslMpey1eC4J7g1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774455328, "uuid": "95eed1a2-e3e4-4202-8ccf-f831b9e89f75", "value": 75204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774455328, "uuid": "809e735e-868e-48ca-9e75-033b6d685eaf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88b9ddfe-286a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774457345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774457345, "uuid": "18bba954-dc08-490b-8967-216aa3e52daa", "comment": "Malware payload", "value": "a14c5f2058552a1d646b9de1b04083b6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774457345, "uuid": "54f44798-1110-463e-ae20-fe9037fbe99d", "comment": "Malware payload", "value": "ae33cea2ed4bded6958ddde4b39d2cc23e22ce8701aba027b9867d01455d51f6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774457345, "uuid": "173bbe89-6148-4a8d-8016-8b86d5e10863", "value": "T1BD5733BB5222695CE0978AF4B0C2DAB214637C1C08B1114B72EF13D52E72A5A2F7F5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774457345, "uuid": "cc05ac2b-8872-44dc-9da9-51271e30332b", "value": "88f70fb82598484a7ce88eef6418418b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774457345, "uuid": "ce2c6a89-77f2-4fb7-a1f1-07b98bf8a4f3", "value": "786432:miCaa7y3rc/OlBy9g4aLpOQlqjfLZSZgP:Xnrc/OlBhhLphlEfVSs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774457345, "uuid": "12408ff1-1d0f-4208-a58c-df96b084e7b8", "value": 28456912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774457345, "uuid": "a3ce7868-e8cc-416f-99aa-fb5562ffd6fb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d0d91cf-248c-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1774460346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774460346, "uuid": "d18f61fa-01e6-4ca2-871f-6c106b01a99b", "comment": "Malware payload (Vidar)", "value": "ace025a6785c7d97b58e0def07d4690e", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774460346, "uuid": "77a59fcf-6b1d-4845-ae47-db0bfdb7556f", "comment": "Malware payload (Vidar)", "value": "6c643706fb6ffa1622de6f9256be0e6676748e8b99dd1d3e31749695cfe79822", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774460346, "uuid": "13e40ba4-0c08-4e39-b817-6e05c90d0fd5", "value": "T12A2423DD6874A36DFECE02729641D292ED618C2B9FA5D0DEF098E6DD2F0382D31534", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774460346, "uuid": "ad43454a-17e7-4575-9009-c0540d8998c4", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774460346, "uuid": "24b9e77a-7623-45d2-bf79-bc4ef31c396c", "value": "6144:rhFSwJnW8+vITyT/myad6zVuWP1IDu9Zv9l5LrdI:ryKW8e9T1QWP1IwZFLLRI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774460346, "uuid": "4c7d64c8-6c77-4609-b05d-f9f185db4b18", "value": 223232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774460346, "uuid": "223e122a-c175-4657-8d32-31f7ef2cb42b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2277e218-2873-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774461038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774461038, "uuid": "fca9a551-8162-475d-accc-e269e08eae36", "comment": "Malware payload", "value": "9659fcb15405827eaf5e4768867edf4b", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774461038, "uuid": "55618e6f-e05f-4c50-9b86-73d25625626f", "comment": "Malware payload", "value": "59458b65958287b05cea0e794a20ea291f76ed09c8f6a98e4d60cede9698c4fc", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774461038, "uuid": "ebe39c4e-6a74-475f-b11a-65f6acc2e6f2", "value": "T16496339542E109E7F8E7E23E4A965192D2B3B4105B22C99F1B6083BE3F572F24D36F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774461038, "uuid": "ac56ce00-aeb3-40b8-be1e-7dd421011c0f", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774461038, "uuid": "f4567a7d-1cb5-4575-b5f8-e7790c351094", "value": "196608:trZ/EKtbW897G+x7eovq5XMP6PzFcx97WZHsoqEbRjMFb:f/EK1Fdq1B7wgZHsoqEbpib", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774461038, "uuid": "b7144ffe-2569-40cc-aa8d-73464bc1969c", "value": 9386663, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774461038, "uuid": "42ff240d-186e-4d8e-9d46-0a945624423b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1a5d890-0f93-11f1-8369-82aee05be84a", "comment": "Malware payload (OffLoader)", "timestamp": 1774471272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774471272, "uuid": "e6518d7b-6e90-4433-aa02-f80caa400d7e", "comment": "Malware payload (OffLoader)", "value": "b2ab955b92a5771e2b929ffe626c08ce", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774471272, "uuid": "63be51eb-1ea5-42f4-b53b-3d12597212c4", "comment": "Malware payload (OffLoader)", "value": "3373984400c35f758cf9ea86eba0bd87c93ae367b730b43e6df5dc5c8132b79a", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774471272, "uuid": "97b55190-25cf-4f33-97f3-5ab71372cad6", "value": "T1C1E63327A28A673EF06E5B3759B2D2105C3B2E61695A4C1B9AF43C4CDF390A01D3F2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774471272, "uuid": "52fb45cc-87ea-4e2e-92a4-086b7c92b24a", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774471272, "uuid": "4a80f524-bd6b-4b6b-9218-f20e58726899", "value": "393216:gTc8l3lUjXKhnSCJydK2PbVxVVj/WeM+gyVNHANv1M:6cSl0+S1FhxVdrMN4RN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774471272, "uuid": "cf8faa62-798f-48a8-80d0-1712ee6c7f38", "value": 15253040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774471272, "uuid": "cab08238-3a04-4dfc-9568-a18723db6791", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16d3950a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774475299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774475299, "uuid": "13675c62-294e-4866-a911-10e6f4204ab1", "comment": "Malware payload", "value": "4e9b89a618e755926424054b4d1a6953", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774475299, "uuid": "9beeb4c4-d27b-4322-b688-f341833cd925", "comment": "Malware payload", "value": "eaa08f7cedc2ed4a97fdff1e549b54726ae32832f1bcf0294b767f983213a157", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774475299, "uuid": "ba61a77c-43a7-413c-8d42-a1b9fcbf3589", "value": "9433018623A62EB2D1319DF5A7FCFF89A04A7D949FE91C0A7C213659B47235C28C4C1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774475299, "uuid": "4cb25204-d68f-4907-8e2e-e752e6f4568d", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsX:yYI0ARqw1qAEv7UIFM8oJorFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774475299, "uuid": "32417a67-3b31-4476-9400-2d24e9225dc1", "value": 50680, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774396810, "uuid": "972d53a9-27dd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev3field.platyhelminth.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774397108, "uuid": "48c1f22d-27de-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev4space.platyhelminth.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774397226, "uuid": "8f6cca63-27de-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.239.111:38935/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774397408, "uuid": "fbe849ef-27de-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1proc.nematodastream.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774397416, "uuid": "00689098-27df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.165.148:33992/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774397825, "uuid": "f455cdb1-27df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.242.68:55978/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774397828, "uuid": "f5d1ce76-27df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2steel.nematodastream.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774398068, "uuid": "8513a72e-27e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.13:53307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774398134, "uuid": "ac5be43d-27e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.248.121.149:58539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774398188, "uuid": "cca89ef4-27e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3core.nematodastream.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774398426, "uuid": "5ac4cbca-27e1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4sat.nematodastream.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774398488, "uuid": "7f45b5a2-27e1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.42.193:32770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774398788, "uuid": "321a8fd6-27e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1infra.chordatamatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774399025, "uuid": "bfb10ca2-27e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.41.102:51238/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774399086, "uuid": "e420a278-27e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2proxy.chordatamatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774399692, "uuid": "4d19301f-27e4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.88.154:59902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774399752, "uuid": "7101df2b-27e4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.42.193:32770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774399808, "uuid": "925b4184-27e4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3data.chordatamatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774399927, "uuid": "d8fd82dc-27e4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.89.224:59016/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774400411, "uuid": "f9ccf435-27e5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4point.chordatamatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774400715, "uuid": "af1fc144-27e6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.41:35733/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774400767, "uuid": "ce12cdf8-27e6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1sync.petrographyflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774401128, "uuid": "a543a1a1-27e7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2data.petrographyflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774401136, "uuid": "a9970e65-27e7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.38.246:59819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774401426, "uuid": "56a445e1-27e8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.199.22:40197/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774401489, "uuid": "7c62a3d0-27e8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3edge.petrographyflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774401911, "uuid": "77f0b960-27e9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4static.petrographyflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774402267, "uuid": "4be38fbf-27ea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1meta.lithosphereduct.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774402326, "uuid": "6efc09fa-27ea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.94:42185/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774402326, "uuid": "6f2937e2-27ea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.247.164:39645/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774402628, "uuid": "231cb0c9-27eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.148.85.228:56473/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774402687, "uuid": "4666bc76-27eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2proc.lithosphereduct.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774402751, "uuid": "6c7ac1eb-27eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.41:35733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774403048, "uuid": "1d56c516-27ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3gate.lithosphereduct.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774403228, "uuid": "88d2e02c-27ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.122.228:54708/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774403228, "uuid": "88d91504-27ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.122.228:54708/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774403468, "uuid": "180b8d03-27ed-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4sync.lithosphereduct.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774403654, "uuid": "869071d1-27ed-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.30:45324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774403721, "uuid": "ae7d9579-27ed-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.156.117:35125/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774403889, "uuid": "12e4f0e0-27ee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl1store.sedimentmetrics.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774404126, "uuid": "a03cf429-27ee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.247.164:39645/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774404188, "uuid": "c4cfbcdc-27ee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.159.87:46256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774404310, "uuid": "0db5a7ab-27ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl2remote.sedimentmetrics.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774404426, "uuid": "52ed87cf-27ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.148.85.228:56473/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774404437, "uuid": "5946a668-27ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.159.87:46256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774404668, "uuid": "e2f946bc-27ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl3dev.sedimentmetrics.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774405029, "uuid": "ba6f6fee-27f0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl4link.sedimentmetrics.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774405219, "uuid": "2b9d6dfe-27f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.244.143:39987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774405510, "uuid": "d90b5282-27f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev1proc.tectonicstream.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774405693, "uuid": "45d09cb8-27f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.122.34:55000/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774405868, "uuid": "ae914857-27f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev2power.tectonicstream.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774405875, "uuid": "b2955c77-27f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.244.143:39987/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774406112, "uuid": "3fb0f99d-27f3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.54.187:33821/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774406528, "uuid": "37f9fc6a-27f4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev3local.tectonicstream.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774406650, "uuid": "8033d945-27f4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev4work.tectonicstream.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774406715, "uuid": "a7501592-27f4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.140.250:48066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774406834, "uuid": "ee49a20b-27f4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.94.120:55132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407069, "uuid": "7a4917c2-27f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1infra.magmaticbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407731, "uuid": "04d637fc-27f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2base.magmaticbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407788, "uuid": "269e23cf-27f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.100.151:46774/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774407909, "uuid": "6edcbd27-27f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3user.magmaticbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774408032, "uuid": "b8120f01-27f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.76.137:50959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774408155, "uuid": "0195a90e-27f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.98.77:52781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774408268, "uuid": "44bab3ba-27f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4link.magmaticbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774408510, "uuid": "d5226892-27f8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.94.120:55132/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774408688, "uuid": "3f063407-27f9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1proc.feldspargateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409051, "uuid": "17aa3174-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2core.feldspargateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409057, "uuid": "1b52fc6d-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.3.64:58849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409058, "uuid": "1b657f24-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.252.40:51800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409176, "uuid": "61e9a66c-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.76.137:50959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409236, "uuid": "860831a3-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.102.107/n2/tbk", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409236, "uuid": "860b33c8-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.102.107/n2/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409236, "uuid": "86136943-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.102.107/n2/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409236, "uuid": "86147fc4-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.102.107/n2/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409237, "uuid": "86165dd1-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.102.107/n2/armv5l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409294, "uuid": "a865cc34-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.94/curl.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409358, "uuid": "ce9fbdd1-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.143.41:56872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409412, "uuid": "ee9fe7dc-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3ghost.feldspargateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409714, "uuid": "a2e91203-27fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.112.150:44248/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409768, "uuid": "c30e4bb0-27fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.112.150:44248/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774409830, "uuid": "e7dede71-27fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4view.feldspargateway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410188, "uuid": "bd462f27-27fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl1proc.obsidianmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410201, "uuid": "c516fc79-27fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.100.151:46774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410311, "uuid": "0652de8d-27fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.94/wget.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410428, "uuid": "4c65270c-27fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.59.8:50449/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410609, "uuid": "b82dcf21-27fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl2point.obsidianmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410665, "uuid": "d99d51be-27fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.252.40:51800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410666, "uuid": "da2c0781-27fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.113.232:37596/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410727, "uuid": "fe7ddde6-27fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.94/tftp.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410727, "uuid": "feb86a81-27fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.94/tplink.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410789, "uuid": "2367e57a-27fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.111.130.32:55074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410846, "uuid": "459b1266-27fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.94/ftpget.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410846, "uuid": "459b5309-27fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.94/dvr.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410848, "uuid": "46af3725-27fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.249.207:48315/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410914, "uuid": "6df75697-27fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.3.1:48115/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774410975, "uuid": "9209a651-27fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.11.158.74:52919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774411028, "uuid": "b19de846-27fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl3view.obsidianmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774411147, "uuid": "f8bd9fdf-27fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.143.41:56872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774411328, "uuid": "64b8a75d-27ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.72.183.249:52751/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774411448, "uuid": "ac028a38-27ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl4path.obsidianmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774411629, "uuid": "17ea8499-2800-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.249.95:53022/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774411809, "uuid": "8394fa03-2800-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev1proc.pyroxenetrace.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774411926, "uuid": "c91b526c-2800-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.28.176.153:41839/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774411930, "uuid": "cb55d542-2800-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.59.8:50449/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774412227, "uuid": "7c958d7e-2801-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.28.176.153:41839/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774412228, "uuid": "7cde6855-2801-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev2outer.pyroxenetrace.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774412474, "uuid": "0fa349f0-2802-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.73.23:59664/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774412713, "uuid": "9e3f60ff-2802-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.113.232:37596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774412713, "uuid": "9e422496-2802-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.249.207:48315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413191, "uuid": "bb4da344-2803-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev4space.pyroxenetrace.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413430, "uuid": "499a8e84-2804-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1proc.rhyolitenodehub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "fef38f54-2804-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.122/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "fef54be5-2804-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.122/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "fefdb316-2804-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.122/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "ff06014c-2804-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.122/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "ff0a9284-2804-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.122/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "ff0cfa5d-2804-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.122/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "ff0d073e-2804-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.122/debug.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413734, "uuid": "ff0dfdc1-2804-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.122/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413735, "uuid": "ff1b014a-2804-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.122/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413788, "uuid": "1ecd0a10-2805-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2steel.rhyolitenodehub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413795, "uuid": "231cefae-2805-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.122/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413795, "uuid": "231d022c-2805-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.122/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413795, "uuid": "23244952-2805-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.122/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413795, "uuid": "2329a4f3-2805-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.122/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774413916, "uuid": "6b22065d-2805-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.57.31:48088/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774414027, "uuid": "ad96477e-2805-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.73.23:59664/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774414211, "uuid": "1b2e6239-2806-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3core.rhyolitenodehub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774414570, "uuid": "f1494d13-2806-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4sat.rhyolitenodehub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774414590, "uuid": "fd179cd7-2806-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.11.105:53571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774415228, "uuid": "791d8923-2808-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext1infra.stratagraphic.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774415288, "uuid": "9d06d968-2808-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.102.25.50:35778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774415351, "uuid": "c2d7056b-2808-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.57.31:48088/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774415352, "uuid": "c36cdde0-2808-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.226.221:52208/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774415530, "uuid": "2d077f99-2809-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.192.97:54462/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774415709, "uuid": "97c64181-2809-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext2proxy.stratagraphic.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774415948, "uuid": "265f27cc-280a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext3data.stratagraphic.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774415951, "uuid": "28688f17-280a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.226.221:52208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774416203, "uuid": "be9df721-280a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.164.58:43401/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774416311, "uuid": "fef8c469-280a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext4point.stratagraphic.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774416368, "uuid": "20a4a5de-280b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.102.25.50:35778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774416491, "uuid": "6a2fe951-280b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.10.109:54668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774416673, "uuid": "d66a8f00-280b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.32:57413/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774416731, "uuid": "f9220f30-280b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mermeshor.velvet-dune.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774416919, "uuid": "6919dbd3-280c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.3.1:48115/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774417149, "uuid": "f2331f6f-280c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ficjog.velvet-dune.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774417215, "uuid": "196cb1b9-280d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.78.220:36113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774417454, "uuid": "a7fc1f34-280d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.102.125:39653/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774417508, "uuid": "c87ec7a1-280d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://c1ea7-hinge.tr4cefox.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774417812, "uuid": "7d7e49e5-280e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.32:57413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774417826, "uuid": "85cd9cad-280e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.146.54:59878/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774417867, "uuid": "9e502720-280e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ph0to3-stack.tr4cefox.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774417935, "uuid": "c711128a-280e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.10.109:54668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774418169, "uuid": "527464ef-280f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.80.62:36706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774418289, "uuid": "99c555f8-280f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ooj9q4.mirthbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774418357, "uuid": "c252e786-280f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.237.44.4:56557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774418712, "uuid": "95e64724-2810-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-cany0n.mirthbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774418828, "uuid": "db1827c1-2810-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:57516/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774419070, "uuid": "6b7f1e95-2811-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.102.125:39653/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774419128, "uuid": "8ddd27e2-2811-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5pectra-plate.cobalt-ridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774419368, "uuid": "1d29a1ca-2812-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.236.74.65:35180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774419435, "uuid": "4518a8a8-2812-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.62.111:50655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774419489, "uuid": "64c0fd4b-2812-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.158.252:47382/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774419489, "uuid": "65494a83-2812-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://brandpackage.cobalt-ridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774419786, "uuid": "1629a6d9-2813-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.62.111:50655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774419849, "uuid": "3baf342d-2813-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://qclju.larkspin.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774419972, "uuid": "84fa826d-2813-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.237.44.4:56557/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774420269, "uuid": "35eba1bd-2814-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://neuralclip.larkspin.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774420327, "uuid": "58576101-2814-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.252.191:45873/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774420626, "uuid": "0a76a260-2815-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.252.191:45873/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774420694, "uuid": "3307b3d6-2815-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://the0-drive.brimvale.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774420700, "uuid": "36946f7e-2815-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.160.164:34954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774420876, "uuid": "a000cfc1-2815-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.211.197:53188/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774420929, "uuid": "bf30aefc-2815-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://oxfordmobilexray.com/oxfordmobilexray.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774421112, "uuid": "2c71b341-2816-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sermark0um.brimvale.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774421411, "uuid": "dee3c613-2816-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.211.197:53188/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774421528, "uuid": "24624b1f-2817-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://f1er6-lab.n1mbleoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774421596, "uuid": "4ce398f9-2817-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.31.193:59224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774421947, "uuid": "1e509255-2818-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-vv1ld.n1mbleoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774422196, "uuid": "b29c15c0-2818-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.160.164:34954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774422428, "uuid": "3ca14e74-2819-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://50qfdh.hollow-spark.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774422496, "uuid": "654128b6-2819-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.197:33597/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774422677, "uuid": "d12c10c3-2819-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.236.74.65:35180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774422910, "uuid": "5bda602f-281a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://7lluqhl.hollow-spark.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774423149, "uuid": "eab9bf85-281a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://f4ith-chain.duskforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774423157, "uuid": "ef96e0b4-281a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.31.193:59224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774423509, "uuid": "c15f24d0-281b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pxmghr.duskforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774423631, "uuid": "09ca7f28-281c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.209.234:56514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774423808, "uuid": "733ca933-281c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mer-nexal.rivermint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774424230, "uuid": "6efa9de3-281d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rende6-trace.rivermint.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774424371, "uuid": "c317be66-281d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.179.108:35044/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774424710, "uuid": "8cb9feed-281e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://extractwho.flare-path.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774424828, "uuid": "d3872f46-281e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.221.79:50777/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774425012, "uuid": "411bf68b-281f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.197:33597/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774425013, "uuid": "41c818f7-281f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.251.115.61:49582/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774425068, "uuid": "6278ec77-281f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://e3t525.flare-path.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774425487, "uuid": "5c5e0d39-2820-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rout3-glow.skyl0om.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774425910, "uuid": "5883eb7c-2821-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://2ubum.skyl0om.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774426268, "uuid": "2dba5e5a-2822-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quantbin.graincrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774426451, "uuid": "9af0ea7f-2822-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.118.171:33119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774426508, "uuid": "bc875a6d-2822-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.49/NTECKPSRUuMsaoKQNPby67.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774426626, "uuid": "02cc76b2-2823-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.221.79:50777/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774426626, "uuid": "03136550-2823-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.255.10.22:35737/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774426629, "uuid": "04af6eaf-2823-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.251.115.61:49582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774426688, "uuid": "27f89e0a-2823-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://shape-mesh.graincrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774426819, "uuid": "764e925a-2823-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.241.63:33672/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427051, "uuid": "00430618-2824-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gu8xe.frost-echo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427051, "uuid": "007d0f78-2824-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.204.7:49884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427114, "uuid": "262d6664-2824-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.183.97:36055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427287, "uuid": "8d2d848c-2824-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zonawood.org/download/fetch/list5/22095/view/c8da6b51-77e2-49c7-8c5d-138e14902851", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427287, "uuid": "8d374c10-2824-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zonawood.org/download/fetch/list6/27126/view/f03a548c-96e2-478d-95c0-d3c47ce605b2", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427347, "uuid": "b0e9ceab-2824-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zonawood.org/download/fetch/list9/13621/view/630bc2a7-8ca6-40be-b927-086185fb490a", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427347, "uuid": "b1009be3-2824-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zonawood.org/download/fetch/list7/22587/view/425f5ffd-be0e-485d-9be4-f4aaae07dfef", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427348, "uuid": "b1488411-2824-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zonawood.org/download/fetch/list8/25319/view/b923fa53-d44a-4f36-be14-b6f8e7d145f6", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427648, "uuid": "6432691a-2825-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://chinasite.com.br/MSI_180922.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427648, "uuid": "64659c0b-2825-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.5.43:39334/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427708, "uuid": "88154d63-2825-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hasteb.in/4Fg4NqK5AqJFG1V", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427713, "uuid": "8aed27bd-2825-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://1502u.frost-echo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427713, "uuid": "8afa3a69-2825-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.pastebin.cz/raw/r5A1oiy", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427825, "uuid": "cdf91130-2825-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.255.10.22:35737/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427828, "uuid": "cf390881-2825-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.73.85:60585/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427897, "uuid": "f8d4843a-2825-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.118.171:33119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774427949, "uuid": "174deaf4-2826-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://talven8ex.q7ravo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774428145, "uuid": "8c28695d-2826-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.179.108:35044/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774428314, "uuid": "f1641be1-2826-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://f1xegu.q7ravo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774428318, "uuid": "f3c49622-2826-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.140:57635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774428429, "uuid": "35734d5a-2827-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.5.43:39334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774428565, "uuid": "868840b7-2827-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.58.86:60014/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774428668, "uuid": "c4335ad0-2827-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorcoreix1.thistlecore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774428797, "uuid": "1146f8e7-2828-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.204.7:49884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774428797, "uuid": "115509ec-2828-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.183.97:36055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774429030, "uuid": "9c1c0af0-2828-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://6slp.thistlecore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774429157, "uuid": "e7be6787-2828-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.35.139:32999/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774429392, "uuid": "736f8945-2829-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://offvisual.stone-blink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774429701, "uuid": "2bf032b7-282a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.140:57635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774429812, "uuid": "6dcaa77e-282a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://oqtxen.stone-blink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774430133, "uuid": "2d9efe3f-282b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.241.63:33672/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774430228, "uuid": "65e8ce0d-282b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ashtes.cl0verrun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774430591, "uuid": "3e24d5da-282c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://29rtrlv.cl0verrun.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774430846, "uuid": "d6490fc8-282c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.93.187:38474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774430846, "uuid": "d67c1672-282c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.222.212:55138/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774431010, "uuid": "385d1fef-282d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://qiauhat.dawnspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774431430, "uuid": "327449d1-282e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://lidx4.dawnspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774431849, "uuid": "2c306e7e-282f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://survebroa.dawnspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774431920, "uuid": "56779555-282f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.110:48924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774432026, "uuid": "95d43407-282f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.86.167:50394/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774432269, "uuid": "269cd433-2830-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorvenen2.dawnspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774432327, "uuid": "4910683b-2830-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.25.196:46066/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774432582, "uuid": "e0df467d-2830-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.222.212:55138/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774432629, "uuid": "fcfd0eae-2830-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://m0nit7-layer.dawnspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774432881, "uuid": "9378acca-2831-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.142.65:47976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774432989, "uuid": "d3800985-2831-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nabfk.amber-drift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774433307, "uuid": "910d6153-2832-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.82.238:42914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774433350, "uuid": "aaa3fda9-2832-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quot-isle.amber-drift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774433353, "uuid": "ac827a12-2832-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.82.238:42914/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774433417, "uuid": "d2cb77ed-2832-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.114.210:52677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774433527, "uuid": "142362e3-2833-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.25.196:46066/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774433772, "uuid": "a620cfd5-2833-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wwklydao.amber-drift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774434193, "uuid": "a11f2532-2834-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://d3ep-cast.amber-drift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774434371, "uuid": "0b2c74ce-2835-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.137.249.159/1.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774434428, "uuid": "2d3a3e76-2835-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.135.232:58649/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774434439, "uuid": "33c19a59-2835-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.54.31:48074/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774434549, "uuid": "75bd9a8b-2835-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://3urg2biz.amber-drift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774434858, "uuid": "2d9c6b3a-2836-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.110:48924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774434970, "uuid": "702691ec-2836-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://designtrigger.gl1mmeroak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774435388, "uuid": "69a3b6ef-2837-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://glyph-panel.gl1mmeroak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774435748, "uuid": "40430d08-2838-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://qfvn0y.gl1mmeroak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774435927, "uuid": "aa92ddff-2838-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/1781548144/amako6X.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774435927, "uuid": "aa940e9d-2838-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.135.232:58649/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774436058, "uuid": "f92655c6-2838-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.54.31:48074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774436166, "uuid": "3932ecde-2839-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/6608710704/ltjL6cP.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774436168, "uuid": "3a5bd77c-2839-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorfluxet.gl1mmeroak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774436226, "uuid": "5d073914-2839-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.92.149:38047/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774436286, "uuid": "80fd4972-2839-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.92.149:38047/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774436527, "uuid": "10562d47-283a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.238.86:57257/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774436589, "uuid": "358c9ba2-283a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkfluxos9.gl1mmeroak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774436766, "uuid": "9ee6ac0c-283a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/1032264266/OG0pxz6.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774437012, "uuid": "319010f5-283b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-5un.crestfall.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774437021, "uuid": "3707da8d-283b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.177.204:58253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774437067, "uuid": "5217bc92-283b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vtto2izc.starapi.digital/?=check&&actmn=NafgLGhLykCEpWrf", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774437124, "uuid": "748b8991-283b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.129.126:33129/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774437428, "uuid": "296c5106-283c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://transdea.crestfall.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774437801, "uuid": "07e7d21f-283d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.24.142.65:47976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774437850, "uuid": "24dc858a-283d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solarpri.crestfall.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774437985, "uuid": "75cf659b-283d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.255.166:49310/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774438210, "uuid": "fb8ecd72-283d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://patte-span.crestfall.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774438274, "uuid": "21dd54bf-283e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.215.50:37995/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774438276, "uuid": "22acda73-283e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.94.253:47655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774438568, "uuid": "d120b6ea-283e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://payloadcinema.crestfall.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774438626, "uuid": "f3892cb1-283e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.165.187.102:56551/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774438626, "uuid": "f3a04a25-283e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.159.91.2:56534/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774438630, "uuid": "f62821d8-283e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.113.235:51350/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774438926, "uuid": "a695c8da-283f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.238.86:57257/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774438927, "uuid": "a6cbc7bf-283f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.50.155.57:55911/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774438927, "uuid": "a6f35ef9-283f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.159.91.2:56534/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774438988, "uuid": "cb77ec8d-283f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://timbe-well.velorune.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774438997, "uuid": "d08ec7cd-283f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.255.166:49310/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774439478, "uuid": "ef8cf949-2840-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.177.204:58253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774439528, "uuid": "0d50c649-2841-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://velmarka.velorune.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774439586, "uuid": "2fb43dcf-2841-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/7776573655/jabCn4r.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774440076, "uuid": "53ff4f01-2842-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.28.45:54815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774440138, "uuid": "78eebbfa-2842-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.215.50:37995/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774440428, "uuid": "25efe80e-2843-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.87.155:39642/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441097, "uuid": "b448966c-2844-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.84.107:43646/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441157, "uuid": "d852e6bd-2844-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.108:37733/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441271, "uuid": "1c19140f-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.89.137:44175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441271, "uuid": "1c193125-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.238:47397/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441328, "uuid": "3e1f9ba8-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.198.108:35918/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441388, "uuid": "61d3e392-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.96.210:35684/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441388, "uuid": "61d929b7-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.93.220:53783/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441388, "uuid": "61d94167-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.89.137:44175/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441389, "uuid": "624717e1-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.33.173:41720/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441389, "uuid": "6253178f-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.11.158.74:52919/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441389, "uuid": "627d6888-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.23.178:38807/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441447, "uuid": "85147efd-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.73.85:60585/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441447, "uuid": "8521ba7c-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.93.220:53783/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441447, "uuid": "852af1b9-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.23.178:38807/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441448, "uuid": "857339f6-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.185.91:49936/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441448, "uuid": "85d03a4a-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.225.181:38187/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441458, "uuid": "8bdac364-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.84.107:43646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441511, "uuid": "ab46e759-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:53286/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441511, "uuid": "ab5e3863-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.76.225.148:37151/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441512, "uuid": "abca43bf-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.0.113:33212/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441512, "uuid": "abd2b8bf-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.18.125:53759/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441512, "uuid": "abe45ba7-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.53.138:46804/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441512, "uuid": "abf730fc-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.150.236:46918/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441519, "uuid": "afb2152f-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.56.113.164:36235/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441521, "uuid": "b0fd39c4-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.56.113.164:36235/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441567, "uuid": "ccb7d3a0-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.37:43891/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441567, "uuid": "ccda4c0f-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.0.113:33212/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441568, "uuid": "cd35f0ed-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.142.141:53069/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441569, "uuid": "cda17a3b-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.82.134.9:38840/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441637, "uuid": "f6677b68-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.28.45:54815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441637, "uuid": "f6691c5e-2845-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.78.220:36113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774441871, "uuid": "820956d2-2846-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.234.121:38987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774442714, "uuid": "77f32cbc-2848-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.238:47397/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774442774, "uuid": "9bd23cb0-2848-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.108:37733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443426, "uuid": "20a6433f-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.164:40976/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443669, "uuid": "b16ba8a6-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ser-tideos.n1ghtridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443670, "uuid": "b24f7f6e-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.93.187:38474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443731, "uuid": "d6b00908-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.30.181/systemcl/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443732, "uuid": "d6b4d7cd-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.30.181/systemcl/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443732, "uuid": "d6b4dc58-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.30.181/systemcl/x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443732, "uuid": "d6b4dcb4-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.30.181/systemcl/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443732, "uuid": "d6d3d332-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.30.181/systemcl/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443732, "uuid": "d6d549c0-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.30.181/systemcl/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443732, "uuid": "d6d59568-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.30.181/systemcl/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443732, "uuid": "d6d677ee-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.30.181/systemcl/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443732, "uuid": "d6db0a13-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.30.181/systemcl/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443732, "uuid": "d6ddfaad-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.30.181/systemcl/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443732, "uuid": "d6ddff85-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.30.181/systemcl/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443732, "uuid": "d6de5fa8-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.30.181/systemcl/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443732, "uuid": "d6de7885-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.30.181/systemcl/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443739, "uuid": "dafdcace-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.30.181/systemcl/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443788, "uuid": "f84d1922-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://edzgpr.n1ghtridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443791, "uuid": "f9efe32c-284a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.234.121:38987/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774443977, "uuid": "690f9a05-284b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.23.45:60301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774444448, "uuid": "81a099fc-284c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sprofrost.n1ghtridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774444628, "uuid": "ed25550b-284c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tritidear7.n1ghtridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774444928, "uuid": "9ff4a528-284d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.0.172.171:49412/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774444928, "uuid": "a01438c7-284d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://029g1.stonemuse.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774445227, "uuid": "51e3f433-284e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.0.172.171:49412/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774445227, "uuid": "51ebad09-284e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.168.185:49739/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774445227, "uuid": "525bad57-284e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.39.122.214:46553/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774445408, "uuid": "bde4b938-284e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://reagengate.stonemuse.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774445892, "uuid": "de873eec-284f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.23.107:52660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774445902, "uuid": "e44a34a5-284f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.78:53409/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774446009, "uuid": "241684f0-2850-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenlithum5.stonemuse.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774446191, "uuid": "909c90d8-2850-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://0xr5c.stonemuse.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774446320, "uuid": "dd7fcd56-2850-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.101.228:35668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774446320, "uuid": "dd94541f-2850-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.43.5.24:40236/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774446613, "uuid": "8c347f02-2851-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://6l3ri.stonemuse.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774446614, "uuid": "8ca61ce7-2851-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.46.98.121:59080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774446968, "uuid": "5f882f59-2852-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ink-mar.aurorift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774447330, "uuid": "374b6f2c-2853-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.157.251:50736/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774447388, "uuid": "5a577c6a-2853-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-1ivel.aurorift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774447451, "uuid": "7fbc310b-2853-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.23.107:52660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774447688, "uuid": "0cddfa87-2854-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://moduleneedle.aurorift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774447937, "uuid": "a18e4b21-2854-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.95.78:53409/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448109, "uuid": "07f5840e-2855-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://traglyph.aurorift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448231, "uuid": "50e6bf5e-2855-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.157.251:50736/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448238, "uuid": "54e8d660-2855-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.80.62:36706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448527, "uuid": "010f4dab-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ark-lineor.aurorift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448534, "uuid": "053c5709-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.46.98.121:59080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448764, "uuid": "8e6e366a-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/rf0TaL9.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448764, "uuid": "8e758349-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/xDLGfu.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448765, "uuid": "8ea2201b-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/Wx2V7HtN.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448765, "uuid": "8ea40144-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/DNop67.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448765, "uuid": "8eac286c-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/50FnXug.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448765, "uuid": "8ee50529-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.73/L5ZhKCR.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448768, "uuid": "90bfd46e-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.183.136:34697/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "914576a0-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/3892/3ato.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "9160fd35-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/3892/3ato.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "916651e6-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/3892/3ato.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "91747b48-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/3892/3ato.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "917af909-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/3892/3ato.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "9184a938-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/hiddenbin/Space.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "91870bf0-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "91871615-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/hiddenbin/Space.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "918ce9d7-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/hiddenbin/Space.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "918df971-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/hiddenbin/Space.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448769, "uuid": "918e28cc-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/hiddenbin/Space.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "91abefc5-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/hiddenbin/Space.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "91aec01f-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/hiddenbin/Space.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "91b87b9e-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/hiddenbin/Space.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "91baf7cd-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/hiddenbin/Space.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "91c2d5f8-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/hiddenbin/Space.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "91c725f1-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/3892/3ato.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "91c8dfb3-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/hiddenbin/Space.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "91d6d985-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/3892/3ato.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "91d7e3e0-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/3892/3ato.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "91d83982-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/3892/3ato.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "91e31c0e-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/3892/3ato.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "91f48ebf-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sdhscndnssl.beer/api/7z.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "92161d47-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/hiddenbin/Space.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "921707f1-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/hiddenbin/Space.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448770, "uuid": "922cb4c8-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solar-sanat.net/imagetxt0074751.png", "Tag": [ { "name": "VenomRAT", "colour": "#31D98A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448771, "uuid": "926a1181-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/hiddenbin/Space.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448771, "uuid": "9288c71b-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.245.189.236/hiddenbin/Space.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448771, "uuid": "928cb037-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/3892/3ato.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448771, "uuid": "92b2b9e7-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.94/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448772, "uuid": "930f973c-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.226.176.33:40473/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448776, "uuid": "95955ef0-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://tuxbins.duckdns.org/bins/tux.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448778, "uuid": "96817623-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://tuxbins.duckdns.org/bins/tux.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448778, "uuid": "968177b5-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://tuxbins.duckdns.org/bins/tux.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448780, "uuid": "979cca1f-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://tuxbins.duckdns.org/bins/tux.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448782, "uuid": "98fad49a-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://tuxbins.duckdns.org/bins/tux.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448783, "uuid": "99afa1f1-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://tuxbins.duckdns.org/bins/tux.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448783, "uuid": "99dcc229-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://tuxbins.duckdns.org/bins/tux.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448783, "uuid": "99dcc298-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://tuxbins.duckdns.org/bins/tux.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448786, "uuid": "9b874614-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://tuxbins.duckdns.org/bins/tux.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448788, "uuid": "9c8336bd-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://tuxbins.duckdns.org/bins/tux.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448788, "uuid": "9c8b41d7-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://tuxbins.duckdns.org/bins/tux.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448794, "uuid": "a029d1b6-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://tuxbins.duckdns.org/bins/tux.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448826, "uuid": "b3357b6e-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.79.23/zato.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774448948, "uuid": "fc321e18-2856-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://jfkwjd.cinderpeak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774449311, "uuid": "d429b356-2857-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://thic-bridge.cinderpeak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774449730, "uuid": "cdd5d801-2858-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sales-oas.cinderpeak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450088, "uuid": "a35d8691-2859-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5fzltr.cinderpeak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450325, "uuid": "30c0d13c-285a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.183.136:34697/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450325, "uuid": "30dd03f8-285a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.44.159.218/470/wegivebestthingsforme.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450326, "uuid": "316f5b87-285a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.226.176.33:40473/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450399, "uuid": "5cf3b4e5-285a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sgv.app.br/downloads/madeinchina.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450400, "uuid": "5d43b95a-285a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sgv.app.br/downloads/optimized_MSI.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450510, "uuid": "9efce2a8-285a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://globalgri.cinderpeak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450570, "uuid": "c2b4eaaf-285a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-6d532b12105b49bd96b29361979b87a1.r2.dev/tIcUpcByNeyfYctCqpeWBhnfxWDUta/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450866, "uuid": "732518d1-285b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tiger.kesug.com/img_053646.png", "Tag": [ { "name": "Xpertrat", "colour": "#d658f2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450932, "uuid": "9a6dcbb7-285b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rn0dul-grid.f0xharbor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450987, "uuid": "bb5a6c7a-285b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1IhjOJh6GMnYt9ri5tNZCeJ65GbOUFUCL", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774450989, "uuid": "bc36a595-285b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1fTO6piWETT3AhaaKkeZ6u7X-XwN2lQ2g", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774451290, "uuid": "6fa09319-285c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wcslrl.f0xharbor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774451654, "uuid": "48ad1e75-285d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.110.107:37090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774451785, "uuid": "971327cb-285d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://d8.tfdl.net/public/2026-03-25/4c08a097-0c18-4ced-a7cb-ae468f709454/Release.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774451827, "uuid": "b041b025-285d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.14.107:46509/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774451952, "uuid": "fa52219d-285d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://4ggo.f0xharbor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774452189, "uuid": "87ff8ab0-285e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://stagesandbo.f0xharbor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774452320, "uuid": "d59c512a-285e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.206.96:44105/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774452488, "uuid": "39b0b85c-285f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sap3-route.f0xharbor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774452749, "uuid": "d57762f9-285f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.245.34:36439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774452910, "uuid": "358a7cd5-2860-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://oexe.dawnspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774453107, "uuid": "ab2de6c1-2860-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8514679081/V4iMvZE.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774453161, "uuid": "cae998d7-2860-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.78.237.167:57373/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774453267, "uuid": "0a97c55b-2861-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://agentscript.dawnspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774453340, "uuid": "3614a978-2861-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.77.197:37488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774453402, "uuid": "5a88bf8b-2861-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.160.74:44309/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774453688, "uuid": "0562c76c-2862-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wwc02c.dawnspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454062, "uuid": "e42e7001-2862-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.37:43891/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454110, "uuid": "00e3f59a-2863-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vordraar8.amber-drift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454181, "uuid": "2adc1be2-2863-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.245.34:36439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454248, "uuid": "531717e2-2863-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.233.185:42302/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454418, "uuid": "b82bf094-2863-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:46323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454418, "uuid": "b85ea1fd-2863-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.160.74:44309/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454468, "uuid": "d66f11f4-2863-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorlith5um.amber-drift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454528, "uuid": "f9a7921a-2863-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.25:56836/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454843, "uuid": "b5b4fd0a-2864-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.85.67:56357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774454888, "uuid": "d0c7e4d9-2864-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-r3agent.amber-drift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774455008, "uuid": "18063cae-2865-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/ly2.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774455018, "uuid": "1db18122-2865-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:46323/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774455067, "uuid": "3ae54d11-2865-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://one-graup.com/LUE.hta", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774455069, "uuid": "3c7f09a6-2865-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.44.154.195/186/img_220135.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774455127, "uuid": "5f21b30a-2865-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.83.27:37002/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774455248, "uuid": "a6e401eb-2865-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://silverhost.vg/", "Tag": [ { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774455309, "uuid": "cb72411c-2865-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://o4sis4-signal.gl1mmeroak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774455426, "uuid": "111a342e-2866-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.83.27:37002/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774455678, "uuid": "a74de718-2866-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.173:55544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774455728, "uuid": "c53d3160-2866-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://disp-vector.gl1mmeroak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774455740, "uuid": "cc46d45b-2866-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.156.153:49998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774456028, "uuid": "78151987-2867-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.127.56:37675/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774456147, "uuid": "bf219dc3-2867-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rurswitch.gl1mmeroak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774456328, "uuid": "2aa9e498-2868-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.127.56:37675/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774456449, "uuid": "7327759d-2868-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pxcnax.crestfall.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774456522, "uuid": "9eaeefaa-2868-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.245.195.38:53707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774456867, "uuid": "6c06e960-2869-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-cornpr.crestfall.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774457226, "uuid": "423abbf3-286a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.25:56836/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774457347, "uuid": "8a5c7969-286a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cinemagarden.crestfall.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774457533, "uuid": "f8f89824-286a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.173:55544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774457587, "uuid": "191c985a-286b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/7281753217/CE1auOG.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774457708, "uuid": "6147a80c-286b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nhko.velorune.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774457778, "uuid": "8afbd0e9-286b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.245.195.38:53707/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774457825, "uuid": "a75d8512-286b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.249.142.93:45821/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774458127, "uuid": "5b220c7f-286c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://veri-hidd.velorune.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774458258, "uuid": "a976c1e5-286c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.140.57:53493/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774458427, "uuid": "0dd79af3-286d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.238.197:37617/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774458439, "uuid": "1514c773-286d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.156.153:49998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774458487, "uuid": "31a130c8-286d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://2350.velorune.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774458849, "uuid": "095a0858-286e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://s10w-pulse.brisklume.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774458849, "uuid": "098f8595-286e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.197.119:60452/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774459328, "uuid": "26c7ab1a-286f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://crypto-daem.brisklume.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774459627, "uuid": "d9355b7f-286f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.170.136.155:44462/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774459687, "uuid": "fcacc8ef-286f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://suddensales.brisklume.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774459818, "uuid": "4b492f0a-2870-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.24.57:46811/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774459926, "uuid": "8bab2e89-2870-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.55.186:45532/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774460109, "uuid": "f82b7e20-2870-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://protereb.n1ghtridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774460232, "uuid": "41ea0a34-2871-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.240.141:40686/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774460346, "uuid": "85f65ce9-2871-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/rdx/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774460362, "uuid": "8f12817a-2871-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.197.119:60452/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774460529, "uuid": "f30c8187-2871-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nirnb6-sheet.n1ghtridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774460538, "uuid": "f85f17e1-2871-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.240.141:40686/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774460825, "uuid": "a37f261e-2872-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/2038862353/UbL56O6.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774460831, "uuid": "a6b4f01f-2872-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.236.58:48489/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774460887, "uuid": "c86d9918-2872-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenline5or.n1ghtridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774461310, "uuid": "c41564f5-2873-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vp6copu.stonemuse.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774461667, "uuid": "993e5f98-2874-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ddhvaj4.stonemuse.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774461730, "uuid": "be7c70a0-2874-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.24.57:46811/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774461852, "uuid": "076b1592-2875-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.142.243:48540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774461870, "uuid": "122f68da-2875-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.161.22:45010/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774462030, "uuid": "713445f3-2875-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-r3ef.stonemuse.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774462037, "uuid": "75d81daa-2875-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.196.74:47128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774462077, "uuid": "8db0c703-2875-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.103.67.101:34359/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774462213, "uuid": "dec29029-2875-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.236.58:48489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774462447, "uuid": "6a33fb44-2876-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://norvenix8.aurorift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774462699, "uuid": "002b73ed-2877-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.209.70:33229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774462807, "uuid": "40adab8a-2877-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.161.22:45010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774462866, "uuid": "63754285-2877-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://lwlal3.aurorift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774463237, "uuid": "409c6d3b-2878-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.142.243:48540/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774463527, "uuid": "ed87a442-2878-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkdraa4.aurorift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774463592, "uuid": "144d55c5-2879-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.196.74:47128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774463767, "uuid": "7cbe4682-2879-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://asse7-panel.cinderpeak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774464071, "uuid": "3215449b-287a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://r3bate-frame.cinderpeak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774464076, "uuid": "34ee1675-287a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.1.168:41315/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774464487, "uuid": "29d1c0b5-287b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://velmarken4.cinderpeak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774464848, "uuid": "00ddda7e-287c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://harvestsmart.f0xharbor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774465326, "uuid": "1e3b350a-287d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.221.244.100:51019/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774465509, "uuid": "8adef6ca-287d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://arraybirc.f0xharbor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774465629, "uuid": "d2a7a9ca-287d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bran-crest.f0xharbor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774465815, "uuid": "4142ebea-287e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.1.168:41315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774465816, "uuid": "41d2fc30-287e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.136.232:33748/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774465992, "uuid": "ab3d5a18-287e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://arklithum.tires8f.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774466412, "uuid": "a5a107c3-287f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://jhculxyr.tires8f.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774466535, "uuid": "ee818976-287f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.23.169:33360/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774466538, "uuid": "f039054d-287f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.126.100:55666/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774466715, "uuid": "59f42a9a-2880-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.136.232:33748/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774466826, "uuid": "9c30d2e5-2880-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://castfox.tires8f.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774467126, "uuid": "4ec49461-2881-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.221.244.100:51019/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774467247, "uuid": "96f591f9-2881-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-c0ve.tires8f.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774467250, "uuid": "98a838ec-2881-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.187:35885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774467672, "uuid": "9467a899-2882-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5wgvh3.tires8f.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774468030, "uuid": "69fe69b4-2883-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://t0rr3-phase.z7hire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774468337, "uuid": "20b50901-2884-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.126.100:55666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774468389, "uuid": "3f78df84-2884-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zennexis3.z7hire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774468457, "uuid": "6854c148-2884-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.239.206:35221/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774468569, "uuid": "aadcce4d-2884-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.187:35885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774468809, "uuid": "3a58b74f-2885-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/6099399783/FyZhvph.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774468809, "uuid": "3a58b938-2885-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rl90o.z7hire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774469168, "uuid": "0fd8e399-2886-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.101.82:45484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774469168, "uuid": "0fe2c85d-2886-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/7281753217/CxF0lwD.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774469297, "uuid": "5d0b0454-2886-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:35090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774469297, "uuid": "5d1177e1-2886-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.178.139:40566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774469467, "uuid": "c2559652-2886-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://balanciphe.z7hire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774469590, "uuid": "0b53c122-2887-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.247:58635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774469649, "uuid": "2e77f023-2887-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ion0-frame.z7hire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774469721, "uuid": "598ef09b-2887-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.144.30:44859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774469826, "uuid": "9806241c-2887-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.147.84:44518/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774469949, "uuid": "e1462045-2887-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://qu4r-bridge.fablegrove.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774470190, "uuid": "71465dce-2888-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.101.82:45484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774470373, "uuid": "de0c3ee9-2888-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.178.139:40566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774470430, "uuid": "0065497e-2889-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wolfreel.fablegrove.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774470551, "uuid": "48a42dd1-2889-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:35792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774470731, "uuid": "b384e248-2889-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:35090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774470787, "uuid": "d5140d06-2889-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyn-coreen.fablegrove.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774470795, "uuid": "da129805-2889-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.144.30:44859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774471209, "uuid": "d0671a72-288a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://colotone.fablegrove.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774471272, "uuid": "f5e468f6-288a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/7180287117/Gb7grdV.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774471340, "uuid": "1e8e7f68-288b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.147.84:44518/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774471628, "uuid": "ca7908c0-288b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://4dau.fablegrove.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774471885, "uuid": "633fce19-288c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:35792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774471929, "uuid": "7dd03def-288c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-d0ck.thornbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774472123, "uuid": "f1762b30-288c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sendit.sh/mVBmJ/dsfdsfdsf.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774472349, "uuid": "77e7756a-288d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rolzq.thornbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774472585, "uuid": "04ebe051-288e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/7776573655/mf5GGNF.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774472770, "uuid": "73375c6d-288e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://stit6-sync.thornbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774472827, "uuid": "94d74928-288e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.64.138:35216/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774473188, "uuid": "6c653597-288f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cr4ft-vector.thornbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774473441, "uuid": "02e05aef-2890-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.70.154:56787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774473551, "uuid": "443c501a-2890-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kzta8dl.thornbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774473685, "uuid": "94332e67-2890-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.5.176:58337/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774473728, "uuid": "adc7f2df-2890-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.173.158.227:37648/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774474027, "uuid": "6063dcc6-2891-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://delta-span.cl0udmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774474279, "uuid": "f6ad94d1-2891-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.98.77:58068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774474327, "uuid": "12dd4d16-2892-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.64.138:35216/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774474330, "uuid": "14ce92a6-2892-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://talmark9et.cl0udmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774474748, "uuid": "0dcf7ac0-2893-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-tr4c.cl0udmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774474866, "uuid": "5471cb60-2893-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8317177049/7tdJ9Hz.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774474927, "uuid": "78872b47-2893-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.176.173:51705/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774474930, "uuid": "7a515b90-2893-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.224.218:38771/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774474937, "uuid": "7ea9fb4c-2893-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.123.47:42748/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774474938, "uuid": "7f05ad59-2893-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.27.2:48733/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774475000, "uuid": "a403491e-2893-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.214.144:35306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774475169, "uuid": "09172932-2894-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyntideet6.cl0udmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774475183, "uuid": "11478a62-2894-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.183.196.100:57863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774475227, "uuid": "2b8fa935-2894-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.173.158.227:37648/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774475361, "uuid": "7b81ca5c-2894-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.70.154:56787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774475423, "uuid": "a015745f-2894-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.98.77:58068/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774475528, "uuid": "df2b076b-2894-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://modernbranc.cl0udmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774475722, "uuid": "52c1ae9b-2895-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.5.176:58337/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774475947, "uuid": "d8d6bbd7-2895-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://soldra1ar.tires8f.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774476127, "uuid": "43b5bf50-2896-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.167.1.100:37877/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774476142, "uuid": "4cdff8ea-2896-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.128.138:49372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774476200, "uuid": "6fafb214-2896-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.233.185:42302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774476319, "uuid": "b65cc212-2896-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.214.144:35306/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774476427, "uuid": "f6c1daad-2896-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.224.218:38771/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774476431, "uuid": "f8d5df86-2896-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyp3-track.z7hire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774476618, "uuid": "68bbee9a-2897-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.27.2:48733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774476731, "uuid": "ac2e6f4a-2897-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.160.63:53581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774476787, "uuid": "cd8ceb7f-2897-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://9yc1.fablegrove.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774476919, "uuid": "1bd03971-2898-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.183.196.100:57863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477025, "uuid": "5b0fd5bf-2898-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.192.186/bot.exe", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477029, "uuid": "5d9af0e2-2898-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.192.186/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477029, "uuid": "5d9af2f3-2898-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.192.186/i386", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477029, "uuid": "5d9af3ac-2898-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.192.186/android_arm64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477029, "uuid": "5d9b00a0-2898-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.192.186/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477040, "uuid": "6433793e-2898-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.192.186/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477040, "uuid": "64337e8f-2898-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.192.186/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477040, "uuid": "643380bc-2898-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.192.186/amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477040, "uuid": "64338349-2898-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.192.186/arm64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477040, "uuid": "64339d86-2898-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.192.186/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477210, "uuid": "c957e0d5-2898-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynlithar4.thornbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477568, "uuid": "9f0ea8f4-2899-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dr4w9-drive.cl0udmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477628, "uuid": "c299bb42-2899-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.167.1.100:37877/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477928, "uuid": "7580e237-289a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.46:38256/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477928, "uuid": "759af3f9-289a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-tr4c.n1ghtridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477992, "uuid": "9b58f629-289a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.190.192:36122/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774477994, "uuid": "9cd0ec3f-289a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.211:48463/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774478288, "uuid": "4c34b3c4-289b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rout34-point.stonemuse.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774478654, "uuid": "25e2d5a5-289c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.17.166:40106/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774478768, "uuid": "6a34cd62-289c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://scan-trans.aurorift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774478780, "uuid": "710e82f9-289c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.222.214:54750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774478891, "uuid": "b35b4d81-289c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.145.245:40661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774479126, "uuid": "3f39c2f4-289d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.168/files/8042875554/QxknRPs.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774479188, "uuid": "6472a27d-289d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nor-crestum.cinderpeak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774479322, "uuid": "b42eda0f-289d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.226.41:43258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774479380, "uuid": "d6d85af9-289d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.90.211:48463/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774479549, "uuid": "3bcec1d7-289e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://export-array.f0xharbor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774479908, "uuid": "11977339-289f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ducond.brisklume.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774479917, "uuid": "16eb1dfa-289f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.0.209.98:36551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774480041, "uuid": "60dce2d3-289f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.200.51:44249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774480267, "uuid": "e78ac468-289f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.145.245:40661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774480330, "uuid": "0ce438e1-28a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultra-s1ow.velorune.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774480396, "uuid": "349c5809-28a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.234.125:53887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774480688, "uuid": "e2473e17-28a0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://g8uxn2.crestfall.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774480876, "uuid": "524a417b-28a1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.191.34:52363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774481167, "uuid": "ffe1da63-28a1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gustorganize.gl1mmeroak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774481527, "uuid": "d69c76cc-28a2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zkgvelgx.amber-drift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774481947, "uuid": "d132c361-28a3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://xo5q.dawnspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774482016, "uuid": "fa274ec0-28a3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.85.240:50281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774482128, "uuid": "3ca0153e-28a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.42.78:52632/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774482311, "uuid": "a9d9a2a6-28a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc1sync.blueoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774482377, "uuid": "d13f5876-28a4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.160.63:53581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774482500, "uuid": "1a730312-28a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.161.53:52677/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774482728, "uuid": "a2b89ac1-28a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc2data.blueoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774482749, "uuid": "aeb86d2c-28a5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.39.59:53139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774483028, "uuid": "551385ea-28a6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://56lr0t2n.moondev.digital/?=check&&actmn=qQksAcwGAGKJjjPe", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774483102, "uuid": "81142fd6-28a6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.230.152:43935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774483148, "uuid": "9ca6e429-28a6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc3edge.blueoak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774444925, "uuid": "9ddb5f60-284d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "029g1.stonemuse.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774446184, "uuid": "8ca41c6e-2850-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "0xr5c.stonemuse.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774456506, "uuid": "949f7398-2868-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.245.195.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774441508, "uuid": "a9256410-2845-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.56.113.164", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774443724, "uuid": "d249b676-284a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.175.30.181", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774434425, "uuid": "2bdbe503-2835-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.54.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774403643, "uuid": "80561445-27ed-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.249.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774473724, "uuid": "abe0ce4c-2890-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.173.158.227", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774437964, "uuid": "690b0407-283d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.255.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774461844, "uuid": "0253a7fc-2875-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.252.161.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774428544, "uuid": "7a126c6d-2827-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.58.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774441445, "uuid": "83bcdbd4-2845-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.185.91", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774458844, "uuid": "067210d9-286e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.197.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774458424, "uuid": "0c1f32ee-286d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.238.197", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774472824, "uuid": "936315c5-288e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.64.138", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774421584, "uuid": "4603f58f-2817-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.31.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774441508, "uuid": "a92654ba-2845-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.142.141", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774483084, "uuid": "7674d824-28a6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.230.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451824, "uuid": "ae4bbffa-285d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.14.107", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774441508, "uuid": "a926adee-2845-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.150.236", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774405205, "uuid": "23409b42-27f1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.244.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774452305, "uuid": "cd2cf9d3-285e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.206.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774416185, "uuid": "b377ce66-280a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.199.164.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774476725, "uuid": "a81c2f34-2897-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.160.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774466524, "uuid": "e8247ba8-287f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.23.169", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774473664, "uuid": "87d830af-2890-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.5.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774477985, "uuid": "974ecc51-289a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.90.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774415524, "uuid": "29be9e7b-2809-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.192.97", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774438624, "uuid": "f26f8716-283e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.113.235", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774432865, "uuid": "8989db83-2831-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.24.142.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774408025, "uuid": "b3ec6b5b-27f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.76.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774482484, "uuid": "10d2744f-28a5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.161.53", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774474985, "uuid": "9b37fe6d-2893-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.214.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774474924, "uuid": "771378a8-2893-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.27.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774440425, "uuid": "2401f5a0-2843-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.87.155", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774415345, "uuid": "bebe8360-2808-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.26.226.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774479305, "uuid": "aa0a9742-289d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.26.226.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774441566, "uuid": "cbb5550f-2845-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.82.134.9", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774425005, "uuid": "3cf77e80-281f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.251.115.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774401124, "uuid": "a2a00fbd-27e7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.38.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774476124, "uuid": "4250a90d-2896-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.167.1.100", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774468444, "uuid": "60b67ebc-2884-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.239.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774460824, "uuid": "a290d6ba-2872-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.236.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774462023, "uuid": "6d8493fd-2875-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.28.196.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774414565, "uuid": "edf4abf7-2806-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.11.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774419484, "uuid": "622a5297-2812-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.158.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448765, "uuid": "8ec71d0c-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.226.176.33", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774454225, "uuid": "45714957-2863-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.233.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774460224, "uuid": "3cf54dd9-2871-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.240.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427825, "uuid": "cd6e4795-2825-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.73.85", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774424824, "uuid": "d0ee5553-281e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.221.79", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774475164, "uuid": "06298782-2894-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.183.196.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410844, "uuid": "447e6fcb-27fe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.249.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774441508, "uuid": "a926414f-2845-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.18.125", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774455124, "uuid": "5d6e8275-2865-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.83.27", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774406824, "uuid": "e7f19007-27f4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.94.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774411325, "uuid": "62aba9e7-27ff-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.72.183.249", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774404184, "uuid": "c2caa7b7-27ee-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.159.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774441445, "uuid": "83bcd2ae-2845-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.225.181", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774436524, "uuid": "0e7dc121-283a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.238.86", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774482125, "uuid": "3ae9933a-28a4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.42.78", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774433284, "uuid": "83461eb5-2832-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.82.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774480863, "uuid": "4adc6b14-28a1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.191.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774406105, "uuid": "3b9b2631-27f3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.54.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774418345, "uuid": "bae20ccf-280f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "140.237.44.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427706, "uuid": "869cfd70-2825-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "1502u.frost-echo.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409225, "uuid": "7f412425-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "162.248.102.107", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774417205, "uuid": "13a8c692-280d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.78.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448764, "uuid": "8e31ae21-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "165.245.189.236", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774441508, "uuid": "a925aec6-2845-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.53.138", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774403706, "uuid": "a55da2fd-27ed-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.156.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774447324, "uuid": "33de6ea1-2853-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.157.251", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774443965, "uuid": "62191ea0-284b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.23.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774424344, "uuid": "b2fdcc75-281d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.179.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409046, "uuid": "144d7fed-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.3.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774445224, "uuid": "507412e2-284e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "177.39.122.214", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774441508, "uuid": "a925bb68-2845-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.0.113", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774398484, "uuid": "7d11b218-27e1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.42.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409046, "uuid": "144dd2b1-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.252.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774445884, "uuid": "d9dd6993-284f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.23.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774430826, "uuid": "ca507eb5-282c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.93.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774438264, "uuid": "1bfbc2f9-283e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.94.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774417444, "uuid": "a216e265-280d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.102.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774445224, "uuid": "50742ffd-284e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.168.185", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774402624, "uuid": "20a7f5de-27eb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.148.85.228", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774434365, "uuid": "07939ea9-2835-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.137.249.159", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774462023, "uuid": "6d856ecb-2875-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.103.67.101", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410784, "uuid": "208cc4a3-27fe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.111.130.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774444924, "uuid": "9dc70463-284d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "206.0.172.171", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774469706, "uuid": "50b49f19-2887-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.144.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774480025, "uuid": "5726fede-289f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.200.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774441386, "uuid": "6087b8ab-2845-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.23.178", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774434425, "uuid": "2bdbdc1f-2835-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.135.232", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774453384, "uuid": "50378164-2861-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.160.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774423624, "uuid": "05f017d5-281c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.209.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774420324, "uuid": "56fc4a97-2814-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.252.191", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774458484, "uuid": "2f980e3b-286d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "2350.velorune.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410963, "uuid": "8b5c3e89-27fe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.11.158.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774482725, "uuid": "a0ad9f77-28a5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.39.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427046, "uuid": "fd64f628-2823-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.204.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774466524, "uuid": "e82474f1-287f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.126.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774465324, "uuid": "1cd56853-287d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.221.244.100", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451645, "uuid": "435c9e23-285d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.110.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410663, "uuid": "d83bdf9d-27fd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.113.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774430587, "uuid": "3be2864e-282c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "29rtrlv.cl0verrun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774425906, "uuid": "559ec9c0-2821-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "2ubum.skyl0om.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774474924, "uuid": "7713a80d-2893-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.224.218", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774411924, "uuid": "c7e65f4b-2800-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.28.176.153", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774434544, "uuid": "72c7fe22-2835-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "3urg2biz.amber-drift.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774441864, "uuid": "7d8fe352-2846-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.234.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409706, "uuid": "9dcb3dc8-27fb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.112.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774403224, "uuid": "8639a429-27ec-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.122.228", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774430826, "uuid": "ca5080e1-282c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.222.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774476124, "uuid": "4250e602-2896-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.128.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774399924, "uuid": "d7a95d6e-27e4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.89.224", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407784, "uuid": "2491f2bc-27f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.100.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409344, "uuid": "c607f83e-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.143.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774420865, "uuid": "99286245-2815-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.211.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774474924, "uuid": "7713e3d2-2893-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.123.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774426806, "uuid": "6e24d6b1-2823-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.241.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413724, "uuid": "f8d4bc42-2804-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.139.104.122", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774471624, "uuid": "c7ec88e0-288b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "4dau.fablegrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451945, "uuid": "f66ced6b-285d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "4ggo.f0xharbor.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774477024, "uuid": "5aafc53d-2898-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.175.192.186", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774422424, "uuid": "3a7e8e69-2819-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "50qfdh.hollow-spark.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774483025, "uuid": "53b900a9-28a6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "56lr0t2n.moondev.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774452724, "uuid": "c6bf5d42-285f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.245.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413905, "uuid": "64bdd0b6-2805-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.57.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774416484, "uuid": "662fca67-280b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.10.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774411625, "uuid": "15af443c-2800-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.249.95", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774478644, "uuid": "202d8bc4-289c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.17.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774456025, "uuid": "7617b195-2867-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.127.56", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774465805, "uuid": "3b7a495d-287e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.136.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774461844, "uuid": "0253a182-2875-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.142.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774437006, "uuid": "2de5548a-283b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.177.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427105, "uuid": "20a3f2ea-2824-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.183.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450085, "uuid": "a1895d02-2859-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5fzltr.cinderpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774419124, "uuid": "8bbf4c09-2811-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5pectra-plate.cobalt-ridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774467665, "uuid": "8febaa40-2882-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5wgvh3.tires8f.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774482006, "uuid": "f410696a-28a3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.85.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774459805, "uuid": "4377c5cd-2870-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.24.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774426444, "uuid": "96bc6752-2822-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.118.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427645, "uuid": "621bd754-2825-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.5.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410424, "uuid": "49f1898a-27fd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.59.8", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774419424, "uuid": "3e5f499e-2812-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.62.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774441084, "uuid": "ac9ab287-2844-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.84.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774446608, "uuid": "8936331c-2851-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "6l3ri.stonemuse.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774429025, "uuid": "98aa83f0-2828-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "6slp.thistlecore.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774438925, "uuid": "a5afc888-283f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.50.155.57", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774422906, "uuid": "5984a38c-281a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "7lluqhl.hollow-spark.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774426624, "uuid": "01eb5478-2823-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.255.10.22", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774426505, "uuid": "bb142596-2822-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.49", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774438624, "uuid": "f26faa64-283e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.165.187.102", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774446606, "uuid": "87f4d82d-2851-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.46.98.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774455065, "uuid": "39ba6a3c-2865-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "96.44.154.195", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774476785, "uuid": "cbe6e9a6-2897-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "9yc1.fablegrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774453264, "uuid": "08ca9c95-2861-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "agentscript.dawnspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448524, "uuid": "ff4e66ba-2855-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ark-lineor.aurorift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774463524, "uuid": "ebe10a6a-2878-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkdraa4.aurorift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774436586, "uuid": "33ba31d8-283a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkfluxos9.gl1mmeroak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774465988, "uuid": "a8b8341d-287e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "arklithum.tires8f.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774465505, "uuid": "88c732dc-287d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "arraybirc.f0xharbor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774430224, "uuid": "639a95c0-282b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ashtes.cl0verrun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774463705, "uuid": "57e22409-2879-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "asse7-panel.cinderpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774469464, "uuid": "c083ddf4-2886-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "balanciphe.z7hire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774465625, "uuid": "cff2ae85-287d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bran-crest.f0xharbor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774419484, "uuid": "62320ce3-2812-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "brandpackage.cobalt-ridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774417505, "uuid": "c652842b-280d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "c1ea7-hinge.tr4cefox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774466823, "uuid": "9a603f03-2880-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "castfox.tires8f.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774457344, "uuid": "889e92ba-286a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cinemagarden.crestfall.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410185, "uuid": "bb2a1d36-27fc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl1proc.obsidianmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774403884, "uuid": "10013f78-27ee-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl1store.sedimentmetrics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774410605, "uuid": "b5b5bee8-27fd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl2point.obsidianmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774404305, "uuid": "0add2642-27ef-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl2remote.sedimentmetrics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774404664, "uuid": "e09fc808-27ef-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl3dev.sedimentmetrics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774411024, "uuid": "af91bbd2-27fe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl3view.obsidianmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774405025, "uuid": "b7c99cc0-27f0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl4link.sedimentmetrics.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774411444, "uuid": "aa0128c3-27ff-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl4path.obsidianmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774471205, "uuid": "ce33074c-288a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "colotone.fablegrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774473185, "uuid": "6a34e848-288f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cr4ft-vector.thornbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774459324, "uuid": "24c574d2-286f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "crypto-daem.brisklume.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774434187, "uuid": "9daa8715-2834-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "d3ep-cast.amber-drift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451765, "uuid": "8b3cdd00-285d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "d8.tfdl.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774461664, "uuid": "9780559f-2874-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ddhvaj4.stonemuse.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774474024, "uuid": "5e93882b-2891-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "delta-span.cl0udmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774434966, "uuid": "6e426c81-2836-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "designtrigger.gl1mmeroak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774411804, "uuid": "80a203fa-2800-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev1proc.pyroxenetrace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774405505, "uuid": "d63a65f3-27f1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev1proc.tectonicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774412224, "uuid": "7af1aad2-2801-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev2outer.pyroxenetrace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774405864, "uuid": "ac1c7a9e-27f2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev2power.tectonicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774396806, "uuid": "94e22784-27dd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev3field.platyhelminth.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774406525, "uuid": "35b3bd97-27f4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev3local.tectonicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774397104, "uuid": "46c2cc26-27de-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev4space.platyhelminth.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413184, "uuid": "b6d9debb-2803-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev4space.pyroxenetrace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774406647, "uuid": "7e6408a4-27f4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev4work.tectonicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774455725, "uuid": "c35f0364-2866-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "disp-vector.gl1mmeroak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774477566, "uuid": "9d6a4741-2899-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dr4w9-drive.cl0udmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774479904, "uuid": "0f54db2b-289f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ducond.brisklume.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774470784, "uuid": "d3512d85-2889-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyn-coreen.fablegrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774477206, "uuid": "c7465d0a-2898-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynlithar4.thornbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774475166, "uuid": "0765465f-2894-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyntideet6.cl0udmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774425064, "uuid": "601727a9-281f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "e3t525.flare-path.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774443784, "uuid": "f644fa4b-284a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "edzgpr.n1ghtridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774479544, "uuid": "38d13ff1-289e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "export-array.f0xharbor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774398784, "uuid": "300c183c-27e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1infra.chordatamatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774415224, "uuid": "772d8863-2808-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1infra.stratagraphic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774402264, "uuid": "49f31799-27ea-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1meta.lithosphereduct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774408685, "uuid": "3d1807ef-27f9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext1proc.feldspargateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409046, "uuid": "1454fe46-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2core.feldspargateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774402683, "uuid": "43e15428-27eb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2proc.lithosphereduct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774399084, "uuid": "e2874b10-27e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2proxy.chordatamatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774415705, "uuid": "95b8bf9b-2809-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext2proxy.stratagraphic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774399805, "uuid": "906c8bbb-27e4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3data.chordatamatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774415944, "uuid": "23e09040-280a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3data.stratagraphic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774403044, "uuid": "1b04dfe4-27ec-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3gate.lithosphereduct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409406, "uuid": "eb64e59a-27fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext3ghost.feldspargateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774400406, "uuid": "f69814f6-27e5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4point.chordatamatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774416305, "uuid": "fb6d836f-280a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4point.stratagraphic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774403464, "uuid": "1595d068-27ed-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4sync.lithosphereduct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774409825, "uuid": "e4b9203e-27fb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext4view.feldspargateway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774424705, "uuid": "89f87ff4-281e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "extractwho.flare-path.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774421524, "uuid": "22385b43-2817-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "f1er6-lab.n1mbleoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774428305, "uuid": "ebd46dc1-2826-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "f1xegu.q7ravo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774423144, "uuid": "e78553ff-281a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "f4ith-chain.duskforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774417145, "uuid": "efc5c58e-280c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ficjog.velvet-dune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774480685, "uuid": "e0819494-28a0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "g8uxn2.crestfall.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774456863, "uuid": "69f02fab-2869-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-cornpr.crestfall.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774474744, "uuid": "0ba00ad2-2893-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-tr4c.cl0udmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450506, "uuid": "9c9b7519-285a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "globalgri.cinderpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774435385, "uuid": "67c38d34-2837-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "glyph-panel.gl1mmeroak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427046, "uuid": "fd6f67cd-2823-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gu8xe.frost-echo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774481164, "uuid": "fe2f2e11-28a1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gustorganize.gl1mmeroak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774464845, "uuid": "ff1b2f44-287b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "harvestsmart.f0xharbor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427706, "uuid": "86b7ae63-2825-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hasteb.in" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774476427, "uuid": "f702c1f6-2896-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyp3-track.z7hire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774454884, "uuid": "ce2becb4-2864-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-r3agent.amber-drift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774477925, "uuid": "735add28-289a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-tr4c.n1ghtridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774446964, "uuid": "5d8c11c1-2852-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ink-mar.aurorift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774469645, "uuid": "2c2af766-2887-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ion0-frame.z7hire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448945, "uuid": "fa3938f8-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "jfkwjd.cinderpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774466406, "uuid": "a17a6c12-287f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "jhculxyr.tires8f.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774473544, "uuid": "409a8d30-2890-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kzta8dl.thornbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774431426, "uuid": "3032e181-282e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "lidx4.dawnspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774462865, "uuid": "633b7643-2877-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "lwlal3.aurorift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774432625, "uuid": "fae565d4-2830-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "m0nit7-layer.dawnspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774423804, "uuid": "710b51a7-281c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mer-nexal.rivermint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774416725, "uuid": "f5d5a91f-280b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mermeshor.velvet-dune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774447385, "uuid": "58860871-2853-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-1ivel.aurorift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774475525, "uuid": "dd3e8bcb-2894-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "modernbranc.cl0udmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774447685, "uuid": "0b1286e0-2854-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "moduleneedle.aurorift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774432984, "uuid": "d0e66c27-2831-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nabfk.amber-drift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774437006, "uuid": "2df2b734-283b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-5un.crestfall.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774418707, "uuid": "92cb59c8-2810-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-cany0n.mirthbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774420265, "uuid": "33641dde-2814-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "neuralclip.larkspin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774457705, "uuid": "5f670da0-286b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nhko.velorune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774460525, "uuid": "f0390876-2871-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nirnb6-sheet.n1ghtridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774479185, "uuid": "626a270f-289d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nor-crestum.cinderpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774462444, "uuid": "682c97c1-2876-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "norvenix8.aurorift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774455306, "uuid": "c95eab59-2865-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "o4sis4-signal.gl1mmeroak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774452906, "uuid": "32e96488-2860-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "oexe.dawnspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774429385, "uuid": "6fa60497-2829-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "offvisual.stone-blink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774418284, "uuid": "96fe7f8e-280f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ooj9q4.mirthbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774429807, "uuid": "6b1cf36c-282a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "oqtxen.stone-blink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774420925, "uuid": "bd138325-2815-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "oxfordmobilexray.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774438206, "uuid": "f93f5b13-283d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "patte-span.crestfall.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774438565, "uuid": "cf49fbc3-283e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "payloadcinema.crestfall.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774417864, "uuid": "9c653300-280e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ph0to3-stack.tr4cefox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774460105, "uuid": "f60d6eab-2870-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "protereb.n1ghtridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774471925, "uuid": "7b1f188b-288c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-d0ck.thornbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450564, "uuid": "bf55db05-285a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-6d532b12105b49bd96b29361979b87a1.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774456445, "uuid": "70a31007-2868-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pxcnax.crestfall.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774423505, "uuid": "be8ccd8d-281b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pxmghr.duskforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774419845, "uuid": "396678d4-2813-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "qclju.larkspin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774435745, "uuid": "3e792719-2838-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "qfvn0y.gl1mmeroak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774431006, "uuid": "35b19516-282d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "qiauhat.dawnspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774469945, "uuid": "df2f988c-2887-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "qu4r-bridge.fablegrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774426264, "uuid": "2b8e5316-2822-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quantbin.graincrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774428664, "uuid": "c20aebf8-2827-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorcoreix1.thistlecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774454465, "uuid": "d4a2c553-2863-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorlith5um.amber-drift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774433347, "uuid": "a8e3485c-2832-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quot-isle.amber-drift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774464066, "uuid": "2f28975c-287a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "r3bate-frame.cinderpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774445405, "uuid": "bc038e64-284e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "reagengate.stonemuse.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774424224, "uuid": "6b93004f-281d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rende6-trace.rivermint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774468805, "uuid": "37c8bf8d-2885-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rl90o.z7hire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450925, "uuid": "96131607-285b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rn0dul-grid.f0xharbor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774472344, "uuid": "7557cffc-288d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rolzq.thornbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774425484, "uuid": "5a6b6cc2-2820-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rout3-glow.skyl0om.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774478284, "uuid": "49bf4b75-289b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rout34-point.stonemuse.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774456144, "uuid": "bd0e1cb5-2867-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rurswitch.gl1mmeroak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774458844, "uuid": "067c7bfb-286e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "s10w-pulse.brisklume.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774449725, "uuid": "cb351306-2858-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sales-oas.cinderpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774452484, "uuid": "377e31c5-285f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sap3-route.f0xharbor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774478765, "uuid": "68230902-289c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "scan-trans.aurorift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448764, "uuid": "8e8d0afa-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sdhscndnssl.beer" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774472105, "uuid": "e6cfdd67-288c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sendit.sh" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774443665, "uuid": "aeca4d81-284a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ser-tideos.n1ghtridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774421106, "uuid": "291f18b6-2816-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sermark0um.brimvale.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450387, "uuid": "559c5777-285a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sgv.app.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774426685, "uuid": "25f3c464-2823-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "shape-mesh.graincrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774455244, "uuid": "a4e39236-2865-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "silverhost.vg" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448764, "uuid": "8e8c5110-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solar-sanat.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774437846, "uuid": "22f472b3-283d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solarpri.crestfall.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774475944, "uuid": "d71615c3-2895-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "soldra1ar.tires8f.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774444445, "uuid": "7fcc5f7c-284c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sprofrost.n1ghtridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774452186, "uuid": "85b5d467-285e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "stagesandbo.f0xharbor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774472765, "uuid": "6fe39ee7-288e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "stit6-sync.thornbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774467244, "uuid": "95365a5e-2881-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-c0ve.tires8f.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774462023, "uuid": "6d8e9383-2875-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-r3ef.stonemuse.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774421944, "uuid": "1c43c9ca-2818-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-vv1ld.n1mbleoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774459684, "uuid": "fb01464a-286f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "suddensales.brisklume.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774431845, "uuid": "29e948f9-282f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "survebroa.dawnspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407008, "uuid": "56001d8a-27f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1infra.magmaticbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774397405, "uuid": "fa1b93ee-27de-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1proc.nematodastream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413425, "uuid": "4669e745-2804-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1proc.rhyolitenodehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774482306, "uuid": "a72a8522-28a4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1sync.blueoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774400764, "uuid": "cc261b0f-27e6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc1sync.petrographyflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407724, "uuid": "00a3d35f-27f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2base.magmaticbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774482725, "uuid": "a0b6f600-28a5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2data.blueoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774401124, "uuid": "a2adb6aa-27e7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2data.petrographyflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774397824, "uuid": "f3859609-27df-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2steel.nematodastream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774413785, "uuid": "1ce6cca2-2805-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc2steel.rhyolitenodehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774398185, "uuid": "cac5d78e-27e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3core.nematodastream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774414205, "uuid": "1764161c-2806-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3core.rhyolitenodehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774483144, "uuid": "9aaa0373-28a6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3edge.blueoak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774401485, "uuid": "799f277e-27e8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3edge.petrographyflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774407905, "uuid": "6c451388-27f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc3user.magmaticbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774408264, "uuid": "428cad21-27f8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4link.magmaticbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774398424, "uuid": "5918b3d5-27e1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4sat.nematodastream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774414565, "uuid": "edfd477f-2806-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4sat.rhyolitenodehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774401905, "uuid": "744fca22-27e9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4static.petrographyflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774468024, "uuid": "664166d0-2883-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "t0rr3-phase.z7hire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774474325, "uuid": "11cc615a-2892-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "talmark9et.cl0udmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427945, "uuid": "15450dc5-2826-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "talven8ex.q7ravo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774420685, "uuid": "2dde0e53-2815-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "the0-drive.brimvale.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774449305, "uuid": "d106652d-2857-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "thic-bridge.cinderpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774450864, "uuid": "71fdcaa8-285b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tiger.kesug.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774438985, "uuid": "c96ebfde-283f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "timbe-well.velorune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448106, "uuid": "05f5e99d-2855-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "traglyph.aurorift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774437425, "uuid": "27b8cf5c-283c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "transdea.crestfall.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774444624, "uuid": "eaf641b4-284c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tritidear7.n1ghtridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774448765, "uuid": "8eb02c72-2856-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tuxbins.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774480325, "uuid": "0a37213d-28a0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultra-s1ow.velorune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774439525, "uuid": "0b394f80-2841-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "velmarka.velorune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774464484, "uuid": "2843ec9c-287b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "velmarken4.cinderpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774458124, "uuid": "596e490a-286c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "veri-hidd.velorune.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774454106, "uuid": "fea594bd-2862-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vordraar8.amber-drift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774436164, "uuid": "3828799c-2839-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorfluxet.gl1mmeroak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774432265, "uuid": "24486555-2830-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorvenen2.dawnspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774461306, "uuid": "c1cdb0ef-2873-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vp6copu.stonemuse.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774437065, "uuid": "514c2d05-283b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vtto2izc.starapi.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774451285, "uuid": "6ce0a2e9-285c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wcslrl.f0xharbor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774470424, "uuid": "fcd53913-2888-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wolfreel.fablegrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774453685, "uuid": "0341ad00-2862-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wwc02c.dawnspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774433767, "uuid": "a3a4de70-2833-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wwklydao.amber-drift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427706, "uuid": "86f4f438-2825-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.pastebin.cz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774481944, "uuid": "cf2ac675-28a3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "xo5q.dawnspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774460884, "uuid": "c690da7e-2872-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenline5or.n1ghtridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774446005, "uuid": "21d8cb15-2850-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenlithum5.stonemuse.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774468384, "uuid": "3cc56ae9-2884-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zennexis3.z7hire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774481524, "uuid": "d4d36990-28a2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zkgvelgx.amber-drift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774427284, "uuid": "8b48b979-2824-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zonawood.org" } ] } }