{ "Event": { "published": true, "date": "2026-04-09", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-09", "timestamp": 1775780127, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "e3543432-0935-4d13-bb3f-c5e66e8633b5", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775692992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775692992, "uuid": "6f8f19da-b6cc-4911-9e60-565383aa7fbc", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775692992, "uuid": "9acf6eaa-57af-4fda-870b-ddf629470ed7", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775692992, "uuid": "8179ab17-6bcf-4f6c-9cca-5f5c8c723fe2", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775692992, "uuid": "cef31100-fb13-4cea-b7f8-d37408a23eea", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775692992, "uuid": "61d12c2f-5b2d-4b9d-835b-4b8e8a126e1f", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1775701461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775701461, "uuid": "d317b908-6df4-423b-873f-935ca8fd7de3", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775701461, "uuid": "2168e59c-a8c3-4808-928e-824113af33db", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775701461, "uuid": "37928fb6-785b-42c7-85ad-ac2daaa4c7a5", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775701461, "uuid": "ba86e0dd-5e77-4762-84b3-6fcd9f1919fd", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775701461, "uuid": "2bf52607-de5b-4e10-8288-3dcc2e85c102", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "505ffa30-33c2-11f1-bc00-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1775706133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775706133, "uuid": "02ad7ee5-3730-4a09-aa33-c353b37d4bc7", "comment": "Malware payload (NetSupport)", "value": "85425de806a7373a22ce968eef1a561d", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775706133, "uuid": "7056531a-2a20-4b41-9743-6e5d7096ae49", "comment": "Malware payload (NetSupport)", "value": "328e097831c74290f102dcf11c41bc4b7b82a37681d8df3690783ea8a9e3bebc", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775706133, "uuid": "382eb1a6-7927-42cd-af91-c8fd497d6419", "value": "T1B7F56C0BEDBD4CE9C499A234843362077F647C401B3163E72AE5B2692E737F0997AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775706133, "uuid": "d24092ae-8633-4555-ac95-338def24ab81", "value": "3271ee162568f50a6810be9b8973807f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775706133, "uuid": "5245b740-9f24-49c9-91cb-4ceba16ed92c", "value": "49152:QFUvlQeN78lDKCU5gFZmCi90ZrP4B+YklsFj7Qc786:QFO447XCrwuTP6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775706133, "uuid": "da53f41f-b1f2-44ab-8a20-c4aac8449b96", "value": 3566624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775706133, "uuid": "17b5319d-41ac-4eba-a4b9-3050c55ceb92", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ee735b3-33c7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775706707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775706707, "uuid": "f7c975d0-d674-4e8d-a2ce-978ee4df2e34", "comment": "Malware payload", "value": "7d55f1152655c90126c2df6f3e5e60ec", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775706707, "uuid": "1fa917fc-4fec-4e94-b75f-8be967ce8e41", "comment": "Malware payload", "value": "a8957805bfb55e32d494608d0f80f3831ca9250f100cb36e6543345fb261d91c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775706707, "uuid": "7ac07549-c11a-4f65-b888-9207d1030118", "value": "T17893E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775706707, "uuid": "a19b0db0-2e62-4928-a5a7-257d34513da8", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXNIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775706707, "uuid": "e8f1b6e0-cee0-4afe-9b2c-b852dce8f188", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775706707, "uuid": "0ed2ff8a-26c2-4580-93b6-d7245b34160e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2abba95-33c7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775706848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775706848, "uuid": "57d40da2-cc67-49f2-8c4a-ebeb1d2b4300", "comment": "Malware payload (Mirai)", "value": "882d8f6aaf19aeea7258c84a73d74d41", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775706848, "uuid": "ed67e219-b22d-4987-b1c3-304b89803aa5", "comment": "Malware payload (Mirai)", "value": "e65d632f973d01bc21af09c7c4a6fa549d2de676a01c63c2ea7c97b3eaf115af", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775706848, "uuid": "26d5c6b6-ac7c-4cc9-b4db-a39923a6c188", "value": "T10744D6067B519EF7D86FDD3306F98B0128CCB45721693B3A3674DA5CB90A98B05E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775706848, "uuid": "ba3f18c3-155f-4db7-b118-4c23094649b2", "value": "3072:shdpFxtn5TjvANUnvyNEd7CedQ/oIYIDVMSGd9z9/RRkheN:shdpFxtn5TrJoEwemoIYCMRZ/RR4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775706848, "uuid": "5424c6a9-a261-4cea-a6a7-507d6827eff0", "value": 256400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775706848, "uuid": "310a3e05-81a2-4dd6-8dd0-8a6eceff0d22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a339fbb1-33c9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775707654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775707654, "uuid": "755fbd96-5476-4490-99ad-a7681ebeffe9", "comment": "Malware payload", "value": "07ad05321dd5ead3e488df8e735829ce", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775707654, "uuid": "12fa963b-0cac-417f-bbe2-0c1211bd1ec1", "comment": "Malware payload", "value": "40d7bb9417fe7bd816ccc9f2f436045850d214f9455b661699bca9b99a774fff", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775707654, "uuid": "5bcb3bd9-e312-4ac3-a2dd-4b83f39f90e3", "value": "T1038309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775707654, "uuid": "dfa719c8-d660-4274-9f75-d513cb077f26", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnWWaJVN/:XEKltp9txAX/yr2pbWW4VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775707654, "uuid": "7a20de6e-b25e-4e04-b07f-bf56e43fa033", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775707654, "uuid": "a79bf1d1-2b22-4409-bb6e-37df9c0e400c", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23f4de3b-33cc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775708729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775708729, "uuid": "e95e6f8d-77ca-41fc-9e7b-f7d817895b3a", "comment": "Malware payload (Mirai)", "value": "5c3d415d976b0dbb11021f88ceba502d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775708729, "uuid": "ba45bcd4-429d-4598-a9fd-d98c926d56cf", "comment": "Malware payload (Mirai)", "value": "010e9519a33344bc8d60513baa0f8751f1846a7f1cb69712f10c25cc66ebff95", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775708729, "uuid": "6e83cf5e-74cb-4dcf-bd1e-53e0e4751349", "value": "T159040A52B991CF12C1C212BAFB5E414937133F78D3EE72129D246F60774A8EB0A7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775708729, "uuid": "c385257c-0224-4ba7-94a6-f803ad38b088", "value": "3072:3UQnXKTeQBvZ6OxCX7MQ39aC2irlVaaSPRky/kIN0f:3UQnsVx6XXAQNaZMWtP3/kIN0f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775708729, "uuid": "7b8d4e82-9a5b-4741-bed7-af30c3ebf740", "value": 186576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775708729, "uuid": "d29b2d5b-7534-4fa2-9784-3d06c6ad218b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3541a9a9-33cc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775708758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775708758, "uuid": "2c9f97a7-ffc0-4073-b8da-87e3065f2a29", "comment": "Malware payload (Mirai)", "value": "134c1b150fd808ae9247a10c04a5dafb", "object_relation": "md5", "Tag": [ { "name": "94-156-152-233", "colour": "#1a4f54", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775708758, "uuid": "48d5c7ac-89b3-4e00-b358-776dc22e8c4c", "comment": "Malware payload (Mirai)", "value": "763e327373af4e6de889bad0f0ede37f892aabbe0287a72401658ec2c68f7019", "object_relation": "sha256", "Tag": [ { "name": "94-156-152-233", "colour": "#1a4f54", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775708758, "uuid": "93282aae-99b6-4cf8-9487-9eebc4950788", "value": "T134B34C85E753E4F1E85705B011ABEB394931BC771220CD7AD7A4FFA2AE626C1E1163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775708758, "uuid": "95553992-3381-46a5-80f8-a53ee093071e", "value": "1536:aSf87I1iuCNT0isIMOkcGe8QVW/6QUj31062jd6oaxkSfBErp:H3iZQveCbdpR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775708758, "uuid": "f5912c24-1c41-45f3-9fcd-0be68483ad35", "value": 108172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775708758, "uuid": "d5781a39-c0d1-4ac1-aad3-bbae79648879", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12225c8b-33cd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775709129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709129, "uuid": "a72e82ad-e3af-4763-ad2e-5e1464aae8df", "comment": "Malware payload (Mirai)", "value": "8f5ed6691b5ad32a9743e2b94a0df7fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709129, "uuid": "d868e580-a044-44d9-9013-caae8f72a253", "comment": "Malware payload (Mirai)", "value": "ddbf3d2f7f177fdc92852e146d43dfcab6dac117c27378cdd91d4be3a222bfa9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709129, "uuid": "535222d1-6bcc-4205-8148-bbb96d4c99a2", "value": "T1BB042902770D4E07D1132DF4273B17E0879FFDA228B5A584745EBEC98271DB22186E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709129, "uuid": "e1022d30-60e2-410c-8dd4-fecdbbdb387c", "value": "1536:QX8HnYT9ckK9M4hwlxExa9xXZQAvOEHa8hpTmGqr9o5v3vAiGgsH9fI5Tqu3JH09:QiX9M4hw0xaZQyHp1q+QiQH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775709129, "uuid": "f4bcf0f6-32a9-4dcd-9165-645aa278369c", "value": 180904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709129, "uuid": "c8e666d1-1db8-434e-bef2-be984377e183", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e84798ab-33cd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775709488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709488, "uuid": "510f98ed-2269-43ce-940b-0a60698f56ed", "comment": "Malware payload (Mirai)", "value": "2a710262a9649c0d1e6f3f0fdf6447bb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709488, "uuid": "a6849f55-ce00-447a-969b-fe206ba06e89", "comment": "Malware payload (Mirai)", "value": "23e4e5a25b2ea7c3a014f6334581cfe8e996d6eb4447653a187aba94846daa03", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709488, "uuid": "1719fb2e-49bb-4e98-b6c7-074f63e97353", "value": "T1FCF35B63E926AF16C152A1F4B1B28E741F53BC6A49571EFA64B6E9F48143CCCF2043", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709488, "uuid": "12914847-b4c6-44ac-90d8-982d226097b4", "value": "1536:R7a0wtulAFMLZlRZRs+YLhLCWKW9P9g2gcXKguBh6zCW/+qIQ0gNFxMI:xH5AyLZnPs+YLRsWXCgUhECWWqINQKI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775709488, "uuid": "d2ef26f9-0cbf-4593-be80-6c2397831989", "value": 160348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709488, "uuid": "09da9594-5fc5-434a-806f-9c9f39b97167", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11968bc6-33ce-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775709557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709557, "uuid": "206ad295-4b6b-49f5-9706-22233b2f5616", "comment": "Malware payload (Mirai)", "value": "0ec02e392287789c6f424831250c6be5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709557, "uuid": "147ec238-84fc-42f3-9daf-01e0ab8bff8e", "comment": "Malware payload (Mirai)", "value": "2bbb387226de2faa8f60eaa2988e6a9a05c6d41b191ef0f24f029b184f260677", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709557, "uuid": "5fb11b51-e48f-456b-a79b-11511c1016fa", "value": "T155E31781BB43DAF3E85300F011B79B314A32FC3A582BDA91E3797DA1A9515C1E61A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709557, "uuid": "c9e81088-cd6d-473b-bb4b-d0051ea9d6a1", "value": "3072:jWI5PyDWnIhlSa9vsGJhYrBA6NWvY3yjXyHmLhE:B5PyanIhlRvvBw38COhE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775709557, "uuid": "21720018-5dca-4854-8368-506e8f5ed644", "value": 156176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709557, "uuid": "39a36fc8-f35e-48f8-83f3-e3930d8af5da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9fe34eb-33ce-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775709840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709840, "uuid": "5da3f487-a416-415a-ba2d-5f15599f66ec", "comment": "Malware payload", "value": "966f1aaefff093731f68663578ca17ac", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709840, "uuid": "7e48e642-8e4e-45cf-9d0d-8969b0a8ebbd", "comment": "Malware payload", "value": "ba9303d913b9e097cb23c5dd92a6a8093f82b46c4ed8fc1e22e8d777e1a9c78e", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709840, "uuid": "35b607dd-7f19-42f4-b35d-8e80a9590a9b", "value": "T112B21E3EC941DFF00B2A31A1A62F7A16A5540363B5382E4DBDCFC4993B359808BF55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709840, "uuid": "34fd32c8-11b4-4e91-98c2-de856a02e112", "value": "384:KwFGAVBn2NnspqV9c1iEWOwlYUcOFvPgcPdKdrotJ7kPP6rQGkWkU5DYHh4Zgczt:K3DNnhI1fFir0Vbuk8HeR24g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775709840, "uuid": "66101784-3c1c-4314-9725-ab1bb7f3bd92", "value": 23738, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709840, "uuid": "f99b8bf6-604b-4c85-865c-9fc1bb121ee1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1775709849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709849, "uuid": "026cceae-b844-47dc-a77d-e1bcd8b1a638", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709849, "uuid": "97fad26c-0dfa-41f2-a01f-1b2b9287fdd4", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709849, "uuid": "ba3b548d-b82b-49a8-9b5e-c3f9ff4782d9", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709849, "uuid": "94681db6-6b49-40a1-affd-4755f5fba518", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775709849, "uuid": "d9263326-e54e-4724-981f-38679a4b1c47", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b62acfb-33d0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775710540, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775710540, "uuid": "188804ec-0392-4cd5-9db2-54f32a3faa10", "comment": "Malware payload", "value": "32c6c8dc15b164f51814a1b9e0c69fb1", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775710540, "uuid": "913813b4-a143-4a36-9726-592e69888076", "comment": "Malware payload", "value": "3b74dce5e65c483c8f435ba6dd8105e35353176a8bafe2420d99d693373abd46", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775710540, "uuid": "547926b1-8416-461d-ac27-9769c607dca7", "value": "T11A5352E4C7660F65CE0BF9F3BD8CE88738CA8D85D4A38D25A61940AA9C57C1240F6F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775710540, "uuid": "a5588b24-cd9e-478c-a0bd-4cd99a396fd0", "value": "192:qIF4BATDCGb0btNtxQ1UroG86ToxHjRDm7AiyQ2ZBQ25zsLj6MorKxAN4oY9WELV:qICs1UEGjTkHl+r4i/ezBRWh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775710540, "uuid": "f9ce1b12-e53f-48cd-a330-e4e7f52f1961", "value": 63391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775710540, "uuid": "b4777239-dd5b-4b02-8b6b-59f0427eb352", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71e877c1-33d2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775711437, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711437, "uuid": "a9a92366-8f87-4f17-953f-d69c4212cd42", "comment": "Malware payload", "value": "679b1c0d9ceb24f9b58fd922ff4d9648", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711437, "uuid": "f0297846-d271-4f21-a97b-63f29ea96e70", "comment": "Malware payload", "value": "95ffccd9d8a458710dd554a228182404219ac2d7f0bac2461cddcb73a01711d6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711437, "uuid": "bceef830-6916-4229-a52e-b563740f9662", "value": "T1E6931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711437, "uuid": "5fa3a30d-e893-4115-aedb-14eee101e531", "value": "1536:0Byp1tF/uwMmAIa14oXx+IMepeV7tb73WdxCrCitkb5fv2v05xsprCKi1sPyKct8:08jIL0GitkbFv2v05xsprw1sPyTt3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775711437, "uuid": "a054e7ae-c191-4897-ad65-833ce2b2a846", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711437, "uuid": "34c093ac-3cdf-478a-9214-0971d6980411", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df592483-33d2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775711620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711620, "uuid": "5aa1dcc9-ea09-4fa7-92b3-31fbfdd05056", "comment": "Malware payload", "value": "0fa79ccfca619448a4365051def33e1c", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711620, "uuid": "9907ec4a-5fd9-45a2-98eb-8a5568d07b68", "comment": "Malware payload", "value": "447d222e7bfbc06da7890915dbdcb7ffc8a513749b95853263551cd836bc2572", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711620, "uuid": "c46a27e1-e402-49e8-a3e9-e3bc5323fcc3", "value": "T16E5221BDC5D1BCC48B6B32C079ADFBD2104A9B137A671BACF1CC04610751799ABB96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711620, "uuid": "7ff3b412-3ac0-48e3-9668-82889caf8cd2", "value": "384:wsjhRyhNrdwRDBr9LU9cLj19pw7YYbKoHKZZ3h8ReUTSSkXFGMnD9acE:fC6d9IySYSqZbK5SEM7E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775711620, "uuid": "0d4bffee-e2c9-4eaf-a699-18ab111adb17", "value": 13505, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711620, "uuid": "6bf5204b-f24a-4c89-86b5-7bcda37d49e5", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ca146e3-33d3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775711750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711750, "uuid": "f19c6f4c-12a4-4257-9663-76a2847e96e6", "comment": "Malware payload (Mirai)", "value": "7d875bd04c3f073b9d762906f9a87a3a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711750, "uuid": "18422b9d-96c8-4286-83d6-ba27b48abc83", "comment": "Malware payload (Mirai)", "value": "bc2c23353d72b044c8377065ac3c9835b7a09197703fb5d60442964c2edbf83f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711750, "uuid": "638c8df2-fc39-45f2-82e1-f13f3730328a", "value": "T151D31856A9918F12D4C721FAFA9F004933136FB8E3FA7111DD206F64638A99F0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711750, "uuid": "d75bf2fc-90b4-48ad-9b6b-cbc78ccf2bf5", "value": "3072:wLkS7kMGkST/BY9AHqCkoaAhWUhHBWIT4o5SNE7cJm/:wQSMg9QqpoaAhWUhHBWu41NocJm/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775711750, "uuid": "90c1b9bc-ff4b-465b-8ff3-555c6ecd9037", "value": 133556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711750, "uuid": "c6d72f64-65d5-4e9e-b286-2bed01bc875d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b307c812-33d3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775711975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711975, "uuid": "39a2345a-1bc5-4696-b362-b57c59c9dcb1", "comment": "Malware payload (Mirai)", "value": "7a698873ea39e6a95b972646917f402d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711975, "uuid": "98cfefd4-2506-4419-bea5-36df8ceb042a", "comment": "Malware payload (Mirai)", "value": "8acd9d18a9a754590314c6390ee5261b6886e1bd1901137a979d12b0dba77099", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711975, "uuid": "ff209641-2dbe-4bb7-b104-41a70e30147f", "value": "T1D9A3E80ABF610FF7D86FDD370AE90B0125CCA91612A57B7A7530D818B64F64F1AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711975, "uuid": "332b6d98-7731-4610-978f-bcc42566841d", "value": "1536:4feQyAQX/7GSb00fS4CJ+rl6jM64Z8qyRI1JhP3:4feQyAQ7Sgrli4pzl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775711975, "uuid": "4e3e4514-f77f-4fa3-994a-facc7925f549", "value": 97808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711975, "uuid": "66bbf826-ce93-4f69-bd64-ba3135c03a04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c858f22d-339d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775712007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712007, "uuid": "93fa0d69-de5a-423c-8bc1-79ec1da5c5c1", "comment": "Malware payload", "value": "dc46b9524c1934190330cdb70702b59c", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712007, "uuid": "8ae49cdc-265c-47d9-90e4-d03cb61cf4d5", "comment": "Malware payload", "value": "0ab26337ef9b0f330001540e66c814a556b9434ccf1bea1f3dc7cd7f7158b2d6", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712007, "uuid": "a1256fce-f12d-492b-9cf6-8f890a57d01c", "value": "T1AC6251A753CA0DAE97918AD7C246FA0558BEC0BF1C1E128CF1E14647B03EA60B355F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712007, "uuid": "e351919b-e0fa-444d-9eb2-0b03bcaa9310", "value": "192:sKOUij19XaR1j4Z+8HVDdmg7bqf6XT7cqTgtZJzdg1VPHssUK:X7ij1oR1j98Hhdf/qG2/g3PHse", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775712007, "uuid": "d66cf1dc-40c8-47d7-85e1-3748da3d1dfe", "value": 14918, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712007, "uuid": "828e0266-3c77-43a4-9f8a-822070344a8d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9059428-33d3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775712066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712066, "uuid": "07639a78-f1e0-4b49-afb9-183c6d2dc421", "comment": "Malware payload", "value": "5e17473ab82658638c21b28ff397447b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712066, "uuid": "a08ba8e2-e812-44c0-b161-47c48706960c", "comment": "Malware payload", "value": "3009d30beed4d4e02b38efb5b3e8486ddbef7bf29f788afbbfb81fae5232ec04", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712066, "uuid": "5ddf7ff5-21be-41b9-8792-5f7f7bd78dd7", "value": "T18C1149CC3E34343B419FD96E7193C9295684EDEC011A67247A4FA82793F0500B82BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712066, "uuid": "342d5280-dcc7-4465-9d48-8fd78119a641", "value": "24:yBGDXylvcgmxyoLqvmzj3OnYgAgjNUtXulkajn:yoilkgmxyo+vo3JgfxE+jn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775712066, "uuid": "232a9a7f-6856-4b6d-8e5a-42ee0650420e", "value": 1059, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712066, "uuid": "341305b6-770d-45bc-8e9c-fb0ca852ff5b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e36404f0-33d4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775712486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712486, "uuid": "f9b73e20-3ed1-4623-bed7-e9ce3ff0d63f", "comment": "Malware payload", "value": "acf70dcee3756efa82c6fa20f5a173fb", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712486, "uuid": "ccebcb0a-8633-4f62-b7bc-75d95dec8b42", "comment": "Malware payload", "value": "acb9cdf424f5ae5eb4534060620a87a59cbc3c997ea940873566840f46f7ef62", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712486, "uuid": "850f8a48-f8ab-4f28-abfd-36968221f5cd", "value": "T18BB423A0BD14DD5E27B4083317F3442AE780D19D8997789374161A9C7FDACC2E9DA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712486, "uuid": "56b2e0cd-6cea-4f3b-b986-5555f04f6b26", "value": "12288:PsJkvyRy4fPM7zpk9PrE7smEzwQf2CT7mtL5B/AzNG1Jkvpp7M837QfL:PsJSmM7z+Pr4smE8hC3mx4Njpp7M88fL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775712486, "uuid": "27c089ff-e3cd-4f0e-a981-1158b1ceba0c", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712486, "uuid": "0c0adea2-bd0f-460f-95ff-b48f9cb6757a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbb79639-33db-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775715426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715426, "uuid": "e76e8e24-c52e-47ae-9962-9839a6a3a5d7", "comment": "Malware payload", "value": "119a80a15f0a50017e2a3de66705e774", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715426, "uuid": "57778772-0383-44da-9e7f-a7e2f7a1340a", "comment": "Malware payload", "value": "73ef3fbe275321b78c11b1de44ccfeb1e5ca906c5c9b1c1a9562567cd09b7bbd", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715426, "uuid": "677337c8-2f67-4c58-a149-a1142b85879c", "value": "T1D252772C09BDFA5893D9E207EA99F7276D461CAFD2B875172AB38C6CA0024C045DB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715426, "uuid": "da7226e6-eee8-466c-90cc-42aff92bceed", "value": "384:anXoS6BcGFkbh7ZF4gcqzBBIlGQeNyw63fCx4VND00Puxa4NFyNw5W12XRFSWsu2:3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775715426, "uuid": "0c961c88-15de-4988-8f01-b3dd82b25501", "value": 13813, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715426, "uuid": "71125e52-d364-4fde-a330-9bfd448c475a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd71f5e2-33db-11f1-bc00-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1775715429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715429, "uuid": "dec9a0cb-a525-4344-afbc-4b6f41ace9f9", "comment": "Malware payload (njrat)", "value": "0db620fe0d9bd76c5db42cad93546955", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715429, "uuid": "61b059b1-4273-4c29-8a04-d4304dfa5b8d", "comment": "Malware payload (njrat)", "value": "97b9fbb1a39228d37f4c7830ac8723eff526317497ef94b2797c49d028f4f266", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715429, "uuid": "1087191f-f12c-4156-95ae-4a424b8b96ab", "value": "T13F25C09073F4850AE1FF1B75F4B1485A4BB7B9526A36DB4F0D88A0AD1EB37408E503", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715429, "uuid": "4ef9fda1-00c0-4185-ad93-8ab90b577124", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715429, "uuid": "71216036-2834-4a5f-bfcb-2c0b05ea32f5", "value": "24576:rF/pTxJzck+uGW/yFoBkkAQmqGCH58oZJuD2Y:rF/pTTYjqqanTOgMD2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775715429, "uuid": "37d904ee-4fb8-4b4d-99e8-d4e904392ea4", "value": 977920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715429, "uuid": "dbb85503-9f79-467c-aa26-a0266cf3f164", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be3ec000-33db-11f1-bc00-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1775715430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715430, "uuid": "0bd27f57-16d2-473f-b09a-c1a1e9c250b4", "comment": "Malware payload (QuasarRAT)", "value": "599a506f71dab8c3e8b574ba74abaff4", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715430, "uuid": "e8f66dad-56b8-4bf2-b11f-e5b9bcbc1b51", "comment": "Malware payload (QuasarRAT)", "value": "78b94a7b9317cd36681d32daa672d072c7ee91f8d4a049834bd9ad5a8a0f01f8", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715430, "uuid": "aaf69a0d-a7ef-4591-8d2f-e9ae06d8e568", "value": "T13452AC2C09BDFA5993D9E303E699F3236D4A5CAFD2B975172AF28C6DA0024C045DB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715430, "uuid": "5046ad1d-b1f6-4e41-9fb0-5fe0aafcbacc", "value": "384:ykn6gbGFkyLMs4KskInbeYzt0Fft6hOo71r12jVeCcK+kh1CoGTGSg7WFSWsu9d1:yI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775715430, "uuid": "92dbe8d8-02ff-4486-b54d-4ff2cf8408af", "value": 13581, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715430, "uuid": "9d6bb5dc-daa6-421c-8e55-8ff7671e1784", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be43e5a7-33db-11f1-bc00-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1775715430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715430, "uuid": "995f49ca-9b6a-4b45-816f-98717ddb77d2", "comment": "Malware payload (QuasarRAT)", "value": "4a179a29e1a8313eeeb35aa1ec4812fb", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715430, "uuid": "0cfb8865-b93f-4c52-94c4-b663d140c1ee", "comment": "Malware payload (QuasarRAT)", "value": "bec11fac7d2d7ab89aa30d81f2011c0de29647dde7098dc9aca72129bebb9896", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715430, "uuid": "91a0c465-574e-4f55-a322-ad2e78d2c7cf", "value": "T15352782C09BDFA5893D9E307E699F7276D465CAFC2B975172AF28C6CA0024C045EB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715430, "uuid": "2f2fc1cc-5804-4d4c-b97b-313534af2776", "value": "384:PzPQvnTWGFkSa3UjFvNW4lN3bI5P+ZwbzzaTiWWvQA6c1zx/KFSWsu9d3zyQBzix:PzIe7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775715430, "uuid": "418e4113-b85f-4de8-bc54-3bb2e4769753", "value": 13890, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715430, "uuid": "8071afc2-7e74-471d-955a-c136f153db2b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0832467-33db-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775715434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715434, "uuid": "bdda17ae-28d3-49ee-92d0-c0e94c6b9616", "comment": "Malware payload", "value": "a916870b1be4c1cf4e19cb9324a439b6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715434, "uuid": "a35baa42-0764-4a11-8207-9fc6e26daae4", "comment": "Malware payload", "value": "d1a1e6a2c0adc45a4cf40128e683499cd984d5803ad2e3a1ce26768a612eaec2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715434, "uuid": "d2b27ffa-11ca-499d-82b5-b0963eed8c32", "value": "T12DA58E46B3A501F8D477C078CD466217FA72B4041774ABEB55A08A6A2F33FE13ABE3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715434, "uuid": "be8f502b-c313-4446-ad2d-a33fd0e26471", "value": "38c192218334865e56f906ff44fbc4b0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715434, "uuid": "b3606987-318b-43a1-8c55-a792ed37756c", "value": "24576:s5uYyQO8hVDs/5IdhtQFujoh6m6vBsZZ5PXQBJOKdkjnoor0PfSIgZlHVvtRJQOh:gno8haujVsPAB8KY2+Bz+2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775715434, "uuid": "0bd71cb2-6c18-42f2-9c23-3e5c4a6463f1", "value": 2106368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715434, "uuid": "78dd58af-d9a6-48cd-bf22-083ec89ba032", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfc40518-33db-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775715487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715487, "uuid": "9ab0516a-d65c-4a1b-b228-ba3721c5f842", "comment": "Malware payload", "value": "13bfc18f6296c7a0eba4371fabd4f818", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715487, "uuid": "1b62c369-037a-4f96-80f5-3cc06f92fa74", "comment": "Malware payload", "value": "18996b3867667a26d543360de3aa752679fa2b91c96539cfe702e60c5325da15", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715487, "uuid": "5a73ce87-ee41-4025-8f8f-bf5c1a935303", "value": "T169828E6C09BDFA5893D9E207EA99F7276D461CAFC1B875172AF38C6CA0024C045EB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715487, "uuid": "2e4a841a-8340-4a0d-a960-01f5f5f83324", "value": "384:xnQKfGFkVALPGTZmRPAr32cKPNgJFjfAA2l7Ns62rgpJH5nsID1IORonlTyKdBHC:U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775715487, "uuid": "2d3ee42a-4b2b-4a18-bffe-e030fdda3fe8", "value": 18195, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715487, "uuid": "6e367a83-8c52-4c6f-9b25-d6ed6c6a7400", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1800469-33db-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775715489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715489, "uuid": "4023d69a-0126-4e6b-8bb2-e51b93db4621", "comment": "Malware payload", "value": "915fcd5a462c38428f6f0306995f3730", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715489, "uuid": "7db99d70-874e-4200-b002-b849d457055a", "comment": "Malware payload", "value": "d856336054b054ee4b6aed66226e90dfca9a236e93012360b34001e75cf58693", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715489, "uuid": "dd3caa38-601e-4c09-b87b-f9a5cdae78af", "value": "T17065021589C42FB5CFEC5A1890FE171E63F04A8E552AB54EEB33BD4AAFE7504020B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715489, "uuid": "fcb589a8-c619-4009-9131-33f5525f345e", "value": "12288:XHBcercT2rqqcCx74BplUQ50ZHabkg2f8M2MzXhhtobe1Q9Zd3gTSHHzV5d5Lsxb:3Ce/z4pFeHTh2KdduLfHzf/mxbdI7Izd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775715489, "uuid": "3d69a8fe-93a6-40b6-b30f-f3ea89006b77", "value": 1418394, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715489, "uuid": "14c302e1-99c3-44f5-ad5b-7e1377a9358e", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1e24667-33db-11f1-bc00-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1775715490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715490, "uuid": "da3c54cb-7e76-40ee-a668-30998a75da10", "comment": "Malware payload (njrat)", "value": "c9469a994e10e0e726449706a55ffc31", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715490, "uuid": "00547d36-8a4a-44be-93bd-b0bfe69a1c1d", "comment": "Malware payload (njrat)", "value": "58482050ff75fc1fd60a2b6e23180dbf5ea12a40fb69eb1cdfd3f19d6e8a0a33", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715490, "uuid": "5a008d37-52d0-49a3-baeb-9f9bfec36021", "value": "T1E725C09173F4850BE1FF1B75A4B249494BB7F9529936DB4F0988A0AD1EB3780CE103", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715490, "uuid": "f586dcb5-c763-4c14-af33-2263b657e647", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715490, "uuid": "ac0570e3-b269-4e08-a1b7-658777adeeb9", "value": "24576:aF/pcJxJzck+uGW/yFoBkkAQVuqhz1TWRgiU49Y:aF/p4TYjqqanT5T2U49", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775715490, "uuid": "2890fbbe-ccfb-49d0-8305-94d2168e8103", "value": 977920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715490, "uuid": "85379b42-9bdf-4301-bff1-6c4e99b96eb9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05e4e923-33e2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775718127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775718127, "uuid": "c697946d-ff1c-4a80-8a4d-5566264b1106", "comment": "Malware payload", "value": "aed236ce5c86fac59f15f54447aea60b", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775718127, "uuid": "0bbcb15f-b923-4827-a7dd-5656570056aa", "comment": "Malware payload", "value": "a409b721d8123b4e0f6d14740bac594693038e7f818cb0ff688e0e5e8dd12bc1", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775718127, "uuid": "d0189e69-386b-46a0-868f-47f6dccd1639", "value": "T167341295250D0E2D25E071E7D7AEED66348DB319834263EFD21C1F5B3C5CBA0692E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775718127, "uuid": "64229816-ddcb-4041-a4d3-8a2068fbfe9c", "value": "6144:/vtYZWzWW/B7bVUt3Z+2jLlhNLr9hUFdUbkDMkl/IUsgoA9n8:/1HnpfVgg2jLljLzUFyEMkNIjAF8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775718127, "uuid": "10f3019b-f23d-4d7e-a151-76ad59ed05c0", "value": 252992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775718127, "uuid": "d9b8dd13-1db9-4edd-a049-c81c77b89835", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0601d9dc-33e2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775718128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775718128, "uuid": "3d6496a6-17c7-46f1-92e8-ba1790285f0e", "comment": "Malware payload", "value": "6731b48b09a8321efa03387b7cd5af4e", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775718128, "uuid": "e6024204-3da6-4549-a668-1d1d165988ca", "comment": "Malware payload", "value": "ec1c6621a60f25e9d018cae457b85227782d9c59753ce4bb3298c4e4e6ba3aad", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775718128, "uuid": "e70aab51-76d3-4c6c-a6ae-2216ee0a1534", "value": "T15D94BE7BC201979A68011109EFE609B19E6B0C4782FB4AE3D3245F2794E2EF436BDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775718128, "uuid": "3390fb3e-aeb7-42e8-8842-cb695aff85da", "value": "6144:fu5xYSnMhv46Ja7TM0Qpuh0DAuSvjVN73Hr9GMX01jhF0WCZQzAhsSd9q:fyMh1J6wzpuhhdjrrHsMWcWlkSSO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775718128, "uuid": "1902e59e-68f3-47b5-97a8-f225fa90ac18", "value": 439048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775718128, "uuid": "32d85e9d-1ff3-4c2f-9254-f8568271a804", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b32e8896-33e3-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775718848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775718848, "uuid": "8f640031-3f40-4a53-ae15-14cd96082fee", "comment": "Malware payload (ConnectWise)", "value": "50b88167598035e9319b1dd0a597f639", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775718848, "uuid": "081af085-a103-419e-a7db-7dc5b5388a97", "comment": "Malware payload (ConnectWise)", "value": "94ac0444bc4aafc920999f325ec035b9be290e9dfd90e6de4d8faa2a152581de", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775718848, "uuid": "8a750633-09dd-4834-b18c-82171a78cb8a", "value": "T18AD622136BF89E67E0B1DB74FF365464A7277E055922B1EE1214790E2F70A8089A33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775718848, "uuid": "9ad0c268-6549-45af-a7de-4a7257538341", "value": "196608:nHxcp9ym3nltDUJVoHxcp9ym3EHxcp9ym3zHxcp9ym32Hxcp9ym3KHxcp9ym34Hx:RGplpjGpiGpdGpEGpYGpGGpy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775718848, "uuid": "935b8056-1e92-4fca-a844-fc5ce05eb057", "value": 13545472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775718848, "uuid": "0f84e181-876b-477b-b392-aa6b36a42079", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1775719093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719093, "uuid": "0f98fccf-33b1-476b-ac35-1dba98d0a6d6", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719093, "uuid": "3c13a8cc-e006-4e24-8be9-574874734b1d", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775719093, "uuid": "bfaaed43-7f22-4b86-873a-4b14341f71c3", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775719093, "uuid": "5e3cd143-cff9-4355-9366-36e5fee9ec6c", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775719093, "uuid": "0a1cb325-60df-40d6-8d94-3967b2575c99", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775719093, "uuid": "f17174d6-3d08-4d49-a924-fd37f651d9e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775719093, "uuid": "688f29a6-3c8c-4763-a8c2-7f24b5335b96", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7753f501-272c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1775721487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775721487, "uuid": "212f0015-c1bd-4eef-9322-deb69c188d86", "comment": "Malware payload", "value": "1e93b4bbc2dec3b675f72921c12cde1d", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775721487, "uuid": "155f76d7-d2ae-4c9c-8f2f-27824aade953", "comment": "Malware payload", "value": "95e6c6c13f65217f41c371abf6d03594b2bfed2259a1813bb4222fb2d3c32745", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775721487, "uuid": "8915e38a-66aa-465b-a318-51257b2c6c44", "value": "T146D57DDE194555E2D3FFB7A0C2B42E2E267173325C67691BA2FCA1C8CE103A66D43B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775721487, "uuid": "5bbb742a-eb79-403d-84e0-a05021f77347", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cG0dAtVJlzFrpf0:8UixbItdTrJoFVPMvXGlVTFrRid3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775721487, "uuid": "98298af7-ab79-4b53-883a-30bb46e0abf6", "value": 2939045, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775721487, "uuid": "842eaab0-d07f-402e-8d87-588f1f28334b", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8aff8fd-33e9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775721488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775721488, "uuid": "266ea258-063b-4dc7-91c9-339048b82fbc", "comment": "Malware payload", "value": "2772ebd6fe95211e26ca0a17fba1f7d5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775721488, "uuid": "e6f6ee82-e14c-4049-bfe8-b57f766ea4fc", "comment": "Malware payload", "value": "0d1397aebb49e7c6ba2e25915992f99c622e645fcc76f4aa6713dcf4ba966448", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775721488, "uuid": "0e78830c-68c0-4c14-8d29-e540150dc51c", "value": "T140C52AF698A5BF23B7B64E0863702F99501412370F9B015AB5FEC3C5E6839B9346F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775721488, "uuid": "3f30f07f-ccbb-457c-8a9a-2587751bea79", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFT/qNQbV:m0eF4xaDjDONijDG8ZxFTd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775721488, "uuid": "bc50c4e9-b928-4681-b7ee-835a95c1658c", "value": 2627678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775721488, "uuid": "2e1438d7-7f6e-4381-a6e8-1d6926f8f89c", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ada52564-33ed-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775723133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723133, "uuid": "17e09de2-4758-4f61-8828-56990a7e161f", "comment": "Malware payload", "value": "8bd34a5e87885850659ff8256e39647e", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723133, "uuid": "2edeb600-70b8-4284-9ecf-4ab20d81619b", "comment": "Malware payload", "value": "31f43ce394d1a174ea862cbc0f1917dbaadbe7d935fdc6efe6d7da7295b36c93", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723133, "uuid": "d3ad6b0b-0917-4464-b771-5c50cd55b87f", "value": "T1AC341231A287A5392256D12F71F2EACD7B7166A683D3BE0F2D0CC6417FC74493CA91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723133, "uuid": "608d7777-fa11-4068-bce7-2cfa9a90a321", "value": "6144:ixLlauio2bMEpgWv/Mg8Kfj4Y2PoVukKhepo6:kRypgy/Rf8UpJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775723133, "uuid": "7dea48c2-06fa-4163-a6d9-4c3fa788618f", "value": 252992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723133, "uuid": "a4f3c53c-4145-4f84-bb98-14ccf2ac3a74", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "add73d7e-33ed-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775723134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723134, "uuid": "ce42bcae-7490-4f1a-9ffb-acd095f965a0", "comment": "Malware payload", "value": "6c3720724423118e823661927b17611a", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723134, "uuid": "6b632ba6-2704-49e8-a944-a1a0a7203a59", "comment": "Malware payload", "value": "6f47afedc7f32f69b02c42f403fdcf9bd2b6b74b00ebc94146ac045cdb4a5f1f", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723134, "uuid": "e67d8aef-2737-4c9a-aff4-82eaa2c3c7cc", "value": "T11E64AC3C4F4596EC5237FBA9EE78343F5E2701A722B78841BE338A422EC1D554C766", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723134, "uuid": "390b549c-418f-4a09-9ffe-44cad3f326f3", "value": "6144:9KBSdnXQz4pPDv8jnm8WwBdTMBN+zIlwLPZms/jRG0AXmhmVpU:7dXn8Dm8WwBtMBN2IcpIWhmU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775723134, "uuid": "ef454fe7-6eea-4dea-89c1-8adcaf9d1983", "value": 329560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723134, "uuid": "894e7f27-bfa2-4fba-b991-bb64c699e2d2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7f0fd1d-33ed-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775723177, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723177, "uuid": "92899d1d-74c4-4346-82c9-57ad78864049", "comment": "Malware payload", "value": "a1e91c6451434b068af7fde15c4ca982", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723177, "uuid": "fe8a146b-0254-42c2-94fa-75b3d7555c19", "comment": "Malware payload", "value": "e47382a2fdba5df74f7075a8a71940de2bfbf5f9944cf941ff992110d9ee05f1", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723177, "uuid": "e18e5421-c68c-4c42-b976-e2e8c89bebf0", "value": "T1A8E36340B8E16091DAFDCE15A26EE934C576DC3049A3F9467CB0E96C5C3E1C1FF268", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723177, "uuid": "859cb06d-b88c-4e97-af30-85e1409e3c87", "value": "1536:Y468VmHl9DGK4TGWIPrXJ8aoXCz2MGB7c35yDJBhHl763B4Sd:HVVmHlEKXjow216wJBH763B4y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775723177, "uuid": "c13acdb1-4c0b-4d61-b0a3-2ba07d9e3b48", "value": 143875, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723177, "uuid": "44556fdf-6d72-42ad-ba87-fcc13dda2698", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea8a9160-33ed-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775723236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723236, "uuid": "8213e7f0-0ff2-41bb-a62e-be9aa8e20428", "comment": "Malware payload", "value": "28f9bdfc3e2cb0a281cbfd9e040aa671", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723236, "uuid": "4b52dcff-a996-49a2-b99b-8c591bcbfca3", "comment": "Malware payload", "value": "7e611a3d904da6ed7f2994b4a20bd95a25b167a6750842154b9d602bc09e89b6", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723236, "uuid": "bc0adcb0-98b2-4af6-9fb4-d4ff9821c6de", "value": "T17CC3706F026626D56D09C74CA264DEF0A0A2F0FEF7E6C21035D49A5822ED1D9CB4DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723236, "uuid": "6386ed8e-2f53-4baf-b668-6625e616de43", "value": "768:5JmdNzse6qdV3z916ICwwaoh7W9UEycUvOGCoo1Ln7htp3Ui0vhshwG8Ymz3sSyo:LmX6q/3z9H50K9U4MNieqikLUwtYk8fZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775723236, "uuid": "0c027f2f-abb8-47f8-81b9-33b949a07931", "value": 122024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723236, "uuid": "5ef9397e-2cc6-40a2-8d92-571acdcc747c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0abe50a3-33ee-11f1-bc00-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1775723290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723290, "uuid": "65801783-100b-43db-86a0-fd3f1cb79c68", "comment": "Malware payload (AsyncRAT)", "value": "2e4044d45f6548b8715adbda092a9cde", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723290, "uuid": "647bdd1a-4905-4b62-9157-a230dfe4b241", "comment": "Malware payload (AsyncRAT)", "value": "780cdc379a749d2adb5bf3b1290dabaf710477d5b64cfe71ee2ce1001880cdb4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723290, "uuid": "57fddb97-47d3-400a-81bc-62bf32d94d0d", "value": "T1E8533BF702135D8F86270E49E40C1311ECAD98E7B3D9D1EDBF899AF14A995588CA0C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723290, "uuid": "1af584be-ac85-4741-81f8-d041c74f0673", "value": "1536:JTjWGV9L86PGUEtjZwAB8UyeXXlH35MM19WTXPZQKlN:/Dg8UJ35/19W7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775723290, "uuid": "ffe1461e-7ce7-4042-afa9-5884135a4d2d", "value": 64856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723290, "uuid": "77714b7a-ab97-45c9-83ae-4bb36674dd95", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d1cd3e2-33ee-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775723347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723347, "uuid": "6bdd4e26-4ff7-40b8-b2d6-ddc1b93e922f", "comment": "Malware payload", "value": "7b73516fa88c684365f7c44291148a52", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723347, "uuid": "289a84d5-147a-41d0-b82f-9b835e3bb2bc", "comment": "Malware payload", "value": "effec92c86cd3418579d725147e87d569b741a2f8f361b8607782cf118e320fa", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723347, "uuid": "e0196a16-0568-4016-806b-c1d6fae96390", "value": "T1ECC52AF698A5BF23B7B64E0863702F99541412370F8B015AB5FEC3C5E6939B9342F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723347, "uuid": "a8ae36b2-2d02-4a06-9180-65b5b098ff6a", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTDYiOi:m0eF4xaDjDONijDG8ZxFTx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775723347, "uuid": "d8c361ea-cf29-4d2c-ae41-5b097ac9e6d2", "value": 2615698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723347, "uuid": "7ce44472-6781-4efd-9cfa-58f42c0d208f", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36f155df-33f3-11f1-bc00-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1775725511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725511, "uuid": "9d10eb63-1a82-4dee-a909-ad7c4362b508", "comment": "Malware payload (AsyncRAT)", "value": "1900a7f9c71e009eb1b7cd2c3abab095", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725511, "uuid": "ee41e6b6-990d-4601-bc96-445a24d5689a", "comment": "Malware payload (AsyncRAT)", "value": "9414e8f5d74be809e996922c13705762b2f3674c2efa8ac212f164c75fe1f38e", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775725511, "uuid": "035b0f86-6e65-47b5-9904-e868d832faa6", "value": "T129533CF612135D8F4A270E19E40C1700ECADACE7B3D9D1EDBF895AB54A994588CE0D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775725511, "uuid": "190b59e8-68ad-42fa-af57-16ea6249d20e", "value": "1536:JTjWGnXt8AUPJaPoVVXOYUm87FbzOAfH35MM19WTXPZQKlM:/dNUPJagVhzH8xCO35/19WW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775725511, "uuid": "1cbe14e4-1582-4637-a7fd-d8e10dd5c682", "value": 64856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775725511, "uuid": "f0d146a6-0333-4041-b762-a67710df6fda", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a46dd38a-33f3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775725695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725695, "uuid": "8a75d4ab-5571-4e29-82b6-91e20ab2678e", "comment": "Malware payload", "value": "e8b080c276519547e95930ab15028adb", "object_relation": "md5", "Tag": [ { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725695, "uuid": "f73f9686-55ea-48b2-9e7b-a645e3afaf35", "comment": "Malware payload", "value": "d6802fce5b918ed247ba85d6aa0545a8120cfbc3734b1c37794c4e381862d4ee", "object_relation": "sha256", "Tag": [ { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775725695, "uuid": "7e2ebf68-e1bd-4641-811a-6c8800045f67", "value": "T1E3958E46B3A501FCD467C178CD466217F672B4041774ABEF45A08A6A2F73BE23A7E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775725695, "uuid": "27653545-958b-40ff-b475-021ee51a589a", "value": "72aa3d705bc1c7cc7c6057e4a008c2de", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775725695, "uuid": "ca3680da-1b52-4af8-a082-f2edca5289b5", "value": "24576:MAbGrci1CVsb+JPrf+xp8esqhNyjAibJULb1hstRqGG7srGX8vCWI7JgZlHavtdP:VN7Jjfa87S1LktRqVzfHXxQk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775725695, "uuid": "6528cfb4-8540-4338-8d68-0e06470977f7", "value": 2058752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775725695, "uuid": "50d6294e-3b96-4dda-8564-885151ff9613", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2f292b4-33f4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775726229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726229, "uuid": "64a7dd13-fa10-4254-b3fa-69f5828152de", "comment": "Malware payload", "value": "0056a2159d2c4d098df33e52f7781302", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726229, "uuid": "14440171-56ff-4e37-94a7-c4cf7ec91c69", "comment": "Malware payload", "value": "90d321b51261dd9447d62ceca5ceb2887a6a51c2937aa3c1765bafd4de3f1d03", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726229, "uuid": "dc7cd286-7045-4635-a53d-aa849436f08e", "value": "T1A6D58D3B92679AFD5EAE3D24E4000ECEBC54D89BA05C42DD6F03AC7AD1F6940545CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726229, "uuid": "ddf83bb9-3b9b-4395-9cee-45a27a00b30d", "value": "24576:egugH6ONoX9ooWu2zY4otIz4V1ZrcPKJ29ZmZGPLAkDWOl17SxxHi6xXwZRXSk1x:5N2W0iZnRR+xJZugl+/kKVXR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775726229, "uuid": "32674135-d0f8-43bf-ae33-5975dc973b40", "value": 2804530, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726229, "uuid": "da89ddae-71a0-4733-a5af-9d750bfa9f49", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "730461bb-33f5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775726471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726471, "uuid": "5fffb19f-29a9-4a15-8193-1aac6486bf99", "comment": "Malware payload", "value": "a731995d0ef509489bbb96e5c7eecd44", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726471, "uuid": "0e489022-3218-4097-b5eb-99e057d5b97c", "comment": "Malware payload", "value": "d1ece2dcb7cf369cffc9d2aadf34e98aff177e071a79527552d634206d603bd4", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726471, "uuid": "4a50b36b-37db-4305-ba7e-7eede2c3839f", "value": "T17F6476FA6036ED8A86370E80E1043F175C299E8F66B847F8778815D5C19C68CADE75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726471, "uuid": "1e92206e-1972-4dc3-9f6c-5d2d914a83a3", "value": "3072:N6cioAmiB70woyo2HGTBoodAsT1IHf4hFZJ7+VNQvVfdyfdP70xzuFDW7us/DSMs:NligLoou6I/4rr1vVfdyfd83RH0lytq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775726471, "uuid": "8f157893-92a4-4325-9a1c-7f344c82dac3", "value": 320212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726471, "uuid": "b397c391-089f-47b3-b272-f1e89e12920b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8a72005-33f5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775726588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726588, "uuid": "85c54720-0b31-4f0b-8140-e243da36441c", "comment": "Malware payload", "value": "1ed663d757211f0d85148a70b9ac6729", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726588, "uuid": "31c9b241-6200-4779-b232-6c0c9d2ce520", "comment": "Malware payload", "value": "49be0a469cae7fd661c2fcc9c3ba1c92eb63844f91552b6e418a9cb0e656beeb", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726588, "uuid": "c9957f98-144d-4bac-a39e-622b600f3c32", "value": "T1AED56BA688B1BF13B7BA8E4873341E5D101426370FCB150AB4BEE7C67683975346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726588, "uuid": "f23c3e96-ef93-4ffb-bb34-2afbbcf4680b", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTUhvFRBW84FMotX:m0eF4xaDjDONijDG8ZxFTd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775726588, "uuid": "fcd14d2b-4507-4935-99b6-9bc011ff9da6", "value": 3000858, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726588, "uuid": "e4f166e9-1efb-4a0a-ace2-4af9689ee8ad", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba7e2e1c-33f5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775726591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726591, "uuid": "991099f8-fb5a-4945-b016-51a57d14efeb", "comment": "Malware payload", "value": "390a0c8645a19d4644a6fd6e83a74136", "object_relation": "md5", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726591, "uuid": "d01c96e1-cf44-4ffd-bd0f-76c2642b32b1", "comment": "Malware payload", "value": "07ee41817b9f338719bea03676ab607349cc3accba0dddb800f6276a01cfdd9f", "object_relation": "sha256", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726591, "uuid": "f6989e2d-6d3f-470d-b596-623e4b1494d3", "value": "T151C539E694A1BF12B7F65E0863741D5D212426370F8B050AB0FEC7C6BA979B5342F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726591, "uuid": "b290ffb3-d140-4499-b1ed-c2a13a98fd0a", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTR:m0eF4xaDjDONijDG8ZxFTR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775726591, "uuid": "c706ab90-2c3e-472c-b0fd-2699ff1c4519", "value": 2642868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726591, "uuid": "fc050b5f-062e-4808-8d11-1286855097ec", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7cb9dad-33fa-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775728841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775728841, "uuid": "0b511019-2a6d-44b0-9b8c-6298c4abf2ec", "comment": "Malware payload", "value": "4008527ec90447e99b85fc9188cb153a", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775728841, "uuid": "4ee54054-9a5a-42e1-a2b9-45f0f83ccebd", "comment": "Malware payload", "value": "33c188f95c24744ca5ada66d9820967fcee148a5c0771f91bb88f58d2cc556dc", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775728841, "uuid": "997b7bdd-00ae-4e31-8fb4-44c08ff3212d", "value": "T116B6332936F5C3B2E5231EFE8CA1F44C5AD2B431871E4DEB509457E7BE602B8B6391", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775728841, "uuid": "8ca0e9a9-f7cf-4c29-aeaa-8f94821a40c4", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775728841, "uuid": "a5af19c1-07df-4aec-a0e5-10f0000a72ad", "value": "196608:H2fqNikFqrspPosIYGfP9nIDBFt8n4bdh2q8SGvuazI6T9rJ6S2hhr6Qw/:JZFTBwfP9IDBFtddwsUlzI6T9lx2zr4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775728841, "uuid": "deb5b1e2-bb9b-4bc3-8bc5-6fceb6b70812", "value": 11417600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775728841, "uuid": "4e043d04-2107-4e34-9d3d-89b3385a6b4c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775730684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775730684, "uuid": "911d75d8-e7d9-4570-9531-1938ec3568c6", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775730684, "uuid": "33fe6d7f-8e71-4ca3-97f9-1462793f677c", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775730684, "uuid": "bf9454f6-4472-4a87-932a-c4064bf9558f", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775730684, "uuid": "2587e9b7-1a41-4cee-912d-3304b41e7870", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775730684, "uuid": "a9dfb547-39cf-4144-b4be-86c2238ea060", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ae43d2d-33ff-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775730725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775730725, "uuid": "1b8a48b1-eded-48c9-bb34-e05a7d9bb3b8", "comment": "Malware payload", "value": "d009a3f0973348a5b1f3b88820492a61", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775730725, "uuid": "c901eb15-5725-4670-9ce3-8ba50e6c5f6d", "comment": "Malware payload", "value": "798d9242d4f3a76196bf3fc1a2c2011e377ffc875bcfd218ea536193fc43c9bb", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775730725, "uuid": "ae006c34-0715-406f-9794-928bbd07189b", "value": "T124963377F9C1B037C4FE293602C8C3316F3E60529B97A9D371B8B5E58EA424265B91", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775730725, "uuid": "bb003975-1f3e-4066-b2ac-c31fc4f15e78", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775730725, "uuid": "c4c28e63-085c-441d-beda-7406ab4d7ce5", "value": "196608:tPrgVK3zyg80GOjbcIEw5fC0k7Ijza9wBWYWvOIv96c:tMVK3TznP1C5Ejzcw1Wvp96c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775730725, "uuid": "06449d39-2431-416f-8bb6-3902403f86ca", "value": 8614912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775730725, "uuid": "68b7ef30-1621-41ca-b8f4-ca78c68c6ca7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c6ce394-3400-11f1-bc00-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1775731211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775731211, "uuid": "da615e81-31b0-4911-a463-28574572b212", "comment": "Malware payload (QuasarRAT)", "value": "a71c9c9b77cf401a7f9a3a2e8a72f1f5", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775731211, "uuid": "baca13dc-1435-4e3c-ba80-8c14d40166de", "comment": "Malware payload (QuasarRAT)", "value": "525f29f1529cd9dfcba262b012e9170e32b4ddb184e1367e2d503733710b5ca2", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775731211, "uuid": "33095575-ec01-41ac-bc37-f182ef2a50f0", "value": "T1CD527A2C09BDFA5993D9E213E699F7276D4A1CAFC2B875172AF38C6890024C045EB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775731211, "uuid": "6e111e74-854e-4f07-be68-a5f3d061c3e6", "value": "384:Z0YYnMV3udrO+lGFk6GHX8TIU5Le9SbArVZ9tM09SsHZvlkE4wkLtocNNtOrEPJ8:mKc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775731211, "uuid": "ad95fed0-7c33-42f9-893b-ae9d27d07301", "value": 13844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775731211, "uuid": "6dfb9bb7-e2b1-4113-80f7-60d4929c2d29", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7dd50eb-3401-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775731740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775731740, "uuid": "a8847385-5160-4efa-912e-e21ac07d5f7e", "comment": "Malware payload", "value": "e842f327ac205fbab1a67d1c160d2c02", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775731740, "uuid": "46e85e53-d526-43e9-a653-e32b09216921", "comment": "Malware payload", "value": "317dbdb7797a504f9a15ef0207871ed8910d4a89c63874c16759800512e3def0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775731740, "uuid": "4c8d060c-3dd3-4d1d-b834-f2e7af3dacc6", "value": "T1FD5523117181C5B6D4BA027499F2DE356978343297BA41D3B2E827BA9E203F1B3363", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775731740, "uuid": "434f9fa5-8882-43d4-a9ad-4fb858539b4d", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775731740, "uuid": "1c82f3a9-8805-4726-af78-f1d6f57549bd", "value": "24576:jk70Trc4zC5Mzaou/qk2G+9YAosiaPKnXOxD8OBD9/0wSMRFNuYcw1PE1ylvsq:jkQTACCuzCq2+GAosdPtD8OD/OYFPEoj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775731740, "uuid": "ffc7bc72-39a1-4eee-a97b-d4c6e3af07e1", "value": 1303040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775731740, "uuid": "c36ab91a-9562-4567-afa2-68d063c72e24", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63859970-3404-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775732887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732887, "uuid": "3006a8c8-5ea4-4495-bc75-ace8cc5e39da", "comment": "Malware payload", "value": "d5ff2c45a5814e5fe85ad0291eb98148", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732887, "uuid": "a223afb3-2285-4ab6-9b7a-46a235ddbf7e", "comment": "Malware payload", "value": "a3c0b3a59cac5bcff5a9e664970ce3592ac9ac546efef14a5e1cd1c5e8147235", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775732887, "uuid": "936637dc-1c9a-47df-a4cf-6c139b8af9bf", "value": "T1666465F96036ED8AD7370E80E1043F179C299EDF667847F8B68805D1C29C68C99E75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775732887, "uuid": "1d127744-bc02-42a7-80ab-5663d39141fd", "value": "3072:46Te1tK0aTeFZoVZch4s14ZaJsbZoUQffzyvJqD8Ai5Xm9q6s+Qk4RM+cuq4IW8n:9ktpdFZPamVq68ZI4qT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775732887, "uuid": "282d2c41-2421-40a4-832e-1bff6c85c0e5", "value": 326366, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775732887, "uuid": "b75958b4-0f86-4ccd-b85a-64f54c9b52e0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63863253-3404-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775732887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732887, "uuid": "6ad706ff-a37d-4ea4-9d84-6982fa218f41", "comment": "Malware payload", "value": "f53195bc4e40016d234dd729e1fd229b", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732887, "uuid": "4daa9627-5c57-4cf1-90b9-a669dbd5bb9c", "comment": "Malware payload", "value": "42389223dc627c4243bd0c05a162d4d23d3b17e2f5f0b05cf0e9b9d269938236", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775732887, "uuid": "d3830b64-8997-4b2c-9448-3e0bb47966c9", "value": "T1266476F96036ED8AD7370A80D1043F179C299EDF6A7847F8B78805D1C29C68C99E75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775732887, "uuid": "5157229c-3148-49b6-9c03-b281c7ee17eb", "value": "3072:X6TRQDjsZy7vXTeFZoVZch4s14ZaJsbZoUPj9T8S2UDylXnX/q1W+ymzBMahurmw:ARWsQSFZPa9uq1I5D4TI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775732887, "uuid": "b5be119c-ee5a-4918-9939-beb224be8cfc", "value": 326366, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775732887, "uuid": "91545335-4a3d-45bc-879b-915cfe15e4e5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ba1f08b-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775736256, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736256, "uuid": "171b05b8-e3e6-4684-b1ea-4d46eabb9c23", "comment": "Malware payload", "value": "7326ee44e7b8b0ca54e16cd82e8cc33d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-48", "colour": "#935534", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736256, "uuid": "27833cfc-3013-4ed6-a64e-b22471697fa5", "comment": "Malware payload", "value": "be48389194cbdcb570e64c00b9960a8deef0282ba3def0524d87980f1e43f690", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-48", "colour": "#935534", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736256, "uuid": "3038e80a-3759-497b-b1d2-48080456d3e0", "value": "T176E02BDC33A038266FE841A364755508C405F0BBCE9551E8E5BE97178D8DB18BE37E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736256, "uuid": "75a1f142-5058-4898-8512-fa69ea1fd277", "value": "6:nHdQCLW6dSaa1tUUHcpUXdQRWgb2966uujW0sA+fW6doOa7KFGmaK:nHdVLJsB18c5A6QujW0s5fJdoOa2Ffb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775736256, "uuid": "2d818059-a04a-4060-9569-6f95261bfe28", "value": 298, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736256, "uuid": "91786e76-edcc-4cdf-a58a-4b4b51339d31", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "836d993d-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775736377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736377, "uuid": "45f45907-2f5b-4e7b-9dfb-0d04324ade3f", "comment": "Malware payload (Mirai)", "value": "7e3e2551b17f7dacd220df47e9b9d594", "object_relation": "md5", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736377, "uuid": "55def79a-980f-421b-8f7c-da7e0d670bf6", "comment": "Malware payload (Mirai)", "value": "a8d6bc46c37c1da5c4c5d9b32f3f1ce168a4650a8150f8217b15ac06d3631753", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736377, "uuid": "60244ccc-087e-4700-8f63-27e97614f51b", "value": "T1AB04B50E6E198F7CF79987345BB79E31925833872AE1C582E1ACD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736377, "uuid": "a8d08ec9-efbf-45f5-92bc-08acd6b4e880", "value": "3072:1OATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/QBrj4jTv3TcJ2tD2a:1OATXjpCgqDJHDexBJKfjPV4kuMu8hJj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775736377, "uuid": "d386a559-6b3c-4865-a355-4c6279916753", "value": 175820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736377, "uuid": "bac730b7-f7e0-44bf-824e-4da46d690a54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "836ebe9f-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775736377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736377, "uuid": "5e269079-817e-4415-906d-feaa216f5adc", "comment": "Malware payload (Mirai)", "value": "a520e4cf064e3d85b7ed9fe2a65d21a1", "object_relation": "md5", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736377, "uuid": "0189c90e-c273-4235-a02b-907941ddf67b", "comment": "Malware payload (Mirai)", "value": "809f801bbc4dc03ff100301f3cdeb4010566323d38cbc51725e6f4fa4da75040", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736377, "uuid": "c3a8457d-c576-4b03-a6ce-e6676bfa840b", "value": "T10ED33851B8829A27C5E523BFFA6E028D331563E4D2DE72178C215F217BC691F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736377, "uuid": "fd56e908-611c-48e2-bf91-cb943051a322", "value": "3072:JuVeGJFWOgt9ctajH1I7sg41o+YLyXzXgvd:JuVwt9cUH1I7sgMeLmLgvd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775736377, "uuid": "0c5d0fe1-777a-4d91-8d36-cb82fac797dc", "value": 140756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736377, "uuid": "153ca893-ebfc-4bc8-9de5-576bed2e5278", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "838b29d7-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775736377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736377, "uuid": "222a68f0-f585-4548-8888-e985ff138705", "comment": "Malware payload (Mirai)", "value": "6c92e7473a4e178c9c1d0f0f13984d26", "object_relation": "md5", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736377, "uuid": "feebfa8d-4032-4d69-aeff-841fdb81a3b1", "comment": "Malware payload (Mirai)", "value": "83d36992155afe939161adbbd965625e3a39204e38ea85345f7de789b4732588", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736377, "uuid": "7325945a-d700-43a2-b416-5d76805dca34", "value": "T14293E551BC82562BC5E023BAA67E668D336477E4C2CF722BC8214B257BC561F0C63F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736377, "uuid": "dd360fd9-ccd9-4a2c-a523-a8da30b86140", "value": "1536:Cd+t0rbCuNhS7CVha4m2WiLMBZO+WC27nVDuw8GSr8zn:8+tsCurVDN+ouw8Lin", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775736377, "uuid": "8715cbca-2905-4272-8c2b-43eff94e9ff1", "value": 95720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736377, "uuid": "bab6c1dc-38af-4502-b2be-9601fa998f6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83a9af97-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775736377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736377, "uuid": "0ba3d9a9-1885-44af-969c-f8f33357a03a", "comment": "Malware payload (Mirai)", "value": "7aa971c47c85b887dda8f2624187c47c", "object_relation": "md5", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736377, "uuid": "4b2284b5-970a-4a48-ab56-14220618e11c", "comment": "Malware payload (Mirai)", "value": "a9f87cc58356034f32cb89480462d5345d20e62559730e95db290cda1e92991f", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736377, "uuid": "168aa647-4d67-410c-aa51-f2334069ab15", "value": "T1C7344B45FA418A13C4D117BAF9AF414A3332A795D3DB730699286FB43B837AF0D676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736377, "uuid": "c4ea976d-362c-4e67-9b06-27ca34cb3f0e", "value": "6144:W8tTPA0OBzabKacEK1dAnJd7wLfdfM/9hWfAU:W8RAVBzabKacE62JCp0/yJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775736377, "uuid": "57a75516-3abd-4994-9aea-391dcc3df3ef", "value": 231680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736377, "uuid": "944abe32-acfd-4302-ae8c-84746ba38dac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7587eeb-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775736437, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736437, "uuid": "352938fa-c9bb-4329-8fee-a334dc8085d8", "comment": "Malware payload (Mirai)", "value": "e23691909c9e36152060651826878609", "object_relation": "md5", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736437, "uuid": "38c9aa92-4d13-4be6-be82-34b0b26422d2", "comment": "Malware payload (Mirai)", "value": "db1096bca46b7d08452662ae51b3d9085593672acc1b4c7158edb1d1e0965ece", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736437, "uuid": "9acc480a-2830-4d10-b412-56951355da53", "value": "T10A041A05BF150EFBD89BCC3B45F9270529CC581A22EA6B36B934C858B54B25F1AE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736437, "uuid": "3a40a2ec-cfda-45b4-8e04-e2841e311006", "value": "3072:J60NEpL/RdBtJN9xFZ9hkOmG5RdelJgtTwn2APPMnEzvQ6WJ9G2/7ZiYlTBVmJTy:J3CTRdrD5GFnrPUEsNzZt0b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775736437, "uuid": "e9b353ed-3e1c-4d60-82c6-74c17de59945", "value": 179916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736437, "uuid": "fbb53a3b-a709-4762-9193-11814ed1fb8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7599d2c-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775736437, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736437, "uuid": "dfe596d7-55f2-45f3-8bea-80a586a903c7", "comment": "Malware payload (Mirai)", "value": "cbdb861b98fa9b643961985e0145730a", "object_relation": "md5", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736437, "uuid": "9e792e82-45ad-4aec-a868-ccd12d20bab1", "comment": "Malware payload (Mirai)", "value": "15526d9238ac1e1e6d1cc334b8bf3ccb62793ed2974de433e2c19357674f6dc9", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736437, "uuid": "53554d18-15db-40c9-8513-b0e56a10c03b", "value": "T175C33906F58180FCC58AC2341B6FB63AA936F1DD1238F2E76BD0AF123E4AE615D1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736437, "uuid": "1f91ef10-9500-4230-9158-f592734ba957", "value": "3072:j586guLRkHQo8SsGTHb4p1oB4n2pvi5zlLVPmbGHzNzQSRN6Fpjygbjc:jrguLRkHQo8SsGT74p1oB4n2pvalnBzi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775736437, "uuid": "60878097-db56-4d26-9bd1-8cb503e8494e", "value": 126272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736437, "uuid": "0cf0eaa8-4621-49bb-8b70-34573adf372c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a75aa893-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775736437, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736437, "uuid": "c9bb431e-c56a-4d32-a1b7-df53baee8b94", "comment": "Malware payload (Mirai)", "value": "6a6285b9242f1bcb69ff0112fd60ff2a", "object_relation": "md5", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736437, "uuid": "072cde5b-1100-40ab-be8d-eaa544525453", "comment": "Malware payload (Mirai)", "value": "c3499a3a7d2a9d8d43556848d2ac6113f0297ed6e5d11a27ea5374d95d66337f", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736437, "uuid": "0d1aeeed-be33-47d8-aa3f-95b9d5df5d8a", "value": "T179E34A55B8828A22C9D513BEF92E018E331367A8E2DF7213DD205F2477C796B0D77A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736437, "uuid": "3f7b0b3f-884d-4c85-95ef-fe65e565f996", "value": "3072:CotWnBLigk1Tc3ECC0DvZe1k6aU6zL6EiueCo2kD:VWnligqTcUCCqeS6axIueckD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775736437, "uuid": "b6266bf0-d3c0-43f4-8717-95c407b932d2", "value": 146256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736437, "uuid": "48c25525-2084-46cd-9288-7ea008580e13", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a75bed2f-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775736437, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736437, "uuid": "c0a4bc14-3636-4a1a-9b9f-91db706fccb9", "comment": "Malware payload (Mirai)", "value": "8f13612fdb86b11930d950738bb23c17", "object_relation": "md5", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736437, "uuid": "486f28b4-ba94-4690-8d41-6b94590d4c4e", "comment": "Malware payload (Mirai)", "value": "51ff554627be538909c240c936f855bf9638b6c1862bc20e79f0a883f16cc706", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736437, "uuid": "91f19847-a705-4ffa-85e0-453cb93bb69c", "value": "T136D33A2275791E2BC4E4A87E22F74761F1F157DA25A8C90E7EB20D4FFF212206507A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736437, "uuid": "7f2f9c41-d892-45c3-996a-810b31ac19fd", "value": "3072:nZUlV+Fawd99IVWFjKc7RgyhOFe30Hi09lshKwmh:ZUH+FD99IVWFt5OgEmhPmh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775736437, "uuid": "8bcd4a7a-37e1-46fa-b81f-88defab276e2", "value": 140776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736437, "uuid": "c07d4ce7-b60d-446d-abee-6a0d4e1c09ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7642e7d-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775736437, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736437, "uuid": "6fe58072-f68e-48b8-88f1-2c7378f3942c", "comment": "Malware payload (Mirai)", "value": "23e393eea7b8871568ffb1ca9d33b86e", "object_relation": "md5", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736437, "uuid": "bd11a985-c967-44fa-8532-4b5597573e6c", "comment": "Malware payload (Mirai)", "value": "582bc36a6fd5527342b1d65f8c51f73a3443db35bdf550e99c50ec25c4be873a", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736437, "uuid": "675183ba-f59e-424a-9fda-acd37be586a5", "value": "T1FCD35B0673180E17C5E349B02A3F17E483FEE5D121F4BA89691F9B6A4672E771482F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736437, "uuid": "3a19f635-a1cb-45b2-a532-9d942af49176", "value": "3072:oWGIf1/UwfhJdU80rntbYUaDGMsMA9TK4t:oWxN/UUDGtbYUaiMsMApK4t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775736437, "uuid": "b0631910-fb76-4904-bb68-5e0d518e1aa7", "value": 134840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736437, "uuid": "e4fb1092-daef-4bf0-abc5-4f2ca1c6d3f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb5618cb-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775736498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736498, "uuid": "6bf2668c-49a9-4f6b-9ec2-d8fccc08b3ce", "comment": "Malware payload (Mirai)", "value": "6d5f01d18fed9fd4b11a3b1d714d11d8", "object_relation": "md5", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736498, "uuid": "2632afea-9109-4b2f-9234-90958671e5a7", "comment": "Malware payload (Mirai)", "value": "2462c317721481f28ee6a3be9f204472bfa3ee5e76e66d8ff16a1ae55d784c60", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736498, "uuid": "acac75be-1065-409e-8325-8823d660cb0b", "value": "T130B339C0EA47D4F5DD1642302277F73B9A32F17A1139DA83E3A89F327C52A41D90A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736498, "uuid": "fb4aed7f-4278-4ca3-a307-44a867d61102", "value": "3072:XFmzGpEWmXBLFkpzjYS3Z/5+JcDEhBohHw0pJbLy:XFmzY5mXBypzjYYZ/5+JklHLy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775736498, "uuid": "c6811301-eb84-4889-8673-71438e360e77", "value": 107824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736498, "uuid": "77078c0d-388b-47b6-8d54-302071256e14", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee40ef56-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775736556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736556, "uuid": "630c58eb-c74b-4578-8d07-f2d02ff6866a", "comment": "Malware payload (Mirai)", "value": "286d210bd53f810c32bbc0bf4d87ce18", "object_relation": "md5", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736556, "uuid": "ce041ad9-a8e2-4561-b10e-0ace63e2bef7", "comment": "Malware payload (Mirai)", "value": "c42e74392b723b4bf65e0d50e862988591eea696038f8fb890f5fa99cb1c49d6", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736556, "uuid": "c5fb2d93-2f48-41bd-a9d3-1bfc36279ce9", "value": "T160C3AE73D42A7EC4D1514030B8B5FEB51B61A5C041935EBB26E9C87A00CBEA4FA0AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736556, "uuid": "658b617a-2d53-4a54-9a92-600fc1855ae9", "value": "3072:hfpZykqkt436I+9eIHEmNOkSMPXeC4GnHl:hRZ0F3BcfNOkvZhnHl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775736556, "uuid": "f57d57de-2009-4f99-b4b1-7cc92fa5071a", "value": 120332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736556, "uuid": "296ac886-d8bf-4221-8eff-8dd73cfe7603", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee4772d7-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775736556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736556, "uuid": "8695b28c-c902-465d-b361-00b6b58abff6", "comment": "Malware payload (Mirai)", "value": "7696b48a6b3c888e410ef006f346f40e", "object_relation": "md5", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736556, "uuid": "1bfa60f9-e98c-44a3-a02b-1ab965684830", "comment": "Malware payload (Mirai)", "value": "0bc7209d06b3177b451f080d061e58a2d5e0e902b85bc9e01170377dfb798ef8", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736556, "uuid": "5fd54fc6-7356-4715-8a21-f3edbca82b90", "value": "T1A3E35D8AF4029E7DFD4FE5BE44670D09E931A39131830B2A53DBFDA3A9311A94D17E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736556, "uuid": "ec7a52ea-3216-4935-ac32-66981dcaac22", "value": "3072:7oDlIyA+oy+ZGiTp/lZoEhH5lgLOoe97dlJ8jM4:1Dy+ZGPEFxoe918jM4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775736556, "uuid": "d32eb2d4-e7ad-488f-9379-e5f6cbda9bc8", "value": 147336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736556, "uuid": "a6765982-9610-43d4-a475-6da1f1cc6c3f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffc2ade0-3416-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775740881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740881, "uuid": "0a489985-a833-4288-a9a6-897c55d4fd88", "comment": "Malware payload (Mirai)", "value": "51a09058056c316b51450d03bfdc62fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740881, "uuid": "cd83232c-94a5-4266-9894-9a4a75db50fb", "comment": "Malware payload (Mirai)", "value": "60a4ad4fe63c51594856748ffa30da5358113e9e2aa7085c8ad06531282a127b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775740881, "uuid": "4afd681e-0957-43be-8d4b-664b41b02446", "value": "T1A3D4CF6AE9156A2BC0C6433481D7D2346377E0815B827302A548FA7D3D927BDCF3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775740881, "uuid": "6bfbb919-e15f-4cfe-9ba3-1e5cb9d5e5ea", "value": "12288:cqUfQpPnBSSvEglaUuzxu6DJO/+vZbj/oGq6KWSs5KkGZ4MvnSyYtrmC2n:cqUf4pWUuNu6Dw/+vZbj/DKW3GHayYlS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775740881, "uuid": "df7b94b3-d394-482a-805c-a99422625185", "value": 626952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775740881, "uuid": "5f66665f-a19c-431c-8f51-cb13f9531d9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffdbd517-3416-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775740881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740881, "uuid": "54e03d02-3f57-454c-bcd6-ebfa651650bc", "comment": "Malware payload (Mirai)", "value": "1b840d6707137dd57fdb653602456489", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740881, "uuid": "b7e06993-cb53-4c41-b755-37fff7228616", "comment": "Malware payload (Mirai)", "value": "89b04f91aa3e10dc0eb2f9f7f3706b3fd290554bf8296beaa0ba9cd28c3c0065", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775740881, "uuid": "3b506d7d-5820-4abe-80dc-81104e5c1aa4", "value": "T107156B42FB1C4523C8570EF1197F43D5F7217A4341F5A22A270E6B672622E3AEAD73", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775740881, "uuid": "96562b4d-7c62-4c1f-a017-e6eb4fece496", "value": "24576:vC0x1jhC2Ls3H3miZaXQBQGDGx78AJiYEcLZ4b/6aCm:vtx1NC2Ls3H3m9QBJGx77i/cLZ4b/b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775740881, "uuid": "098fd2e5-5c21-473f-bf11-7638117d31ab", "value": 930492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775740881, "uuid": "e8e42a34-05b4-4cbe-99b9-77c2200b16c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "451f00cf-3417-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775740997, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740997, "uuid": "c5645394-0a22-41da-8cf6-7442dbb12c6f", "comment": "Malware payload (Mirai)", "value": "586af034ff78c07664f2bd56f04c5b39", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740997, "uuid": "5463bf36-18de-4b26-b0e4-5bacb11c0fb3", "comment": "Malware payload (Mirai)", "value": "0c0bc0c3e4f3d6067ab7d3945f7965d97c180476db277386bb1cec93dc0d5a2e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775740997, "uuid": "e35e18b7-24af-403b-9bfd-a53e3ce73833", "value": "T1D4057C9AFE5E3C47D2D7E33E9B8AC3B1622BB590D31341537581022CE5C6ADCCBA1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775740997, "uuid": "a981aba4-97aa-49d2-ab39-3a6f3b27975f", "value": "12288:vnfzDIEtQhZGowNJ1fibugWrvaNDrgXnlcs50Vqlu3vbKn9FZo2SO2O:vnLsEpoqfibobaNIQqAGDZXSO2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775740997, "uuid": "2eb98546-61bf-4585-82c5-97a0fc1b54e3", "value": 805280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775740997, "uuid": "7561421d-9d29-470b-bfd5-e73a85b64457", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8b61b3f-3419-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775742103, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775742103, "uuid": "9ab7c8b4-a1ec-4de1-be14-eeaf8de5a1ac", "comment": "Malware payload", "value": "ad2e4fdf8d7c3062c63f74c3262ca5a0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775742103, "uuid": "41e48248-189e-4fec-967e-ac6bb79fe17f", "comment": "Malware payload", "value": "185b6d3f34acd1284f84b81993a4826f7251bbbe4030ce22f01c92f2d93e50a4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775742103, "uuid": "4de02c46-6b26-4932-909c-cb5735dcf330", "value": "T178E020CE64D1CD7038414DF7B0604906D4CBD8CD0BA24FC456C8107F584ED08B693F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775742103, "uuid": "d9c59df7-ebad-4e93-b299-ea1af99a756c", "value": "6:ebAAj73w5/KiYEGvwW2AVFhGq4XXQZrKGy3D2QZrKGygt9MeuXIW/n:7AWKZHY4uqDZrKGyT3ZrKGygt9MBXT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775742103, "uuid": "f94416db-6da3-40f0-b601-2d449a38b481", "value": 348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775742103, "uuid": "38b27e90-097b-4279-851c-ab8f5c30c012", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "532dc323-3335-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775742408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775742408, "uuid": "8fcbe047-fd90-4b8e-a6f7-6969bf7baecf", "comment": "Malware payload", "value": "68f30f2f7525c3d211495754a458c249", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775742408, "uuid": "fa4135e4-d355-44a8-bf7e-1dd664a514de", "comment": "Malware payload", "value": "62e1afaa0557c0e9db644b8f5aee18738559785d365a0e091af06bd5705918a8", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775742408, "uuid": "b8607870-208f-4044-8199-1d0985b3c876", "value": "T10011049759048C15422483696CD0F5048887D24B47C8E8C475D7D0FE54A57D1C6BB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775742408, "uuid": "a666a4b9-7751-40e1-af7b-eb6030a21623", "value": "24:0p/P67YHRFDZnN/fnN/SeKhV1vObKwPWBNVgclJM:0DD9NnNkhV1v3wW1JM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775742408, "uuid": "61f2d9c8-7665-4cbe-9804-3a9d07bea6e9", "value": 904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775742408, "uuid": "2732ee3e-f217-4379-bb53-63950b043268", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "352c75ff-341b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775742688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775742688, "uuid": "3d276618-b31c-49ed-bf37-af06bfc42d2b", "comment": "Malware payload", "value": "e3a8c06a2726c1ef5176368c47313d5e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775742688, "uuid": "5af412df-fadd-408c-9714-6ef73715bd8b", "comment": "Malware payload", "value": "1e2c170fd8c0bd0d459af7d1717e4375d9a813a51fee716baaa8dea5b8e4fff5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775742688, "uuid": "a92a3e14-7469-41cc-a714-86737ee9d7b0", "value": "T10293E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775742688, "uuid": "85b59225-7518-4488-96ce-b622c426fa93", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXsIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775742688, "uuid": "5ab8205d-8029-456c-847a-cda41dd3805c", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775742688, "uuid": "af26adc8-4ff3-48e3-8220-c873e7b51443", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d63c0645-341c-11f1-bc00-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1775743388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743388, "uuid": "d382478c-ae67-4f27-b2ef-b49689d9944a", "comment": "Malware payload (njrat)", "value": "7a5d43b0f969cd345d0fbac7c404dcbb", "object_relation": "md5", "Tag": [ { "name": "147-93-3-139", "colour": "#f2f09d", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743388, "uuid": "76ff14b1-ceed-4c0d-aca8-0d185128c68e", "comment": "Malware payload (njrat)", "value": "f49d12a0fde981beb9bd9060f5f7caad8929e213b38f65dcf3565623828542d1", "object_relation": "sha256", "Tag": [ { "name": "147-93-3-139", "colour": "#f2f09d", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743388, "uuid": "89f11717-8a3a-49c5-9092-e42e5678a69a", "value": "T1935522176EBF3DEAE56600B6C168588DA721BD7103209F9FD2167D0F3E725C98C3AA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743388, "uuid": "b7df7169-53c1-40a2-9d02-b83e4f3d43cb", "value": "fa18060b9e29639e6b6e200299ec84e0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743388, "uuid": "0082efb4-3496-48dd-8b50-a2aa283f7cdc", "value": "24576:BEDOIfTYc3sNVTfXBytpOjvo2f9fzBNU0sScTZ3H:FIb7SP8OjQ2LBNU07uZX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775743388, "uuid": "41a35cab-87d8-4a7e-bc10-ea7972f682cb", "value": 1320960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743388, "uuid": "9e8ea87f-0869-4a1d-92a6-777fc646899a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21b2e3ef-341d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775743514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743514, "uuid": "e4c1dc46-a2eb-47a7-bdd7-4ffa545f3bb5", "comment": "Malware payload", "value": "418c603fdce03c3394a5fe2c354a1e49", "object_relation": "md5", "Tag": [ { "name": "147-93-3-139", "colour": "#f2f09d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743514, "uuid": "1d379a08-e96d-4bff-9e41-6686d7e5a1bb", "comment": "Malware payload", "value": "bb5c45cb88abb1ca0310bc1ac8c1cb1c723bd82768f28635ffe06450803ced04", "object_relation": "sha256", "Tag": [ { "name": "147-93-3-139", "colour": "#f2f09d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743514, "uuid": "95f09ced-a13b-4783-a201-7284cdbab06d", "value": "T1C1C633A023686CF1E7ABD03E48779559D931BC1A13A5F06783B8C2AA1F2B3703D376", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743514, "uuid": "8f6a93b1-449b-4f85-9742-d377b182d245", "value": "1e92fd54d65284238a0e3b74b2715062", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743514, "uuid": "0712578f-6ce0-434f-82e9-54d5ecc92541", "value": "196608:PXNlfRuYiiLnbWJWH4Lc35IdQmRrdA6lkaycBIGpEVSE0iuKe1CeKELI4:sY5WJVwJIdQOlp9FzRqV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775743514, "uuid": "b9f6950d-30ac-4e44-8de6-a45fa09a968f", "value": 11815699, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743514, "uuid": "f592b4d4-507c-4b7e-af00-6bf9792af176", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d109b2d6-341d-11f1-bc00-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1775743809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743809, "uuid": "a1ee2d75-a79e-41b7-8613-18d88620bd90", "comment": "Malware payload (njrat)", "value": "b323c2e5fc6f49a598d9323798c13c40", "object_relation": "md5", "Tag": [ { "name": "147-93-3-139", "colour": "#f2f09d", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743809, "uuid": "0906ac1c-de26-4605-ba6f-32362ae7c0cb", "comment": "Malware payload (njrat)", "value": "7f0d2adbc838115943ee2d5b779e51070c81038df16cab31c8449ea01189cce7", "object_relation": "sha256", "Tag": [ { "name": "147-93-3-139", "colour": "#f2f09d", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743809, "uuid": "86815440-139f-4fd1-8d29-fe7813b00b8c", "value": "T1F055235F2BFA34E5F0328B32C9480F40FB72BD7A5350976F02D4429A5E565E19E2CB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743809, "uuid": "c63d8014-7914-4f98-9a50-1686c5b76a64", "value": "cba2f4ba69a75af73684957a86e1152f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743809, "uuid": "58ff548a-db16-4482-bec1-4b9d589a80a4", "value": "24576:xR8g0OxeBrYkRyJP5ComrFwbO1SKazMKxJeNJtURLvMPDefSFcW:z89eeBxSbg0oNJtURQyecW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775743809, "uuid": "e4075639-73b3-4329-b868-ff258a78ac88", "value": 1299568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743809, "uuid": "bbca7d0d-ad5a-4f8b-b288-639c8b14c6aa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4c1c049-341d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775743869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743869, "uuid": "09087742-f193-48cf-868f-d030fdd0cda8", "comment": "Malware payload", "value": "a221c92dff41227da5c2851bfb64f723", "object_relation": "md5", "Tag": [ { "name": "147-93-3-139", "colour": "#f2f09d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743869, "uuid": "d293b9f7-9fb0-4b5d-93c5-b23dd85eafe0", "comment": "Malware payload", "value": "6d2124b2ee39ac19b8cf52a1f214c3c1108414987b1428d1dbd892b4dca7f7ca", "object_relation": "sha256", "Tag": [ { "name": "147-93-3-139", "colour": "#f2f09d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743869, "uuid": "00fc5b65-8546-4930-98db-dd7259f56e6f", "value": "T12806335763A834D9E52E8232C2E31D79EB76BC352182CBDF817552169F676C0CC389", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743869, "uuid": "8e63e14c-d072-4ead-8137-4145d628d527", "value": "009883bcd90bc72fe04a42dec52ab186", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743869, "uuid": "58109afc-f4ed-481b-b300-8eb19861da16", "value": "98304:YB7lkucFDpe/G9fCTY/SnAsIzdjOlvdfshuJtynPBNnbrUc:YBFqph9f+qSnpmOllfshuJwnXnMc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775743869, "uuid": "a20df811-fafd-444e-b7bd-89d7d6185966", "value": 3773952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743869, "uuid": "680a2fc8-8213-4730-a4a7-c9e5f05ec1bf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02e322ee-342c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775749905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775749905, "uuid": "9e24a262-e6da-4892-b47f-d1f585bd23e4", "comment": "Malware payload", "value": "6c46e8ebaffee594f08c71ff9a034a05", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775749905, "uuid": "b0f27ff8-921e-4087-aeb8-d0a5f8be5ed8", "comment": "Malware payload", "value": "19840f8cf0fe038d18bae27c0ac6bfc74d1d7651591afb250ffe39f68589d590", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775749905, "uuid": "85fa84cc-231e-4c7c-9965-29b9c6e535e9", "value": "T1778309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775749905, "uuid": "f36a6d70-ebc1-4a3f-8ae0-5098dc5c89c7", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnzWanVN/:XEKltp9txAX/yr2pbzWiVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775749905, "uuid": "8c2b9579-8f80-4eb3-9b74-0e7fc65d81b0", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775749905, "uuid": "e7928ec2-4b1a-4cf4-b1bf-c22a4ad9d888", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2d7c00b-342e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1775751113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775751113, "uuid": "8ca3a0e8-1891-4561-b643-33ed25fa4df8", "comment": "Malware payload (Adware.Generic)", "value": "976c5d23d435d78543f118e441d655ea", "object_relation": "md5", "Tag": [ { "name": "Adware.Generic", "colour": "#A3F5F3", "exportable": true, "hide_tag": false }, { "name": "Adware.InstallCore", "colour": "#51c189", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775751113, "uuid": "4ef2905d-4d53-4d21-be22-0cc7ec2f7fca", "comment": "Malware payload (Adware.Generic)", "value": "34e275714c7a2f273073143ecf1db23fdb1088ae763b575a4fd38e320bfb8aac", "object_relation": "sha256", "Tag": [ { "name": "Adware.Generic", "colour": "#A3F5F3", "exportable": true, "hide_tag": false }, { "name": "Adware.InstallCore", "colour": "#51c189", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775751113, "uuid": "a397dc1f-3716-4178-9835-94508ba96b1c", "value": "T1AEA6233BB268753EC56E0B3245739360997BBE91A81B8C1E17F4294DCF368B01E3B6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775751113, "uuid": "49ac6862-d49d-412e-9dd6-daf6720072fe", "value": "e569e6f445d32ba23766ad67d1e3787f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775751113, "uuid": "8343301d-71a5-48cc-adc7-65b6f2817e15", "value": "196608:mb5fGtU0nrw1ey0Exy/zuzev6pFIpY2Gy7FPDyCo1Q0InrZna0Ke:AsU0noemULu5fI6q7FPDyCp0IBZl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775751113, "uuid": "f9ca1280-a359-4f62-a048-b1efbfbb9b3d", "value": 9510823, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775751113, "uuid": "b51671aa-da82-460f-84d0-3499991dc3bf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "422a1ead-3430-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775751729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775751729, "uuid": "5e8c5b71-3d84-4914-882f-5252d59fbe78", "comment": "Malware payload", "value": "1b39baef3d9f38e5b8a391b8cd330f0a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775751729, "uuid": "c6d161e1-fed0-4627-846e-48d2efd3cdff", "comment": "Malware payload", "value": "d86049cd28b4e02706b80356a307cfabffa6802fd03e2eea0543f3fee3aa9392", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775751729, "uuid": "7ee09d36-a2d9-4275-9480-4edf79c0fb2c", "value": "T1F4A5F10CE2066CB3CB37B2BD549B5643D771B08111DC5DA26EC26AA92B4F2143F725", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775751729, "uuid": "4109550f-889f-45c1-9c71-7979591e6ce2", "value": "49152:L2glAK0Chi+W1brV85pxfL7dMs6gUb3Bmuiv/N:qm0b85rv7RGTiv/N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775751729, "uuid": "aa9e3e3c-d7c5-4f6b-a294-685a42877753", "value": 2148498, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775751729, "uuid": "5dd2e4b8-cb23-41b7-ad53-82e78ebff92c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba6c5c03-3432-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775752790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775752790, "uuid": "38d47beb-2198-4b04-9395-f4def26a3c48", "comment": "Malware payload", "value": "941c1146df1df2c34c35bcb6414ab369", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775752790, "uuid": "5bdc2fdd-e5db-46c8-ad27-5418539276d3", "comment": "Malware payload", "value": "8b2423998a01a616fe73a8430f9b87b3e6a3a38d13000c248ccbdef1a55705c6", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775752790, "uuid": "c7e00363-626b-409a-8d75-12ced983cc70", "value": "T19BB20E3EC9849FF00B2A31E5AA6F7A1665580363B5382A4D7DCBC19D3B35650CBB10", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775752790, "uuid": "3d7d75e8-9aee-4ffa-812c-3fe87839db8c", "value": "384:KGTTDSJ2YtYzF16EfnKyPmQogwcasicoIK7hLBcRjOV5OSo+KHK0F6f5HyCHqQ+K:KGDK2IM/PmQ/ANmk6epHKKpIZ1g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775752790, "uuid": "656870c5-284e-4843-bc0c-b993e66ec01c", "value": 23765, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775752790, "uuid": "d5ef625e-e175-4649-8cb3-77fcd385c507", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f887b5c5-3433-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775753324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775753324, "uuid": "56d432f0-783e-4481-bce3-1fd1436160f5", "comment": "Malware payload (Mirai)", "value": "4b0f835bdfb88fd777302ae14da1268d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775753324, "uuid": "a4acb445-05c1-422c-b48a-a4b3439e0123", "comment": "Malware payload (Mirai)", "value": "0d1569dc05f6dfade49c252984a04fe373242badc6abce425f9feefc297f602c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775753324, "uuid": "59969179-c614-4a8d-abdf-0443fef7c9f6", "value": "T153055B06BF405FABC4AFCE30492EC35B11EDD9C746D1A62A71BC4B8CBA5D65A0BC35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775753324, "uuid": "2ccf6df9-04ad-4e3c-8770-17e28419e0bb", "value": "12288:loltINVHMQEMLlVVH2KLSEI9jplVKeB4XZKBtheMqwd0ErU0dvNPE9F9fcmt/HBr:GGcrvrUX4n5ex6EWUj/qVJVXaLaU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775753324, "uuid": "922bbe9b-f5b7-4015-b7ac-e7670b04c396", "value": 826620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775753324, "uuid": "4e490a9b-8fac-4409-99b8-2666a3c5bc9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c21a5630-3434-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775753662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775753662, "uuid": "29b929a0-8000-4539-a87e-b9960ea2b283", "comment": "Malware payload", "value": "255813852cfd1d45d62db7641e6b86db", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775753662, "uuid": "77ed38d2-13bb-4eac-b4c6-9383f0581a4a", "comment": "Malware payload", "value": "49fc012a868eaabe207601d29cbefbbafa4043540fa5739c70c51f91783ba16d", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775753662, "uuid": "9caaf324-4f0f-4152-a702-005d9fba6f31", "value": "T193521E7DC5E2FCC44B1B62D17AAEF7C2104F8B03BE6A2B5CBAD804915B10365EBB55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775753662, "uuid": "a3c4f609-588d-443e-a942-4d6b99e62ea9", "value": "384:wsjpv4miB1CHsGGASxYwiJh6l5ReXwh4OFl/V1cdHOh46tVccHBxPrebD:fkPAlNEYFal5R3/mOh46ntHBx8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775753662, "uuid": "6db19d25-c50a-4900-9ed5-c6e63bb3ed32", "value": 13649, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775753662, "uuid": "09967e48-5403-4040-a620-0f2e8e469de6", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfc72c2e-3436-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775754571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775754571, "uuid": "ea1f8a52-f675-453d-9f68-2410e7ef19b7", "comment": "Malware payload", "value": "8ec2981a0cf2593036bf3de5730684e1", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775754571, "uuid": "dc99037d-d453-4bdc-95e1-8fd57dcf0814", "comment": "Malware payload", "value": "396d24cfc944d201e8933ef585475cdd85578e9bec097c33cdb359febf3e12a2", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775754571, "uuid": "6f0a9bdb-aa37-4fe7-acad-3c59e50671f1", "value": "T12B5311E78821581EC5D20F126CE50868C71FC26801F45DDDDA1F78FFB986E8B636EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775754571, "uuid": "be028886-2bb2-4c10-b3f4-b732af4ebe13", "value": "192:XV0glhCT/HvVnI1/b3VgkNI//zlCKlb7VrypFUnfr1oNxXKOzbqB1wa0HtB05f2G:SnCVYJSeIWgWGSV0C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775754571, "uuid": "4be059f6-cb0f-4857-b5e7-4a05a0fbc6b9", "value": 63621, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775754571, "uuid": "377aede2-3ccf-48c7-8d8a-b2158a086428", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7df42f4d-3437-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775754836, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775754836, "uuid": "cccb9652-0052-44a4-886b-716a1a0f373f", "comment": "Malware payload", "value": "2c7aae67ddace7a442f672fd5402ee61", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775754836, "uuid": "87f39fa6-b6f9-4ab8-9bf2-e589ff42a378", "comment": "Malware payload", "value": "d8f65435dbc62224761939f914b5f1f691310e07cad3739fc40e34e950ca48c2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775754836, "uuid": "8e7b91a9-9b2f-4a11-be1b-577a25c085ba", "value": "T192931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775754836, "uuid": "c2b1d2f8-1639-4971-a405-3a0be1bef174", "value": "1536:0Byp1tF/uwMmAIa14oXx+IMepeV7tb73WdxCrCitkb5fv2v05xsprCKB1sPyKJt8:08jIL0GitkbFv2v05xsprn1sPyWt3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775754836, "uuid": "30ca8f0b-a0e5-4b13-b417-87db1305223b", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775754836, "uuid": "db6126ca-2142-4813-aa7f-b8cc6929e7f2", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a23deed7-3437-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775754897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775754897, "uuid": "50db5e9f-a9bc-49a6-9ed9-18230e94f215", "comment": "Malware payload (Mirai)", "value": "907c9f0cb9b0d3948ce435ae514a4ba5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775754897, "uuid": "88ce766d-c5b4-4726-b676-5a3e1c19c2e7", "comment": "Malware payload (Mirai)", "value": "116d97a2f9e0794c34f9d1ec859cc9f7e8bd3cf6f449a6e7266409b02d31fefe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775754897, "uuid": "82b890c4-d5b5-44c9-9fa9-caf1f0a949f1", "value": "T104358D5AF2B374BDC067C030839FDB626936F46941322D7B61C4D6342DA6EA01B29F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775754897, "uuid": "858ab76e-c1df-4cc7-afe1-94321049c757", "value": "24576:t/D/KtsaueJ1fGrjyy3xkIeaWqLLLgFkSuuPZLZ:B/8HueJ1f+Oy3xkIeaWKL2EuP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775754897, "uuid": "08f8a1ed-181d-44b2-bf57-f029d447a35d", "value": 1145784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775754897, "uuid": "3cb46d36-bc67-4945-ac2d-952aef46e90b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62a90b46-3438-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775755220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775755220, "uuid": "ff3d218d-7dc5-4a1a-82ee-e690d68e4cbc", "comment": "Malware payload (Mirai)", "value": "e36f511d280fb732972f9d0eed9cafc9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775755220, "uuid": "d4b0168c-55d6-4247-80de-3d57f18adf0c", "comment": "Malware payload (Mirai)", "value": "ea03ea2cd7592d737e3b857ac5af962a7ebfc476ca9271e36935dabccc5fa952", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775755220, "uuid": "4c3f5fe4-74ea-46fa-9ae8-5e1c93ea5915", "value": "T128F43906F8809F62C5D12676F75F8268731347B9D3EA72069A189B343BD782F4F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775755220, "uuid": "06c3d551-656b-49fe-b087-b62e08b4567c", "value": "12288:IxjY1yxBUogT8jzUH78ouLEX548RhFetGGnB8p5uNjjg/Evq0KhfJ:YjY1ywojvUb8ouLi5JRSNqEvzKhf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775755220, "uuid": "789e65ea-8116-4170-969a-b9bf18f5f91b", "value": 725276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775755220, "uuid": "e9c4b4e2-ae0a-4e34-9ec2-6a57e3e8c5dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a513df74-3438-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775755331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775755331, "uuid": "a9584972-592d-4e34-8731-b19085487db2", "comment": "Malware payload (Mirai)", "value": "ff04372cf768a894a9fe05c5dc391104", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775755331, "uuid": "0e7cbe7a-1a8d-4395-9190-3fedf4254d4c", "comment": "Malware payload (Mirai)", "value": "9d7613ba19627057630cd32107197f977edb8897953edb93005be3ff3c20ebd2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775755331, "uuid": "7078874f-85a0-4a31-a030-f37ceaa032cc", "value": "T17E057C233712CFA5D354C67009F3C6515AE525A20BE251CAB278C328BE6162D6E5FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775755331, "uuid": "961406a3-9fda-408b-adac-ff0d47bf8e36", "value": "24576:z4SdbiIig2kc87wGXMvPt5JElJZgSZXaLaUx:z4Sw+c87wIMvPm/ZgSZXab", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775755331, "uuid": "b7ee6391-9cfe-4f01-8f22-6bfce5fa428f", "value": 826620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775755331, "uuid": "47463994-f4cb-481d-b4a0-34b09f0c9317", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775763559, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775763559, "uuid": "ffbca649-4062-4e6a-8f13-f930de9a8396", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775763559, "uuid": "f3a48bda-9ffc-4422-9e91-8842d0f13821", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775763559, "uuid": "d094147e-fd01-4c0f-9225-457c5e8e4aa5", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775763559, "uuid": "6317e5c0-31a3-4fd7-affd-fda9020dae83", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775763559, "uuid": "acdd33ff-837a-4e81-bdc5-758a8ae2e79b", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dda1bfe-344f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775765117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775765117, "uuid": "07b8fa69-b8c8-4758-a9d2-7296babcc69f", "comment": "Malware payload", "value": "0410fec78fcfff9f7b40e425b77b1742", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775765117, "uuid": "3d8d6dc6-db7f-43ac-a59a-6a2c7a389d63", "comment": "Malware payload", "value": "090166709700fb725345e25dbb2c14b99e50c9ee5007780999b27c96db7f6ae8", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775765117, "uuid": "dc8e2d7f-60e5-4a2c-bacc-479557da6450", "value": "T10DE0D8D4105B44D690D81C5F72B7A408A9CA9F4ECD4A6FB8BCAD70A7A768F15D0C60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775765117, "uuid": "1fa3d493-73e4-486f-8307-eeeef91e6b4f", "value": "6:xLgLW4Mv+iFnT7vZsfuaIuOA9yDB2/vXUgoDu/oz+Q7ZYL4qy7:OLWDvZWfIuz9yd2nXeDuir", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775765117, "uuid": "f194d0c1-b6b0-4f4e-947c-af17cc15a7bc", "value": 408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775765117, "uuid": "0afa59cf-55ad-491d-bc3e-43714d14c4f7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28724c78-3455-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775767578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767578, "uuid": "c9a835fa-5610-4b7a-871e-7aa8006c37a5", "comment": "Malware payload", "value": "a878208c4c9882de19a6d8fbb308c207", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767578, "uuid": "6df94ce6-0163-48c7-a7f4-4ac5416dd7c1", "comment": "Malware payload", "value": "f9a7a9ba14361db446f5e16a7711560f9400ff225c69913904f3349daf164a94", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767578, "uuid": "d0a61f02-44ea-46b1-a0cf-eaeb38e2f6bd", "value": "T1A401289DE1BCCF91199DC945F2F05544448191CBB1F4B7D5F25D0929AF0894935563", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767578, "uuid": "5062a543-3f5e-4302-991e-f514705b5588", "value": "12:FzY8id/7JAC7akxGWi2jX0KTkFj9LnqZPnv:FzY8k1/sWi2jk55W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775767578, "uuid": "ffb6792c-a757-42bc-b01d-fbe4f8b6fd00", "value": 690, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767578, "uuid": "e9878e70-9577-407d-ac95-5ef1e2766b29", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2872540a-3455-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775767578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767578, "uuid": "e21bf3a5-3b35-4878-ac10-36a86c483062", "comment": "Malware payload (Gafgyt)", "value": "2032d91b4deb6cb4766e8c04b8138f83", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767578, "uuid": "94978143-9e06-42cc-919f-7a34b8a15853", "comment": "Malware payload (Gafgyt)", "value": "967bc50e00e70f73a324165ca29182b8ba59055cbd29052f9fa99c1c491ee6b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767578, "uuid": "2f4cd74f-61ef-4806-8b86-3e7d13a5ff86", "value": "T143535B1BA58180FCC19DC2B80B67B63FE97372FD0239F2BA97D4EA265D45D204E6D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767578, "uuid": "6ada1281-f061-4101-8ee8-4b8d4555f954", "value": "1536:Jovs7uPHD1KdSIDa2OdBq8aUEwN1a6z5xFN:+vs7uL1KlDaTBbMwNFz5DN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775767578, "uuid": "102b105b-ec37-44a7-95f4-f238c86fc311", "value": 65296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767578, "uuid": "f3bb488a-77db-4e58-92c4-96edb08bde6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2879608b-3455-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775767578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767578, "uuid": "8a6d217a-026e-44df-a06b-ceab37929ccc", "comment": "Malware payload (Gafgyt)", "value": "ea841202db85f74ff8970ac004d541b3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767578, "uuid": "ebf8358b-6f9b-4adc-b02a-856ccd68619f", "comment": "Malware payload (Gafgyt)", "value": "f68c42aa500783d6986c77a09c242ab345bda1ed7a1f1743df296631d2dae229", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767578, "uuid": "a30a293c-6ac9-4bd9-b337-6d5b1dbefb1e", "value": "T1AF435CC5E68FD8F5EA5706782033E33767B2F539026DDA97C758A526EC12940E2233", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767578, "uuid": "4e66da4d-1258-4f76-921e-48617b2c35fc", "value": "1536:rZf98HjaKC3cQLT6nhDkblKwzb4iJ+6jZyF6e3/3+5:rZfeDc3cQ3Dbltzb4m+2yFZG5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775767578, "uuid": "37dcc8bc-688f-40e2-a302-c084552634e9", "value": 58548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767578, "uuid": "13fa0bee-b4d9-4d79-8d3d-a9f1dff21fea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48ecfca1-3455-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775767632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767632, "uuid": "6196b203-aaaf-4503-87eb-ad20bec6b5b4", "comment": "Malware payload (Mirai)", "value": "8df850faadf7afcd95d28edaeca5e318", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767632, "uuid": "0aa6eb0d-3c3f-4e41-9269-0dec4c3e0ebf", "comment": "Malware payload (Mirai)", "value": "7382e7affc0f9dfbf0f03bbc8c9aea4ed67ac4c67890e36a1cc7ab94a007a988", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767632, "uuid": "eae5b48c-40a8-449f-a193-af8aaf701562", "value": "T14A632A81B8829613C6C412BBFA6F019D776653B8E3DA7213DD219F20378792B0E777", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767632, "uuid": "653ef774-9bf5-489e-a0ff-2a003dad22d1", "value": "1536:UNyzA4/2loHNSF7supL0zA/B3+X6pmOdy7Ep5ccdL:UNyzAnrB3+KtcgL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775767632, "uuid": "5f01cbef-2da1-444d-b2fe-127d2324655a", "value": 68780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767632, "uuid": "09d5b5b6-f138-4195-89c3-52b9900ea9ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48f20853-3455-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775767632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767632, "uuid": "61a269a6-0e33-4ed7-a48e-0a5e2ca72b85", "comment": "Malware payload (Mirai)", "value": "566fdcd6029bdab355cb2f47eaa43008", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767632, "uuid": "7c637b40-24bc-4411-90fd-9a6888d364a8", "comment": "Malware payload (Mirai)", "value": "aeebce7f9cc82201e14d75581507596be40db1c1f56a777d27f106aa06507ce4", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767632, "uuid": "2d357df7-4ff5-4423-a949-846b3f2c22e2", "value": "T1D9931A46A9529F12C4D631FAFAAE415933537FB8D3EA7101CC20AF9423C59DB0EB76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767632, "uuid": "e2d61047-93c7-4168-9f9a-a26a0b7e3b88", "value": "1536:J4nazk/gsUxR0dUDNkl3EV0vXR4YQfgasDnu5NVIQqlmKi3kdTQQVdib2uS:jk/qxRPRkqVIXR4pfgasDnu5NHwdTQQ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775767632, "uuid": "9edb965f-71a9-4862-969a-e6dbc141c301", "value": 95876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767632, "uuid": "65f3003c-ffe1-458e-82cc-c90569bde757", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5042af6b-3458-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775768933, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775768933, "uuid": "511133bd-eacb-4d2e-a5e9-adf89a96a85b", "comment": "Malware payload (Mirai)", "value": "9bef51e521eeff6880aff7a300e5b1ac", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775768933, "uuid": "83bebe7e-d493-4260-bd51-6a61ce3f55ee", "comment": "Malware payload (Mirai)", "value": "b6d839441c267eaf51204cbe1dd48d437e04730f73a22ab11c84a74bbbb8d22b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775768933, "uuid": "28a19032-ef5b-4e6b-be8b-c0cb065211d3", "value": "T1B5341902A8528A53C5C21B79BB5F46593733AB34D7DB3302DA18AFB42F476DE0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775768933, "uuid": "fdbbcac8-04f5-4ba1-9686-d9677fb7b140", "value": "6144:SAdx0+p8KjcfiaokZ7kfFiCXsUujWnmW2hVDZI0/16O7Nc:SkxiKQfiah7sFiJinmW2hVD60/16O7Nc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775768933, "uuid": "d4fa01ac-eb1e-4131-8f99-dbd242129a53", "value": 234578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775768933, "uuid": "94ca51d3-eca5-42b7-acb1-1e2d7f12db09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "907f95d8-3460-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775772477, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775772477, "uuid": "c33fac71-37d5-471e-8e5f-050dedf1a100", "comment": "Malware payload (Mirai)", "value": "4ce26acf496d98452ef12f61efb01af5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775772477, "uuid": "3a2db664-dc65-461a-9eff-6c0fd671e4ed", "comment": "Malware payload (Mirai)", "value": "4cfa07a995eb955543c60f62e076e4f42c6789762724400e23f657a4e7fb7a34", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775772477, "uuid": "746e06dd-a89f-47f6-80b2-692905bf4296", "value": "T135143B02731C0A83D1576EF02AFB17F183ABED5119A2A544F62EFE846332FB15509F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775772477, "uuid": "9aecb339-78b4-4a05-89f2-4c6040a19e45", "value": "6144:P8f8ooaFmz/xKsNbQjooSAbFtZmTK4+Ehj681A2hNNmt1:0EooaAhQMoS4lmTK4+Ehj681A2hNNmt1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775772477, "uuid": "7023b675-f528-4d96-8c67-de3e15938815", "value": 208360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775772477, "uuid": "d84f2da0-6ac6-4009-85bb-1195f7ff71bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b1afd99-3461-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775773158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775773158, "uuid": "a7ff45e7-0cc0-4dce-ab71-a4137e36ea9d", "comment": "Malware payload (Mirai)", "value": "b7abf84e63223dd0e0b53245f19f87c2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775773158, "uuid": "30e82c03-3026-428a-be83-3d35cc337458", "comment": "Malware payload (Mirai)", "value": "e387d839bef9148bb2f6f9e5746f44fe43146bbc533cd1e6d116a65057727700", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775773158, "uuid": "2c1bcaf5-b764-49ef-a430-d1da8eec7da8", "value": "T1FA243A0775D08DFBC4C68AB50BD791328933F8291B36664BB7A8FD951F0EED86A1C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775773158, "uuid": "acf9fc23-8a48-4278-81fb-ecbc78b49d96", "value": "6144:6tXnrv+YCUqesuxnkrFTxpkvKHg+heN9KAM7pNNle:6JnrCaWkvKHg+heN9KAM7pNNle", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775773158, "uuid": "453e5f44-fe6d-4e99-895b-1c4f783a633a", "value": 221204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775773158, "uuid": "60194016-00d9-4fbc-bf05-85e1b60bbf3b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "448cd536-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775776523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775776523, "uuid": "1360f43c-a8bd-434a-a707-230789e2a2ed", "comment": "Malware payload", "value": "a942530b3fc2213ad0de0731fe417f2e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775776523, "uuid": "fa19d9de-a91d-4cf1-b95d-350d2487432b", "comment": "Malware payload", "value": "a6ffc5f875944f63ee69dcf49460d2b7392ce9214c3c5f7a3b34a80ed1ac6680", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775776523, "uuid": "10843948-b796-4e28-b5b1-ed3dea5cb852", "value": "0B73121613A925A152314AF1E7FE6F88F54D2A6C8FF1AC24BC217C68ED3336D1CD5518", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775776523, "uuid": "83dc3b4d-c4da-4519-9d74-541d795065c8", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/Jl:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775776523, "uuid": "443832f3-e13f-4b0d-874b-75a8087c2269", "value": 76744, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e2fbb27-346b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775777009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775777009, "uuid": "2fe696b2-f452-4a3a-9eb1-6349cb03b5ba", "comment": "Malware payload", "value": "39540f119d2ca28a4eeec7d2d1bba5b4", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "dropping-LummaStealer", "colour": "#647eab", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775777009, "uuid": "98241cd4-ed3b-46bc-933e-bf9befb58e0b", "comment": "Malware payload", "value": "2ed23b24a09d1bab4767406d560a990b8ee89f7c46ec59a8f73bc126808837ca", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "dropping-LummaStealer", "colour": "#647eab", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775777009, "uuid": "ec2c86b1-b2f6-4f98-beae-c9e46082a158", "value": "T187D3FE0A24BF44A907B3252545135243CDB1D72E2B01CABD322DEF70EF296D696DE7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775777009, "uuid": "3c1e54a5-d6e3-44be-801b-ca5b2f69b256", "value": "768:UvWbHIvoBKiDw1FKH6tfUzllFbEGrRTpg1lvhhFe02AbcqdS/SJZKHnyUoTsvBsh:i8HIptHhyq4isWUBsr8ahNwkHkM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775777009, "uuid": "f1f63909-212f-4e99-a1ae-97ef45a35ddb", "value": 142108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775777009, "uuid": "0318d366-e1bd-49d3-abdd-762beb98719c", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775692823, "uuid": "1b8082fc-33a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://file-hub.systematrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775692993, "uuid": "805382cb-33a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.238.186:52416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775693054, "uuid": "a4b34cd1-33a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://path-gate.systematrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775693352, "uuid": "56585c5b-33a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mind-hub.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775693709, "uuid": "2b1aaf97-33a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neural-api.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775693715, "uuid": "2ed2f8da-33a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.236.13:52644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775693827, "uuid": "716c5aba-33a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.173.66:45571/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775693896, "uuid": "9abc7c90-33a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.152.43:54237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775693961, "uuid": "c1b8e5d8-33a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.237.161:51635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775694012, "uuid": "dfaebff5-33a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sense-log.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775694426, "uuid": "d69fc8eb-33aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.173.66:45571/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775694427, "uuid": "d761ee9b-33aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://think-node.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775694726, "uuid": "89853aa9-33ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.232.183:43345/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775694728, "uuid": "8ae9b791-33ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vector-svc.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775695087, "uuid": "60b87d6e-33ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brain-gate.cogniversehub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775695099, "uuid": "67d16d4b-33ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.51.149:50787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775695747, "uuid": "e9d1e69c-33ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mind-sync.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775695992, "uuid": "7c64a989-33ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thought-api.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775696349, "uuid": "50c6ca06-33af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sphere-node.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775696767, "uuid": "49e8133a-33b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://logic-vault.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775697067, "uuid": "fcdc5fbc-33b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pure-svc.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775697127, "uuid": "205a6fce-33b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.34.217:46486/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775697372, "uuid": "b2633afd-33b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://global-gate.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775697667, "uuid": "628d6e83-33b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow-data.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775698038, "uuid": "3fe0e239-33b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.163:57807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775698092, "uuid": "5fe6da61-33b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://know-api.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775698452, "uuid": "361f5edc-33b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shift-node.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775698627, "uuid": "9e6c5e1c-33b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.34.217:46486/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775698748, "uuid": "e71f2118-33b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drift-vault.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775699107, "uuid": "bd125eb0-33b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flux-svc.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775699291, "uuid": "2aba3a3b-33b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.55.53:49133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775699347, "uuid": "4bc36e78-33b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-gate.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775700010, "uuid": "d72c5005-33b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-vault.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775700187, "uuid": "40564bfa-33b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://info-api.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775700372, "uuid": "af0f9d54-33b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.107.184:44779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775700488, "uuid": "f43b46f1-33b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://secure-node.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775700558, "uuid": "1dbff41c-33b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.201.35:55530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775700731, "uuid": "8498ba67-33b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://root-svc.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775701029, "uuid": "36575d56-33ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://audit-hub.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775701090, "uuid": "5ae27c1b-33ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.195.206:60488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775701451, "uuid": "31a541b0-33bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://path-gate.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775701462, "uuid": "38344fe6-33bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:55139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775701517, "uuid": "5960757a-33bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.156.75:36235/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775701750, "uuid": "e3e94964-33bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-api.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775701935, "uuid": "52827716-33bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.246.230.97:41323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775702114, "uuid": "bd05d11e-33bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.13.63.14:42212/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775702347, "uuid": "47fe780d-33bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://entity-node.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775702348, "uuid": "4887427c-33bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.148.197:56404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775702535, "uuid": "b7ebf4e7-33bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.181.123:38655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775702592, "uuid": "d9c27c14-33bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cell-vault.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775702767, "uuid": "4287fd64-33be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://root-svc.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775702954, "uuid": "b20de0bf-33be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.91.29:53327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775703067, "uuid": "f4fd6373-33be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.195.206:60488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775703187, "uuid": "3c75295a-33bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-hub.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775703196, "uuid": "42083772-33bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.152.164:57130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775703429, "uuid": "ccd21f61-33bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-gate.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775703733, "uuid": "81e2f381-33c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.246.230.97:41323/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775703734, "uuid": "828f279c-33c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.90.54.196:43323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775703788, "uuid": "a2ebdd88-33c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://matrix-flow.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775703912, "uuid": "ecdb6c74-33c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.148.197:56404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775704147, "uuid": "78a04325-33c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-api.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775704331, "uuid": "e67de0dc-33c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.208.17:36803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775704389, "uuid": "08f62802-33c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.60.108:38299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775704509, "uuid": "5071a7f0-33c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shift-node.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775704814, "uuid": "06b4395c-33c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stream-svc.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775705056, "uuid": "96ee6b5a-33c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.152.164:57130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775705168, "uuid": "d9744da6-33c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://unit-hub.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775705467, "uuid": "8b9fa0dc-33c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-gate.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775705533, "uuid": "b2c494b1-33c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.156.75:36235/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775705716, "uuid": "2009c73f-33c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.90.54.196:43323/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775705768, "uuid": "3eca7bda-33c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://forge-api.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775706126, "uuid": "1462136e-33c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.82.61:51804/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775706133, "uuid": "18644633-33c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://synth-node.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775706552, "uuid": "126bbe43-33c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.124.205:45589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775706732, "uuid": "7dc34f0f-33c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thesis-vault.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775706914, "uuid": "ea47aa83-33c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://step-svc.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775706969, "uuid": "0ae4eee5-33c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.204.71:46266/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775707396, "uuid": "0992977a-33c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://debate-hub.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775707634, "uuid": "9762e879-33c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://logic-gate.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775707873, "uuid": "25bd2092-33ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://infer-api.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775708173, "uuid": "d846192c-33ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trace-node.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775708472, "uuid": "8aae6743-33cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub-secure.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775708527, "uuid": "ab4d1561-33cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.60.108:38299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775708528, "uuid": "abedcdef-33cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.125.145:34847/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775708528, "uuid": "abf976f1-33cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.203.51:57983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775708529, "uuid": "ac9fc5c4-33cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.129:42865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775708766, "uuid": "3a30346c-33cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rank-svc.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775708896, "uuid": "87714f9a-33cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.104.3:40484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775708962, "uuid": "aea1cd82-33cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.29.223.148:58205/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709188, "uuid": "35610e36-33cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-hub.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709496, "uuid": "ed5be808-33cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.181.123:38655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709553, "uuid": "0f3b49e4-33ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate-secure.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709729, "uuid": "77e16e30-33ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.47.188.236:45324/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709792, "uuid": "9dad2eb0-33ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vector-api.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775709849, "uuid": "bf75b5f1-33ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.6.169:36728/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775710148, "uuid": "71f45965-33cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.6.169:36728/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775710329, "uuid": "dd87258a-33cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.233.21:44882/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775710446, "uuid": "23850c70-33d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://model-node.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775710522, "uuid": "50c69212-33d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.104.3:40484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775710628, "uuid": "900dbaf1-33d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://view-vault.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775710815, "uuid": "ff5f1c2c-33d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://theory-svc.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775710827, "uuid": "065ea091-33d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.94.93:47019/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711126, "uuid": "b882487e-33d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.52.126:44803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711171, "uuid": "d3802ce6-33d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-hub.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711527, "uuid": "a7fb1863-33d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://space-gate.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711710, "uuid": "14b3c8e2-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://especially-acrobat-rouge-dominant.trycloudflare.com/ccv.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711712, "uuid": "15f382fc-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/tkrvswcf5jo4s5oosdc4n/BELL-INV-4521-CA-.pdf.zip?rlkey=6bne1aom7tnf7me6j88b85bng&st=h396xfm6&dl=1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711713, "uuid": "16907903-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://especially-acrobat-rouge-dominant.trycloudflare.com/DOCUMENT/Toll_Group_Co%201200.pdf.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711772, "uuid": "39ba2d8b-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://especially-acrobat-rouge-dominant.trycloudflare.com/oa.wsh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "wsh", "colour": "#589827", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711772, "uuid": "39f1beb1-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://especially-acrobat-rouge-dominant.trycloudflare.com/go.bat", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711772, "uuid": "39f1da46-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://especially-acrobat-rouge-dominant.trycloudflare.com/pol.bat", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711772, "uuid": "39fb0c3b-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://especially-acrobat-rouge-dominant.trycloudflare.com/vwo.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711829, "uuid": "5bd1429d-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://engine-api.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775711901, "uuid": "8684a32c-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.219.1.198:33984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712007, "uuid": "c614cac8-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.124.59.142/task", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712009, "uuid": "c6cf4546-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://download1979.mediafire.com/nyelsl7di8fgR-j6Bkej7w313J_849ezhLLIhBEEwrAM85k9cjCq8aNSSdEXuHepCbFO0Q0akBf57hPcBES4m4s_Ygw0wTTxwHXtpI61hvnHe2wTfQKvbX8gV2gHyggwWVmv8nkiF2Ypjd6pxJHkHpiuI7cM69BllWIBZ2asD5e2/35szk915pzn779n/Archive.rar", "Tag": [ { "name": "pw-2227", "colour": "#84141c", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712009, "uuid": "c6e425f8-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ojemoneyyy.free.nf/img_050138.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712014, "uuid": "ca16b128-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://go5z.my/file.php", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ua-powershell", "colour": "#fbba8b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712020, "uuid": "cdcae456-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.233.21:44882/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712040, "uuid": "d963114a-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://go6.my/app.php", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ua-powershell", "colour": "#fbba8b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712066, "uuid": "e8e7f3f3-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.124.59.142/index", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712066, "uuid": "e8f94a0e-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.96.201:38245/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712066, "uuid": "e913c04c-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.112.57/mass", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712067, "uuid": "e97da7c8-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stone.newrock.life/DivineX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: dx2026", "colour": "#48f582", "exportable": true, "hide_tag": false }, { "name": "pw-dx2026", "colour": "#d631c5", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712072, "uuid": "ecca42f7-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast.newrock.life/DivineX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: dx2026", "colour": "#48f582", "exportable": true, "hide_tag": false }, { "name": "pw-dx2026", "colour": "#d631c5", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712073, "uuid": "ece8b518-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quickly.newrock.life/DivineX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: dx2026", "colour": "#48f582", "exportable": true, "hide_tag": false }, { "name": "pw-dx2026", "colour": "#d631c5", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712095, "uuid": "fa3f0b6f-33d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://boost.newrock.life/DivineX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: dx2026", "colour": "#48f582", "exportable": true, "hide_tag": false }, { "name": "pw-dx2026", "colour": "#d631c5", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712128, "uuid": "0e2c7a43-33d4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rule-node.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712487, "uuid": "e3a11bac-33d4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.249.10.200/ak/zpubeYnbswoZNHK172.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712552, "uuid": "0a5bc6d4-33d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.52.126:44803/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712552, "uuid": "0adf4ae0-33d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://matrix-vault.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712729, "uuid": "746f1a17-33d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.1.240.64:60897/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775712848, "uuid": "bb20749d-33d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://order-svc.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775713211, "uuid": "939ce610-33d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-hub.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775713633, "uuid": "8ee9d010-33d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-gate.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775713749, "uuid": "d3f99704-33d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.219.1.198:33984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775713927, "uuid": "3e3a6394-33d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.30.142.2:38824/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775713932, "uuid": "4120047e-33d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flux-api.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775714005, "uuid": "6ccc7ff9-33d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.207.100:57576/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775714168, "uuid": "cdb2cfe2-33d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neural-node.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775714227, "uuid": "f11f4c18-33d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.1.240.64:60897/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775714589, "uuid": "c8980f00-33d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sense-vault.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775714828, "uuid": "570981df-33da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brain-svc.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715191, "uuid": "2fa54439-33db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://think-hub.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715426, "uuid": "bbd28c13-33db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/demarcusnofatherington420-a11y/ScriptInstaller/refs/heads/main/test/encrypted.hta", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715429, "uuid": "bd82e7ed-33db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/demarcusnofatherington420-a11y/RickOwens/raw/refs/heads/main/Pulsar-Client.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715430, "uuid": "be52f40e-33db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/demarcusnofatherington420-a11y/RickOwens/refs/heads/main/encrypted.hta", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715430, "uuid": "be57c84f-33db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/demarcusnofatherington420-a11y/ScriptInstaller/refs/heads/main/DetectionRateTesting.hta", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715434, "uuid": "c094412f-33db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/demarcusnofatherington420-a11y/ScriptInstaller/raw/refs/heads/main/test/123123.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715438, "uuid": "c30afa7b-33db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.226.161.86:49549/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715487, "uuid": "dfe0c4a3-33db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/demarcusnofatherington420-a11y/ScriptInstaller/refs/heads/main/MaybeWorking.hta", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715490, "uuid": "e19edd21-33db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/demarcusnofatherington420-a11y/ScriptInstaller/refs/heads/main/WindowsLogonService.bat", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715490, "uuid": "e1ed4220-33db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/demarcusnofatherington420-a11y/ScriptInstaller/raw/refs/heads/main/Pulsar-Client.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715500, "uuid": "e7f8b4b5-33db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/demarcusnofatherington420-a11y/ScriptInstaller/refs/heads/main/encrypted.hta", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715559, "uuid": "0abe29bc-33dc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.237.1:39398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715609, "uuid": "28e8cae6-33dc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vector-gate.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775715914, "uuid": "decf3a8a-33dc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-gate.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775716089, "uuid": "4701fe0f-33dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.32.199:35807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775716097, "uuid": "4b6df3a8-33dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.77.87:60007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775716213, "uuid": "90def3db-33dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-api.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775716571, "uuid": "65deb405-33de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://host-node.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775716625, "uuid": "8630a4b4-33de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8329928896/7OtV2gJ.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775716928, "uuid": "3b37e8c8-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.227.12:40682/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775716938, "uuid": "40a3eb85-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-vault.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717051, "uuid": "8439c9d9-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.77.87:60007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717228, "uuid": "ee05370a-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.165.125.212:41472/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717229, "uuid": "ee37c5d5-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.32.25:34766/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717229, "uuid": "ee444f6d-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.136.13:38147/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717229, "uuid": "ee4ad069-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.32.25:34766/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717229, "uuid": "ee5119de-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.167.209.164:40197/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717229, "uuid": "ee77dc67-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.6.10.120:16726/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717229, "uuid": "ee8a7303-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.96.165.76:40517/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717229, "uuid": "ee9237f8-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.96.165.76:40517/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717229, "uuid": "eea268df-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.39.11:37402/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717230, "uuid": "eeb4af81-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.9.215:46369/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717230, "uuid": "eeb9dedd-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.39.11:37402/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717230, "uuid": "eebac9e4-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.97.19:41501/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717231, "uuid": "ef633618-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.55.14.216:38506/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717231, "uuid": "efd09fa0-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.81.202:60789/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717232, "uuid": "efff489f-33df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.178.147.73:45208/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717287, "uuid": "10a9444c-33e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.97.19:41501/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717289, "uuid": "120b7076-33e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc-relay.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717417, "uuid": "5e3cf8c8-33e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.32.53:44183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717533, "uuid": "a36eb378-33e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.237.1:39398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775717592, "uuid": "c6a0a90f-33e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sync-hub.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775718021, "uuid": "c69122db-33e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.125.145:34847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775718128, "uuid": "06222455-33e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.246.40/rlfOXsZxho57.bin", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775718128, "uuid": "06461001-33e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.246.40/Hist.deploy", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775718246, "uuid": "4cc0790b-33e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crop-api.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775718546, "uuid": "ff383b71-33e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://land-node.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775718800, "uuid": "967bf03b-33e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.221.104:44314/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775718848, "uuid": "b3886561-33e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.240.58.33:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775718920, "uuid": "de3ff170-33e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz/Hammz.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775718967, "uuid": "fa4651f5-33e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grow-vault.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719029, "uuid": "1f1a2542-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.226.86:41102/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719150, "uuid": "678073ea-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-2ac530845a0b40f68c46df8146d4315a.r2.dev/scamily.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719327, "uuid": "d0bf759b-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-svc.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719390, "uuid": "f67c2a9f-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz/Hammz.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719390, "uuid": "f688b971-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz/Hammz.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719390, "uuid": "f68936e2-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz/Hammz.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719390, "uuid": "f68fc69d-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz/Hammz.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719390, "uuid": "f691a188-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz/Hammz.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719390, "uuid": "f69360d1-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz/Hammz.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719390, "uuid": "f6939eea-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz/Hammz.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719390, "uuid": "f69c2c3f-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz/Hammz.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719391, "uuid": "f6e393f4-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz/Hammz.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719391, "uuid": "f6f235d0-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz/Hammz.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719392, "uuid": "f760133a-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz/Hammz.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719392, "uuid": "f7640436-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719392, "uuid": "f76de0a8-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz/Hammz.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719392, "uuid": "f776ef67-33e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz/Hammz.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719448, "uuid": "193699e1-33e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.93.37/Hammz/Hammz.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719626, "uuid": "83355064-33e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soil-hub.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719823, "uuid": "f84bb6cb-33e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.163.183.73:33363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719939, "uuid": "3d83a0e9-33e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.228.151:41095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719940, "uuid": "3e1a8dcd-33e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.155.79:56863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775719990, "uuid": "5be4f215-33e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grain-log.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775720226, "uuid": "e8e80ea9-33e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://farm-api.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775720826, "uuid": "4e4e5d34-33e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.227.12:40682/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775720950, "uuid": "9850d77b-33e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://store-vault.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775721018, "uuid": "c0ee973f-33e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.19.44:39122/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775721018, "uuid": "c0f2218c-33e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.155.79:56863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775721253, "uuid": "4cf8af5f-33e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trade-svc.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775721487, "uuid": "d8742dc2-33e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/rump.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775721488, "uuid": "d8bde0df-33e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/festusfile.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775721613, "uuid": "23b30645-33ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://root-gate.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775721620, "uuid": "27bed71d-33ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.163.183.73:33363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775721738, "uuid": "6ddf9771-33ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.192.5:38611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775721973, "uuid": "fa143dda-33ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nano-tech.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775722160, "uuid": "693f4f5b-33eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.244.173:37166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775722271, "uuid": "abe39bc5-33eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-api.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775722642, "uuid": "890b3d6e-33ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://unit-node.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775722926, "uuid": "3245682f-33ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cell-vault.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775722927, "uuid": "32de53ef-33ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.19.44:39122/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723133, "uuid": "adb3ddf9-33ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.246.40/idfWcHWVXIWe19.bin", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723134, "uuid": "adf45e48-33ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.246.40/Skifteda.deploy", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723178, "uuid": "c829055f-33ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://accessible-peach-termite.myfilebase.com/ipfs/QmWHGWhRiZ1Fp5tMV32NUNcNkozWxETxQAc38xn7DuvyXR", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723236, "uuid": "ea9cd1b2-33ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://accessible-peach-termite.myfilebase.com/ipfs/QmVcz1Lehhbv5V72FZqhKicrAFKg9j1erVeSHXLs2QMqCP", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723290, "uuid": "0b04818c-33ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/spenglercomics.firebasestorage.app/o/task.txt?alt=media&token=f162f5ce-52f7-4407-8cc4-dd96cedd9b0e", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723347, "uuid": "2d3154a2-33ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://res.cloudinary.com/dkylpyldt/image/upload/v1775485483/origin_kaqiyp.jpg", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723351, "uuid": "2f498b5b-33ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://res.cloudinary.com/dkylpyldt/image/upload/v1775485198/rump_clyv7g.jpg", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723353, "uuid": "30937113-33ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://micro-svc.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723359, "uuid": "33f00bd8-33ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.228.151:41095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723598, "uuid": "c24cd788-33ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.13.156:38728/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723653, "uuid": "e39dce2c-33ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grid-gate.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775723777, "uuid": "2cfc7ac5-33ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.148.204.134:58675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775724015, "uuid": "bb346037-33ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sand-logic.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775724071, "uuid": "dc6be502-33ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.8.219:60615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775724247, "uuid": "456a9747-33f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://area-api.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775724379, "uuid": "93f80807-33f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.244.173:37166/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775724432, "uuid": "b3a4e3f8-33f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.215.101:56241/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775724675, "uuid": "448ba0d2-33f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://map-node.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775724974, "uuid": "f6e3f30d-33f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dry-vault.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725028, "uuid": "16b38c70-33f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.150.240:34110/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725229, "uuid": "8ed91f25-33f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.13.156:38728/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725389, "uuid": "edd8e58d-33f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://site-svc.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725398, "uuid": "f32cea3b-33f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.66.32.186:51237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725455, "uuid": "15658420-33f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.215.115:53324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725511, "uuid": "36da6884-33f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.215.101:56241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725511, "uuid": "3701d589-33f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://accessible-peach-termite.myfilebase.com/ipfs/QmVzGgstGZeBYcqnvndsS3fDWp8Dixo4UAX1exjGmSaSVn?", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725514, "uuid": "38c4dd70-33f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://accessible-peach-termite.myfilebase.com/ipfs/QmVzGgstGZeBYcqnvndsS3fDWp8Dixo4UAX1exjGmSaSVn?download=true&filename=7777778.txt", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725634, "uuid": "7fdc2ab2-33f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://path-hub.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725695, "uuid": "a47c4e34-33f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/7esw3p.dat", "Tag": [ { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725754, "uuid": "c797c355-33f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/R0B3TQyB/image-1.png", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725927, "uuid": "2e98e534-33f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.150.240:34110/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775725988, "uuid": "536e3d7b-33f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fold-sync.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726166, "uuid": "bd25f7c1-33f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hasteb.in/ii5PfCz83aTcDgK", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726230, "uuid": "e33bf00d-33f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.53.75/mp/rbgrdcf.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726351, "uuid": "2baaa62f-33f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wrap-api.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726354, "uuid": "2d6810af-33f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://innovspora.co.zw/1314242/DIPS.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726413, "uuid": "50bec3be-33f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/x12dc3zT/image.png", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726417, "uuid": "531b80d9-33f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crowe-avvens.site/newoworkable/aegbFib.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726471, "uuid": "731aa39c-33f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://aona.s3.cubbit.eu/igkjakc.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726526, "uuid": "93eb4fd9-33f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.65:57907/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726532, "uuid": "9750aebe-33f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nrmlogistics.ro/optimized_MSI.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726533, "uuid": "97b9965e-33f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.8.219:60615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726588, "uuid": "b8b8344f-33f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nrmlogistics.ro/img_174236.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726591, "uuid": "ba8ce2a6-33f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault88x.secure-efficient2.su/img_085027.png", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726598, "uuid": "bebdd0c4-33f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault88x.secure-efficient2.su/MSI_105759.png", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726606, "uuid": "c39a22bf-33f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://aona.s3.cubbit.eu/FgAkmfI.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726651, "uuid": "de8f0dd0-33f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-node.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726779, "uuid": "2a8cd526-33f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.106.206:52727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775726960, "uuid": "963fb397-33f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.215.115:53324/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775727247, "uuid": "4190d707-33f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pack-vault.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775727488, "uuid": "d140b6de-33f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.227.10:54799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775727489, "uuid": "d18ad58e-33f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://file-svc.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775727672, "uuid": "3ee31182-33f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mark-gate.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775728032, "uuid": "156b6df6-33f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cash-flow.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775728277, "uuid": "a7be7fff-33f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.227.10:54799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775728332, "uuid": "c866991b-33f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://loan-api.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775728694, "uuid": "9fd28268-33fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bank-node.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775728706, "uuid": "a769804c-33fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.87.9:46869/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775728993, "uuid": "523701bf-33fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://safe-vault.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775729229, "uuid": "defa70a5-33fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.220.145.217:46710/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775729354, "uuid": "294dbe0c-33fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pay-svc.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775729528, "uuid": "9100e6c0-33fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.144.19:36103/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775729528, "uuid": "9102c148-33fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.144.19:36103/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775729657, "uuid": "de268bb7-33fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trust-gate.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775730075, "uuid": "d7144010-33fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://text-read.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775730193, "uuid": "1d600b0d-33fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.1.162:58224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775730370, "uuid": "870c8ad2-33fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://book-api.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775730429, "uuid": "a9f80549-33fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.37:53724/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775730429, "uuid": "aa20a4da-33fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.220.145.217:46710/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775730694, "uuid": "481f20f1-33ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.13.12:39153/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775730738, "uuid": "622b93aa-33ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://word-node.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775730922, "uuid": "d008579d-33ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.13.122:46533/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775731033, "uuid": "1267bb85-3400-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://page-vault.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775731393, "uuid": "e880918c-3400-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://info-svc.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775731521, "uuid": "3503b8a8-3401-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.128.174:43145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775731692, "uuid": "9b3f48cf-3401-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-gate.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775731703, "uuid": "a174a661-3401-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.233.150:40641/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775731941, "uuid": "2f26d1c4-3402-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.66.141:58535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775731998, "uuid": "512312a1-3402-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://area-check.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732227, "uuid": "d9f98b40-3402-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.165.92.80:33719/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732243, "uuid": "e33d2b43-3402-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.13.12:39153/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732417, "uuid": "4b067077-3403-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://city-api.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732771, "uuid": "1e31b4e0-3404-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://selyoptik.ro/swt3D/DIPS.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732833, "uuid": "431301b0-3404-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://od.lk/d/MTVfODE0Nzg0OTFf/adn.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732842, "uuid": "484c4e29-3404-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.233.150:40641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732888, "uuid": "63d2aa80-3404-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.hna-ksa.com/STA/ikp.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732888, "uuid": "63e5bf48-3404-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grupomcperu.com/elementos/mhdcbdc.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732892, "uuid": "660d37a6-3404-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.hna-ksa.com/STA/mint.txt", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732950, "uuid": "88ea6d01-3404-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crowe-avvens.site/newoworkable/newoworkable.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732951, "uuid": "8953827c-3404-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/44j9qKxj/image.png", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732952, "uuid": "8a180c91-3404-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://site-node.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732954, "uuid": "8af85c6f-3404-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/tgpG7gvd/image1.png", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775732956, "uuid": "8c5c23df-3404-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.34.192:38802/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775733010, "uuid": "acad6bd5-3404-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/g2hvSzD8/image.png", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775733144, "uuid": "fc7ac3a4-3404-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.11.200:54370/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775733194, "uuid": "1a3dd5f0-3405-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://map-vault.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775733374, "uuid": "85c0ecd7-3405-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://street-svc.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775733737, "uuid": "5dfbd6b1-3406-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trace-gate.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775734095, "uuid": "3327f68d-3407-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://time-step.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775734100, "uuid": "360f750c-3407-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.35.78.2:23117/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775734224, "uuid": "80625ad7-3407-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.215.79:59775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775734389, "uuid": "e2b12288-3407-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://plan-api.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775734638, "uuid": "7706ee1d-3408-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.132:44475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775734690, "uuid": "95e08326-3408-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mark-node.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775734698, "uuid": "9aba5bea-3408-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.30.244:60520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775734750, "uuid": "b9b25e5b-3408-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:42795/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775734825, "uuid": "e6ae06d1-3408-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.30.244:60520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775735111, "uuid": "90c83ac1-3409-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://task-vault.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775735226, "uuid": "d577b454-3409-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.220.143:34386/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775735358, "uuid": "23d58845-340a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://next-svc.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775735767, "uuid": "17c247ea-340b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://road-gate.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736069, "uuid": "cc0a0a7a-340b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fdode.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736139, "uuid": "f567c35b-340b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.132:44475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736197, "uuid": "18698574-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.241.51:35659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736257, "uuid": "3bd7ba9b-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.48/n.sh", "Tag": [ { "name": "176-65-139-48", "colour": "#935534", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736260, "uuid": "3d9d3996-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:42795/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736309, "uuid": "5aab73e0-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-1oad.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736377, "uuid": "837c867b-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/bins/mips", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736377, "uuid": "837cbcc9-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/bins/arm", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736377, "uuid": "839460e0-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/bins/arm5", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736377, "uuid": "83b572cc-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/bins/arm7", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736378, "uuid": "843e1cd8-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.137.87:59140/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736437, "uuid": "a7627b05-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/bins/arm6", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736437, "uuid": "a7627eb3-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/bins/mipsel", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736437, "uuid": "a762877e-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/bins/x86_64", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736437, "uuid": "a762cb73-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/bins/spc", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736437, "uuid": "a76a4bda-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/bins/ppc", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736498, "uuid": "cb5c472a-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/bins/x86", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736556, "uuid": "ee573368-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/bins/m68k", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736556, "uuid": "ee573efa-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/bins/sh4", "Tag": [ { "name": "176-65-139-96", "colour": "#788f3e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736577, "uuid": "fa6deabf-340c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.156.173:60855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736666, "uuid": "2fb7e0aa-340d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cr4ft-pulse.importantserv.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775736789, "uuid": "791c16ef-340d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.154.118.223:55863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775737038, "uuid": "0dbe44c8-340e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.32.199:35807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775737211, "uuid": "74c446a9-340e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-m1x.bereathfertil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775737393, "uuid": "e10ea229-340e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bannerfor.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775737697, "uuid": "9603fdf9-340f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kggm.ryesears.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775737989, "uuid": "44796284-3410-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://convertamp.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775737994, "uuid": "474b85d7-3410-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/N0GCyfBK/image1.png", "Tag": [ { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775738053, "uuid": "6a69a78d-3410-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.156.173:60855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775738174, "uuid": "b27389da-3410-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.160.182:53130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775738351, "uuid": "1c416152-3411-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5uv69r.friskynanos.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775738624, "uuid": "beab30bc-3411-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.44.29:56257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775738708, "uuid": "f122f1b0-3411-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stackstone.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775738769, "uuid": "14f39c85-3412-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastefy.app/SHSuwC5f/raw?part=obrmdAn.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775738771, "uuid": "16a37278-3412-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/Y06d8kLH/image4.png", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775738826, "uuid": "37766890-3412-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://i.postimg.cc/L8vbLxGY/image1.png", "Tag": [ { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775739070, "uuid": "c8605f19-3412-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-pay1.desertpract.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775739127, "uuid": "eabb8fb5-3412-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.87.108:58800/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775739277, "uuid": "43ed4bb5-3413-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.241.51:35659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775739320, "uuid": "5d78fde8-3413-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.211.79.169:35501/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775739367, "uuid": "79d17e75-3413-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://enzyrne-craft.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775739561, "uuid": "ed0c3e9a-3413-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.137.87:59140/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775739728, "uuid": "50b9e763-3414-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.87.108:58800/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775739735, "uuid": "54b7733c-3414-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kerneldiscov.crumpledzev.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775739881, "uuid": "ac1cf21f-3414-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.30.70:42675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740090, "uuid": "2876cf7a-3415-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shapefinal.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740330, "uuid": "b7a9b56d-3415-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://4gzx0ikx.bankingrugnia.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740515, "uuid": "25a282a0-3416-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.225.87:34367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740627, "uuid": "687b2655-3416-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.221.104:44314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740693, "uuid": "8fdc06ef-3416-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jgmwuf2l.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740881, "uuid": "0016ada4-3417-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1339/riscv64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740881, "uuid": "0019a310-3417-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1339/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740881, "uuid": "00331953-3417-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1339/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740881, "uuid": "0041604c-3417-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1339/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740938, "uuid": "222b7504-3417-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1339/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740997, "uuid": "453acd65-3417-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1339/arm64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775740997, "uuid": "453ad465-3417-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1339/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775741048, "uuid": "63b7ee5b-3417-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://travelconvoy.literallukom.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775741192, "uuid": "b95feb97-3417-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.87.104:48687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775741347, "uuid": "15be9556-3418-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://learnmed.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775741536, "uuid": "86ac51fc-3418-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.203.28:38061/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775741771, "uuid": "128949df-3419-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://curiousport.bobinaslums.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775741779, "uuid": "176d220b-3419-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.97.250:59697/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775742069, "uuid": "c469e75d-3419-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tal-lineis.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775742196, "uuid": "0ffb074c-341a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.97.250:59697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775742670, "uuid": "2a262f2b-341b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cascadeaudit.cdmilestone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775742678, "uuid": "2f1e5f86-341b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.11:52717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775742848, "uuid": "942f7f02-341b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gbfezss.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775742868, "uuid": "a0b20f11-341b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.113.247.136:40649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775742906, "uuid": "b6c7069d-341b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/1980571880/t6u2Tbq.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743092, "uuid": "26247f1e-341c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://northdusk.noetisphere.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743151, "uuid": "494dfe5b-341c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.149.218:51408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743330, "uuid": "b3fe5f4a-341c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gwryxarc.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743388, "uuid": "d6a21e6a-341c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.93.3.139/sexogaycomtravesti/chrome_update.exe", "Tag": [ { "name": "147-93-3-139", "colour": "#f2f09d", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743515, "uuid": "21c2d1a8-341d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.93.3.139/sexogaycomtravesti/main.exe", "Tag": [ { "name": "147-93-3-139", "colour": "#f2f09d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743753, "uuid": "afb0e748-341d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pbby.gnoseonflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743809, "uuid": "d12cd447-341d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.93.3.139/sexogaycomtravesti/bkp/chrome_update.exe", "Tag": [ { "name": "147-93-3-139", "colour": "#f2f09d", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775743869, "uuid": "f4cb7a9d-341d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.93.3.139/sexogaycomtravesti/bkp/chrome_update_old.exe", "Tag": [ { "name": "147-93-3-139", "colour": "#f2f09d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775744049, "uuid": "609d36c4-341e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://2vw0eqz.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775744178, "uuid": "ad3376bc-341e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.133.140:52433/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775744240, "uuid": "d2362ba6-341e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.11:52717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775744412, "uuid": "38bdd4e7-341f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://breeze2-lab.epistemevault.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775744599, "uuid": "a8644376-341f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.94.86:55388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775744768, "uuid": "0caa54ee-3420-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sh13l-mount.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775745020, "uuid": "a2fb1037-3420-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.33.28:47168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775745020, "uuid": "a30eb598-3420-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.77.227:46777/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775745034, "uuid": "ab463f87-3420-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.58.118.149:33480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775745068, "uuid": "bf90ae3d-3420-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rapidgold.ontocorex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775745248, "uuid": "2b392de0-3421-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.115.128:36606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775745428, "uuid": "96432b35-3421-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.94.86:55388/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775745432, "uuid": "98b6128d-3421-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumvenor1.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775745731, "uuid": "4a957292-3422-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://formsola.axiomatrixflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775745738, "uuid": "4ec88c54-3422-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.83.65:45907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775746090, "uuid": "20c89544-3423-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deeppublic.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775746211, "uuid": "69230239-3423-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:43560/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775746267, "uuid": "8a44fcaf-3423-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.5.102.97/gs321RR/horrorreamer.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775746328, "uuid": "ae838cb0-3423-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.255.173.32:34957/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775746397, "uuid": "d7cd62a9-3423-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.138.126:34258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775746448, "uuid": "f602c609-3423-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tide-dock.dialectraforge.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775746459, "uuid": "fccd7dd5-3423-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.234.253:39317/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775746570, "uuid": "3eab0b10-3424-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stawel.terrae.rest/?1/_x", "Tag": [ { "name": "Astaroth", "colour": "#3fbe10", "exportable": true, "hide_tag": false }, { "name": "BRA", "colour": "#b2a81f", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "Guildma", "colour": "#e4eccf", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775746627, "uuid": "60f018ea-3424-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.148.184.156:49641/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775746745, "uuid": "a77c87b2-3424-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.5.102.97/oD1Zv/gluedig.hta", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775746823, "uuid": "d5e0dbaf-3424-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.58.118.149:33480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775746873, "uuid": "f37fea52-3424-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kerryglow.info/", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ua-ps", "colour": "#32D6F6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775746935, "uuid": "1892737b-3425-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.143.159:47932/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775746990, "uuid": "3909ad39-3425-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://713c.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775747289, "uuid": "eb980557-3425-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zen-venen.inferentrixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775747409, "uuid": "33419b69-3426-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velmarkis.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775747721, "uuid": "ed3d45ae-3426-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.47.188.236:45324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775747828, "uuid": "2cbebb5a-3427-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.255.173.32:34957/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775747830, "uuid": "2db3f2ca-3427-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:43560/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775748014, "uuid": "9b6cca05-3427-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rep4-signal.theorivector.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775748141, "uuid": "e747b3c8-3427-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.12.39:60892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775748251, "uuid": "28c0ec4f-3428-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5trea-crest.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775748312, "uuid": "4d8a78fa-3428-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.33.28:47168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775748380, "uuid": "75e50184-3428-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.12.39:60892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775748616, "uuid": "024608b4-3429-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.173.88.51:52537/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775748728, "uuid": "455e23d5-3429-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://majorloca.systemoraengine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775748910, "uuid": "b1faea0b-3429-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://i61l.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775749026, "uuid": "f712433a-3429-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.109.33:48569/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775749097, "uuid": "21280cd6-342a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lum-draar.cognifluxion.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775749453, "uuid": "f59e176d-342a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cre5t-port.metaphysixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775749752, "uuid": "a7509c12-342b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.143.159:47932/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775749816, "uuid": "cd81c99d-342b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rhuhgz.metaphysixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775749928, "uuid": "1083a851-342c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.109.33:48569/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775750176, "uuid": "a466f137-342c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quor-forgear.metaphysixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775750240, "uuid": "ca4721ec-342c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.110.141:40162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775750356, "uuid": "0f8f40da-342d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.173.88.51:52537/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775750717, "uuid": "e6b3afec-342d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hp301u.metaphysixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775750835, "uuid": "2cddcf5a-342e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ebqje.metaphysixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775751133, "uuid": "dece999f-342e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5hor-line.metaphysixhub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775751427, "uuid": "8de46ea6-342f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.65.244.250:52606/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775751494, "uuid": "b5a73315-342f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://canyondeliver.gnosistack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775751513, "uuid": "c121b2b9-342f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.100.228:40948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775751796, "uuid": "69f5d459-3430-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://observernet.gnosistack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775751981, "uuid": "d8769f5a-3430-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.25.132:42309/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775752158, "uuid": "416fd100-3431-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pale-beam.gnosistack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775752513, "uuid": "15484cce-3432-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-n1mb.gnosistack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775752872, "uuid": "eb23359a-3432-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talspireor.gnosistack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775753173, "uuid": "9ef21dd2-3433-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://compres0-watch.gnosistack.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775753237, "uuid": "c4c9f612-3433-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.110.141:40162/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775753419, "uuid": "3125f70d-3434-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.201.205:35235/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775753468, "uuid": "4e8c5001-3434-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kel-coreex.epistemflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775753662, "uuid": "c22fd1b4-3434-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.184.156:47027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775753768, "uuid": "01883e50-3435-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://capita-stack.epistemflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775753961, "uuid": "7493c488-3435-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.184.156:47027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775754143, "uuid": "e119a690-3435-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.82.210:55255/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775754189, "uuid": "fbfef6f8-3435-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dustdefend.epistemflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775754245, "uuid": "1db3bd27-3436-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/6849343518/NCp6USn.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775754552, "uuid": "d49f9cdf-3436-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mervale8on.epistemflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775754622, "uuid": "fe9e9d7d-3436-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.89.204:37505/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775754855, "uuid": "893de7e0-3437-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lanepla.epistemflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775755161, "uuid": "3fd41fdd-3438-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.201.205:35235/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775755207, "uuid": "5b43b6d8-3438-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/6849343518/nXPvMW4.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775755212, "uuid": "5e44426b-3438-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ikpxa.epistemflow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775755222, "uuid": "63b9e537-3438-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:59704/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775755454, "uuid": "ee496b67-3438-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://6ud07.ontofabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775755872, "uuid": "e722c2d0-3439-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sfu2.ontofabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775755878, "uuid": "eae6eee3-3439-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.82.210:55255/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775755879, "uuid": "eb76e47a-3439-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.249.194.99:58270/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775756271, "uuid": "d55465ea-343a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.249.74:39147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775756409, "uuid": "272dd92a-343b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pdwex6.ontofabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775756425, "uuid": "30cf86e2-343b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.89.204:37505/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775756588, "uuid": "925fe61b-343b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyndra1is.ontofabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775756889, "uuid": "45d0bce5-343c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mist-sub.ontofabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775757082, "uuid": "b8c56105-343c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.110.171:46019/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775757193, "uuid": "fafaf91e-343c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tren-sta.ontofabric.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775757739, "uuid": "40224551-343e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.110.171:46019/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775757914, "uuid": "a8707865-343e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.23.135.140:35197/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775758039, "uuid": "f3359ed4-343e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.213.177.46:52383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775759227, "uuid": "b705f76b-3441-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.80.213:52488/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775759418, "uuid": "28cd012a-3442-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.213.177.46:52383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775759590, "uuid": "8fa439e2-3442-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://227p0.dialectraflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775759770, "uuid": "faa12204-3442-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.25.32:39935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775759778, "uuid": "ff985bec-3442-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.174.71:49912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775759827, "uuid": "1c7639cf-3443-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://streamerspectrum.dialectraflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775760248, "uuid": "177789ea-3444-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkvale0ex.dialectraflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775760726, "uuid": "34d2f427-3445-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.80.213:52488/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775760797, "uuid": "5ebc2954-3445-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.1.114:60968/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775760858, "uuid": "8319333b-3445-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tag3s.dialectraflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775761031, "uuid": "eab0079b-3445-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.139.213.60:46092/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775761032, "uuid": "eb2ee8b1-3445-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ruralgrove.dialectraflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775761220, "uuid": "5ad73b65-3446-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.194.227.46:50880/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775761273, "uuid": "7a9acd0f-3446-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://t57294m.dialectraflux.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775761458, "uuid": "e8eeebff-3446-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.174.71:49912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775761568, "uuid": "2a7bed6e-3447-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.25.32:39935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775761631, "uuid": "4fd5da1f-3447-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grid8-glow.inferlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775761927, "uuid": "00a470ad-3448-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vor-lineet.inferlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775761989, "uuid": "25251ae7-3448-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.168.199:45770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775762242, "uuid": "bc0ad750-3448-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://sparrowhones.inferlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775762303, "uuid": "e092dd1d-3448-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sparrowhones.inferlogic.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775762318, "uuid": "e95c903d-3448-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.119:50091/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775762570, "uuid": "7fce2b2b-3449-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.139.213.60:46092/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775762826, "uuid": "1868a8f3-344a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.10.209.143:37698/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775763006, "uuid": "83666e57-344a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7742504508/96f9Qz3.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775763129, "uuid": "ccb34def-344a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.90.35:35122/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775763491, "uuid": "a4e74f08-344b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talvenal7.dreswaoaky.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775763560, "uuid": "cd9c3561-344b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.241.174:57799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775763665, "uuid": "0c22f05d-344c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/1202156955/jagqzHE.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775763671, "uuid": "0faa65f8-344c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yj6t.dreswaoaky.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775763859, "uuid": "7fd617d3-344c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.119:50091/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775763910, "uuid": "9e9738f3-344c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.158.1:51186/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775764032, "uuid": "e7037bdf-344c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pipe1-trail.dreswaoaky.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775764331, "uuid": "9963dc3a-344d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tens-forge.dreswaoaky.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775764626, "uuid": "493673c9-344e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.206.112:37162/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775764629, "uuid": "4b0d263a-344e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://marshfiel.dreswaoaky.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775764939, "uuid": "0378dd3a-344f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.183.96:57623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775764988, "uuid": "21347efd-344f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.200.17:51782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775765047, "uuid": "43d8a84a-344f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bajla4.dreswaoaky.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775765057, "uuid": "4a34ed7a-344f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.60:34068/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775765117, "uuid": "6de51b6d-344f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/gpon.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775765351, "uuid": "f910001e-344f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rough9-point.makemicrophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775765412, "uuid": "1d8e2755-3450-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.245.232.47:54940/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775765472, "uuid": "41559fd9-3450-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.71.155:39266/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775765719, "uuid": "d4cc0164-3450-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://k0ejxai.makemicrophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775766071, "uuid": "a6af0fc9-3451-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://etttiinm.makemicrophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775766370, "uuid": "5868c8b8-3452-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://goldgeyse.makemicrophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775766378, "uuid": "5d4cf1f8-3452-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.183.96:57623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775766426, "uuid": "7a19de08-3452-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.206.112:37162/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775766499, "uuid": "a5b1f06f-3452-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.60:34068/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775766728, "uuid": "2e412a2a-3453-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://9tdrxs7.makemicrophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767090, "uuid": "06014a75-3454-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://btvpo7.makemicrophone.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767093, "uuid": "07e60fd4-3454-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.5.252:59456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767206, "uuid": "4b233142-3454-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/6749237131/WjRZCsK.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767387, "uuid": "b6e66a15-3454-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://v1de0-mark.citizenconjunct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767578, "uuid": "2883702b-3455-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/manji.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767578, "uuid": "28838492-3455-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/00101010101001/o.xml", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767578, "uuid": "28838517-3455-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/manji.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767632, "uuid": "48fc493c-3455-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/manji.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767632, "uuid": "48fc6c57-3455-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/manji.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767691, "uuid": "6c586de8-3455-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.200.17:51782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775767691, "uuid": "6c59911d-3455-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultra-tr4d.citizenconjunct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775768051, "uuid": "42a7ea97-3456-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://17qaxj2h.citizenconjunct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775768284, "uuid": "cd69a55d-3456-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/1781548144/cWyzSxe.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775768345, "uuid": "f2207d3b-3456-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/6749237131/WjRZCsK.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775768409, "uuid": "183ed115-3457-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shadowneural.citizenconjunct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775768536, "uuid": "6380be71-3457-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.5.252:59456/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775768717, "uuid": "cfe24062-3457-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.142.138:52609/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775768767, "uuid": "ed2ca6eb-3457-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bann3-hinge.citizenconjunct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775769069, "uuid": "a14773c0-3458-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-s0lid.citizenconjunct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775769207, "uuid": "f36b6448-3458-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.116.218.59:54382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775769250, "uuid": "0d2e2438-3459-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.93.118:40202/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775769435, "uuid": "7b51b751-3459-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://client-gro.learnstingray.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775769677, "uuid": "0c0d39f6-345a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.147.100.200:48345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775769787, "uuid": "4d7a5792-345a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gr4n-panel.learnstingray.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775770030, "uuid": "de80ec1a-345a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ia22i03.learnstingray.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775770098, "uuid": "06bf3209-345b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.251.163:48644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775770390, "uuid": "b4bb3c77-345b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorlithon3.learnstingray.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775770516, "uuid": "ffb78873-345b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.67.166:51230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775770690, "uuid": "678f87d2-345c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://retaine2-drive.learnstingray.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775770884, "uuid": "db149805-345c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.60.227:49301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775770926, "uuid": "f48d996d-345c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.87.165:34443/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775771117, "uuid": "660c8b7e-345d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-cort3.learnstingray.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775771301, "uuid": "d39c0b86-345d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.208.104:55808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775771412, "uuid": "1634e211-345e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nor-forgeor.gablewagon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775771603, "uuid": "878d08af-345e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.208.104:55808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775771715, "uuid": "cab9dab3-345e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ynt4x2-logic.gablewagon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775772072, "uuid": "9f99f7d3-345f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ip085.gablewagon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775772438, "uuid": "794fd533-3460-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bl0om-dock.gablewagon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775772558, "uuid": "c14a401d-3460-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.191.32:46174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775772727, "uuid": "259094be-3461-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.87.165:34443/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775772790, "uuid": "4b201544-3461-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.166.84:59922/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775772792, "uuid": "4cb462d4-3461-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://uigjpx.gablewagon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775772983, "uuid": "be3c81c5-3461-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.145.226:39009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775772983, "uuid": "be494375-3461-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.75.71:46694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775773329, "uuid": "8cc407a5-3462-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://agentunite.gablewagon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775773517, "uuid": "fcac8d7d-3462-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://6tyjqgjx.technocsnatch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775773754, "uuid": "8a1db581-3463-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://uefvnscr.technocsnatch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775773822, "uuid": "b2332008-3463-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.26.32:34403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775774115, "uuid": "60cc4518-3464-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://61cyrs.technocsnatch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775774123, "uuid": "65e5525e-3464-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.191.32:46174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775774474, "uuid": "36bf96d1-3465-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://biomeharvest.technocsnatch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775774529, "uuid": "579ad97f-3465-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.32.249:50983/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775774543, "uuid": "5fef1b68-3465-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.237.161:51635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775774543, "uuid": "6003ec45-3465-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.153.199:52507/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775774664, "uuid": "a86e7159-3465-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.65.106:55671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775774718, "uuid": "c85d5402-3465-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.75.71:46694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775774832, "uuid": "0cabfcdc-3466-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://portastora.technocsnatch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775775127, "uuid": "bc543423-3466-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.32.249:50983/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775775133, "uuid": "bfb2e0ea-3466-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ivorysta.technocsnatch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775775187, "uuid": "e05104e8-3466-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.79.44:50610/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775775490, "uuid": "94eb5c97-3467-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vortide5ix.backeddown.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775775789, "uuid": "4709e41b-3468-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3af4dq.backeddown.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775775804, "uuid": "4fd61f37-3468-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.65.106:55671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775776041, "uuid": "dd1286e2-3468-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.153.199:52507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775776091, "uuid": "faf2f440-3468-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://matri-node.backeddown.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775776455, "uuid": "d3e03c9f-3469-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c1ip-signal.backeddown.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775776510, "uuid": "f4c69e3b-3469-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/Ni9n3sIO.exe", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775776569, "uuid": "17d8b824-346a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/runer.exe", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775776628, "uuid": "3b2fbeb6-346a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.124.121:55488/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775776759, "uuid": "88d27ab3-346a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.114.247:56362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775776814, "uuid": "aa0c931d-346a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://42ck8.backeddown.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775777115, "uuid": "5d6cfb7c-346b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenlithex.backeddown.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775777179, "uuid": "83878618-346b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.113.244:59310/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775777228, "uuid": "a06d52f2-346b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.188:32865/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775777471, "uuid": "31a882d9-346c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://z55hx.largechildren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775777527, "uuid": "52c04c11-346c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.236.21:46174/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775777530, "uuid": "54906266-346c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.113.244:59310/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775777531, "uuid": "550dfc02-346c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.41.119:50135/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775777586, "uuid": "75faf39a-346c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.79.188:32865/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775777601, "uuid": "7eb3cbd6-346c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.41.119:50135/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775777768, "uuid": "e291e540-346c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.236.21:46174/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775777769, "uuid": "e2bc201d-346c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://primesun.largechildren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775777834, "uuid": "0992f505-346d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.114.247:56362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778011, "uuid": "734270cb-346d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.223.68.170/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778011, "uuid": "734af959-346d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.223.68.170/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778011, "uuid": "7351024d-346d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.223.68.170/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778011, "uuid": "73544fcc-346d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.223.68.170/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778011, "uuid": "73648366-346d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.223.68.170/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778011, "uuid": "73652f39-346d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.223.68.170/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778011, "uuid": "7367676d-346d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.223.68.170/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778011, "uuid": "73676913-346d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.223.68.170/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778012, "uuid": "73e98393-346d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.223.68.170/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778013, "uuid": "747cd11a-346d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://145.223.68.170/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778131, "uuid": "baf753f1-346d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://freshclinic.largechildren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778254, "uuid": "044d2b4b-346e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.48.189:51357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778258, "uuid": "06a38fad-346e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.111.194:54440/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778437, "uuid": "70f4e394-346e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.186.172:49888/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778491, "uuid": "91964ade-346e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://m4r5-scope.largechildren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778617, "uuid": "dc8fb722-346e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.138.126:34258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775778792, "uuid": "449ecd54-346f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://patternreed.largechildren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775779151, "uuid": "1b08488c-3470-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zigstdj.largechildren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712484, "uuid": "e24dc085-33d4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.249.10.200", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775716085, "uuid": "44822b16-33dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.32.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775717407, "uuid": "58568ffc-33e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.32.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775717225, "uuid": "ebcd1dfd-33df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.9.215", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775754126, "uuid": "d6b7de03-3435-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.224.82.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775745005, "uuid": "9a27ad5d-3420-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.58.118.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775718125, "uuid": "0494b81a-33e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.175.246.40", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775734624, "uuid": "6e9f4dc3-3408-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.65.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775730426, "uuid": "a87377a7-33fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.5.37", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775742845, "uuid": "92cc699e-341b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.113.247.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775733125, "uuid": "f0f9c30c-3404-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.11.200", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775769183, "uuid": "e5a6174b-3458-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.116.218.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723584, "uuid": "ba197e09-33ee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.13.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775693884, "uuid": "93c87292-33a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.152.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775761025, "uuid": "e6d32e75-3445-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.139.213.60", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775738164, "uuid": "acda9d37-3410-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.160.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775764924, "uuid": "fac2853a-344e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.200.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775741525, "uuid": "7fb699bb-3418-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.203.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736544, "uuid": "e702a112-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.156.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775759224, "uuid": "b56deaf6-3441-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.80.213", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775757064, "uuid": "ae0c083c-343c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.110.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775702344, "uuid": "4640670f-33bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.148.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775710325, "uuid": "db0c4b68-33cf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.233.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775724065, "uuid": "d8b90d75-33ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.8.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743144, "uuid": "451202cc-341c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.149.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775693824, "uuid": "701a35e7-33a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.173.66", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775741764, "uuid": "0ea724dc-3419-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.97.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775746445, "uuid": "f45ab80e-3423-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.234.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775738584, "uuid": "a6fce1e0-3411-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.44.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775778245, "uuid": "fe9c7a15-346d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.111.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775728685, "uuid": "9ac35f9d-33fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.214.87.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775730665, "uuid": "36dc4d7e-33ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.13.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775703725, "uuid": "7d69041c-33c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.90.54.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775774526, "uuid": "5600f9cf-3465-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.32.249", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775719806, "uuid": "ee7a8884-33e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.163.183.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775724425, "uuid": "af57d450-33f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.215.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775729525, "uuid": "8f8ae6e8-33fc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.144.19", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775731925, "uuid": "26065209-3402-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.66.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775777225, "uuid": "9f0e2d6b-346b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.79.188", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775721725, "uuid": "6607962d-33ea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.192.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775722145, "uuid": "60661d79-33eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.244.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775701505, "uuid": "5261441c-33bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.156.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775748605, "uuid": "fbede984-3428-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.173.88.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775739125, "uuid": "e9271b49-3412-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.87.108", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775756225, "uuid": "b9e41900-343a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.235.249.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775725385, "uuid": "eb773cf6-33f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.66.32.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775763906, "uuid": "9bd48ea2-344c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.158.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775759765, "uuid": "f790a063-3442-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.174.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736185, "uuid": "10bd8696-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.241.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775772964, "uuid": "b340a395-3461-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.75.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775772964, "uuid": "b33c334d-3461-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.145.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775716926, "uuid": "39ce101d-33df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.227.12", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775693945, "uuid": "b7e44686-33a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.237.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775697124, "uuid": "1ef88d81-33b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.34.217", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775740865, "uuid": "f6971442-3416-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "129.213.9.74", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775778006, "uuid": "7028c2e1-346d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "145.223.68.170", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743384, "uuid": "d3ff4892-341c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "147.93.3.139", "Tag": [ { "name": "147-93-3-139", "colour": "#f2f09d", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775746325, "uuid": "ad08782f-3423-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "150.255.173.32", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775746265, "uuid": "88e8b019-3423-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.5.102.97", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775769183, "uuid": "e5a623a8-3458-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.93.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775717225, "uuid": "ebcee544-33df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.81.202", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726225, "uuid": "e0228985-33f4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.16.53.75", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775768045, "uuid": "3f3ba1e9-3456-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "17qaxj2h.citizenconjunct.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775699284, "uuid": "266bf668-33b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.55.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775704384, "uuid": "066d567c-33c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.60.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775740506, "uuid": "20d23604-3416-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.225.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775716085, "uuid": "44822dcd-33dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.77.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775772545, "uuid": "b95deb76-3460-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.191.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775771285, "uuid": "ca23a721-345d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.208.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775701085, "uuid": "57ba7496-33ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.195.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775773806, "uuid": "a901ce34-3463-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.26.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775745245, "uuid": "293bf568-3421-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.115.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775751485, "uuid": "b0c68bdb-342f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.100.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723765, "uuid": "260488bd-33ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.148.204.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775717225, "uuid": "ebcd8b38-33df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.96.165.76", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775757906, "uuid": "a39fde68-343e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.23.135.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775708885, "uuid": "80e835b3-33cc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.191.104.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775739306, "uuid": "5564eda1-3413-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.211.79.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775718906, "uuid": "d61fef09-33e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "206.189.93.37", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775702524, "uuid": "b18187eb-33bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.181.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712065, "uuid": "e823c943-33d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.96.201", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775717225, "uuid": "ebcdad6c-33df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.97.19", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775768705, "uuid": "c8a592be-3457-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.142.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775725025, "uuid": "150db07d-33f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.150.240", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775719025, "uuid": "1d24dc72-33e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.226.86", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775725445, "uuid": "0f5f89dd-33f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.215.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775774644, "uuid": "9ca4f790-3465-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.65.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775729224, "uuid": "dc1afbbd-33fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.220.145.217", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775759586, "uuid": "8d447780-3442-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "227p0.dialectraflux.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775758024, "uuid": "ea3ddc12-343e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.213.177.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775746923, "uuid": "114abbea-3425-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.143.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775778245, "uuid": "fe9c81af-346d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.48.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775744048, "uuid": "5f7564ea-341e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2vw0eqz.epistemevault.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775755866, "uuid": "e38fa64c-3439-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.249.194.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775763124, "uuid": "c9e34aff-344a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.69.90.35", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775702105, "uuid": "b7d40cf2-33bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.13.63.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775718844, "uuid": "b0fb18dd-33e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.240.58.33", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775751425, "uuid": "8cd3f765-342f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.65.244.250", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775775787, "uuid": "45d3b83a-3468-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3af4dq.backeddown.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775713985, "uuid": "60e3c7b7-33d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.207.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775719925, "uuid": "3557a51b-33e6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.155.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775761985, "uuid": "2322f034-3448-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.168.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775764924, "uuid": "fac27e25-344e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.183.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775739785, "uuid": "728c3d40-3414-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.30.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775777525, "uuid": "51a4e1c4-346c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.41.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775775125, "uuid": "bb49c8d3-3466-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.79.44", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775700365, "uuid": "aa63e02f-33b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.107.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775731685, "uuid": "9692c557-3401-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.233.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775749024, "uuid": "f57297e9-3429-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.109.33", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775760786, "uuid": "585cada7-3445-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.1.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775734206, "uuid": "758ad57c-3407-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.215.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775777525, "uuid": "51a4cbff-346c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.236.21", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775746385, "uuid": "d09aa144-3423-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.138.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775776806, "uuid": "a529f2a0-346a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42ck8.backeddown.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775717225, "uuid": "ebcdb36b-33df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.6.10.120", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775740327, "uuid": "b5f10990-3415-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "4gzx0ikx.bankingrugnia.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775732226, "uuid": "d8fa9f40-3402-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.165.92.80", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709725, "uuid": "755782c3-33ce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.47.188.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775763544, "uuid": "c4575e87-344b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.241.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775751130, "uuid": "dccce023-342e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5hor-line.metaphysixhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775748248, "uuid": "2719b0df-3428-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5trea-crest.systemoraengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775738349, "uuid": "1aed4a48-3411-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5uv69r.friskynanos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775771713, "uuid": "c9259a33-345e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ynt4x2-logic.gablewagon.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775717225, "uuid": "ebcd8894-33df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.178.147.73", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775698024, "uuid": "37661447-33b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.234.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775750224, "uuid": "c1140c38-342c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.110.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775717225, "uuid": "ebcd9f9d-33df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.39.11", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775708524, "uuid": "a9ccdcc6-33cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.125.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775774111, "uuid": "5e6234d3-3464-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61cyrs.technocsnatch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775773514, "uuid": "fad29997-3462-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "6tyjqgjx.technocsnatch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775755451, "uuid": "eca4d727-3438-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "6ud07.ontofabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775746987, "uuid": "3747ce57-3425-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "713c.inferentrixhub.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775734685, "uuid": "92cc9d02-3408-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "72.255.30.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712724, "uuid": "713b4c13-33d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "75.1.240.64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775765405, "uuid": "195a595c-3450-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "96.245.232.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775701924, "uuid": "4ba685ff-33bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "96.246.230.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775766724, "uuid": "2bde855d-3453-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "9tdrxs7.makemicrophone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723176, "uuid": "c71946d2-33ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "accessible-peach-termite.myfilebase.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775773325, "uuid": "8a4012a9-3462-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "agentunite.gablewagon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775771106, "uuid": "5f541ab0-345d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-cort3.learnstingray.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775737205, "uuid": "7120c997-340e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-m1x.bereathfertil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726467, "uuid": "70e4cf50-33f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "aona.s3.cubbit.eu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775724244, "uuid": "43d770d3-33f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "area-api.desertpract.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775731990, "uuid": "4ce54505-3402-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "area-check.bobinaslums.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775760245, "uuid": "15dd41d4-3444-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkvale0ex.dialectraflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775701027, "uuid": "350c1c8c-33ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "audit-hub.epistemevault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775765044, "uuid": "428d35d6-344f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bajla4.dreswaoaky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775728691, "uuid": "9e1111c7-33fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bank-node.bankingrugnia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775768765, "uuid": "ebf9451d-3457-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bann3-hinge.citizenconjunct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775737384, "uuid": "dbf9eb30-340e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bannerfor.ryesears.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775699345, "uuid": "4aaa823b-33b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-gate.gnoseonflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775719325, "uuid": "cf8eb1f2-33e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-svc.bereathfertil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775700006, "uuid": "d4bcbe2e-33b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-vault.epistemevault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775774470, "uuid": "34cc5ce6-3465-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "biomeharvest.technocsnatch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775772430, "uuid": "74a7cefa-3460-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bl0om-dock.gablewagon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775730366, "uuid": "84c1e9ee-33fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "book-api.literallukom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712074, "uuid": "ede12d99-33d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "boost.newrock.life" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775695085, "uuid": "5f40385e-33ac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brain-gate.cogniversehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775714824, "uuid": "551b8694-33da-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brain-svc.cognifluxion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775744408, "uuid": "36217335-341f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "breeze2-lab.epistemevault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767085, "uuid": "02a2ea75-3454-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "btvpo7.makemicrophone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775776450, "uuid": "d0ea49ef-3469-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c1ip-signal.backeddown.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775751488, "uuid": "b219a199-342f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "canyondeliver.gnosistack.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775753765, "uuid": "ff386f4a-3434-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "capita-stack.epistemflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775742667, "uuid": "287e4340-341b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cascadeaudit.cdmilestone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775728029, "uuid": "13b81a60-33f9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cash-flow.bankingrugnia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775722924, "uuid": "30e65cd6-33ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cell-vault.friskynanos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775702585, "uuid": "d624f0d8-33bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cell-vault.ontocorex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775732412, "uuid": "48564297-3403-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "city-api.bobinaslums.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775769424, "uuid": "753bfe4b-3459-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "client-gro.learnstingray.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775753171, "uuid": "9d4db7c4-3433-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "compres0-watch.gnosistack.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775737986, "uuid": "42caaa25-3410-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "convertamp.friskynanos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775716211, "uuid": "8f8d6861-33dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "core-api.importantserv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775701747, "uuid": "e25c0ffd-33bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "core-api.ontocorex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775713209, "uuid": "926e5a98-33d6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "core-hub.systemoraengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736663, "uuid": "2e3075f8-340d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cr4ft-pulse.importantserv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775749447, "uuid": "f1f520e6-342a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cre5t-port.metaphysixhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775718244, "uuid": "4b6ee91a-33e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "crop-api.bereathfertil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726412, "uuid": "4fc8769a-33f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "crowe-avvens.site" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775741767, "uuid": "0ff4449d-3419-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "curiousport.bobinaslums.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775704144, "uuid": "770604da-33c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-api.axiomatrixflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775716926, "uuid": "39dde954-33df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-vault.importantserv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775707390, "uuid": "06254ef2-33c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "debate-hub.dialectraforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775746087, "uuid": "1f485710-3423-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deeppublic.dialectraforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775698747, "uuid": "e63087b2-33b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "drift-vault.gnoseonflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775724970, "uuid": "f48ac552-33f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dry-vault.desertpract.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775754185, "uuid": "f9b5c0b4-3435-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dustdefend.epistemflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775756585, "uuid": "908d43d8-343b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyndra1is.ontofabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775750830, "uuid": "2a381448-342e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ebqje.metaphysixhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711827, "uuid": "5a5b248a-33d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "engine-api.systemoraengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775702344, "uuid": "464ac213-33bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "entity-node.ontocorex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775739364, "uuid": "78163b9b-3413-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "enzyrne-craft.crumpledzev.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711708, "uuid": "13585c2d-33d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "especially-acrobat-rouge-dominant.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775766067, "uuid": "a429042d-3451-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "etttiinm.makemicrophone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775720224, "uuid": "e7cfa63c-33e6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "farm-api.ryesears.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712072, "uuid": "eca30752-33d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast.newrock.life" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736067, "uuid": "ca835502-340b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fdode.ontocorex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775692806, "uuid": "1158da19-33a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "file-hub.systematrixflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775727487, "uuid": "d05dbc12-33f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "file-svc.crumpledzev.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775697665, "uuid": "615c8e3b-33b2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flow-data.gnoseonflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775713927, "uuid": "3e3928eb-33d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flux-api.cognifluxion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775699105, "uuid": "bbc1f5af-33b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flux-svc.gnoseonflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775725986, "uuid": "51ebe51d-33f4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fold-sync.crumpledzev.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775705765, "uuid": "3d26e662-33c5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "forge-api.dialectraforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775745725, "uuid": "47976724-3422-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "formsola.axiomatrixflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775778126, "uuid": "b78b45c3-346d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "freshclinic.largechildren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709550, "uuid": "0d6ce682-33ce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate-secure.inferentrixhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775742845, "uuid": "92d42dcd-341b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gbfezss.noetisphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775739065, "uuid": "c5919827-3412-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-pay1.desertpract.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775697364, "uuid": "adcd7987-33b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "global-gate.noetisphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712013, "uuid": "c98a7f26-33d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "go5z.my" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712009, "uuid": "c6bc9ffc-33d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "go6.my" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775766365, "uuid": "559058a3-3452-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "goldgeyse.makemicrophone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775769785, "uuid": "4c303fbe-345a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gr4n-panel.learnstingray.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775719987, "uuid": "5a139083-33e6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "grain-log.ryesears.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723646, "uuid": "df4bb158-33ee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "grid-gate.friskynanos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775761626, "uuid": "4cdd710c-3447-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "grid8-glow.inferlogic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775718965, "uuid": "f910ac42-33e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "grow-vault.bereathfertil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775732885, "uuid": "622c0108-3404-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "grupomcperu.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743326, "uuid": "b160adb4-341c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gwryxarc.gnoseonflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775716569, "uuid": "64ad07bf-33de-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "host-node.importantserv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775750713, "uuid": "e488fcd4-342d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hp301u.metaphysixhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775708470, "uuid": "899d744c-33cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub-secure.inferentrixhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775769067, "uuid": "a008eeb9-3458-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-s0lid.citizenconjunct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775748908, "uuid": "b06ed034-3429-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "i61l.cognifluxion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775770024, "uuid": "daec62c9-345a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ia22i03.learnstingray.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775755209, "uuid": "5c5c0162-3438-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ikpxa.epistemflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775707870, "uuid": "24382381-33ca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "infer-api.inferentrixhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775700184, "uuid": "3ecce183-33b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "info-api.epistemevault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775731390, "uuid": "e6c3a441-3400-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "info-svc.literallukom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726352, "uuid": "2c058696-33f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "innovspora.co.zw" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775772070, "uuid": "9e42c5a8-345f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ip085.gablewagon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775775131, "uuid": "be899ff2-3466-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ivorysta.technocsnatch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775740687, "uuid": "8c28b74d-3416-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jgmwuf2l.literallukom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775765711, "uuid": "cfb99769-3450-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "k0ejxai.makemicrophone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775753466, "uuid": "4d3c2a6b-3434-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kel-coreex.epistemflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775739731, "uuid": "52933036-3414-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kerneldiscov.crumpledzev.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775746869, "uuid": "f176df61-3424-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kerryglow.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775737689, "uuid": "914c6375-340f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kggm.ryesears.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775698087, "uuid": "5c901cb0-33b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "know-api.gnoseonflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775718544, "uuid": "fe200120-33e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "land-node.bereathfertil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775754850, "uuid": "867acd69-3437-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lanepla.epistemflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775741344, "uuid": "14403af1-3418-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "learnmed.bobinaslums.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775703426, "uuid": "cb6dd802-33bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "link-gate.ontocorex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709184, "uuid": "336bfb9b-33cd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "link-hub.inferentrixhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775728330, "uuid": "c75338c5-33f9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "loan-api.bankingrugnia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775707630, "uuid": "94f7efb8-33c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "logic-gate.dialectraforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775696764, "uuid": "4884c792-33b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "logic-vault.noetisphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775749093, "uuid": "1edb0d87-342a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lum-draar.cognifluxion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775745426, "uuid": "94ce979c-3421-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumvenor1.axiomatrixflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775778485, "uuid": "8dea2e47-346e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "m4r5-scope.largechildren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715911, "uuid": "dcdbb087-33dc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-gate.importantserv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775731689, "uuid": "992fd857-3401-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-gate.literallukom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775713626, "uuid": "8b024f23-33d7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-gate.systemoraengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775703185, "uuid": "3b670cb9-33bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-hub.ontocorex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775748726, "uuid": "444cf102-3429-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "majorloca.systemoraengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775724608, "uuid": "1cb5c73b-33f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "map-node.desertpract.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775733190, "uuid": "17ee70e1-3405-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "map-vault.bobinaslums.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775727670, "uuid": "3d8f07ba-33f8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mark-gate.crumpledzev.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775734687, "uuid": "94194d1e-3408-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mark-node.cdmilestone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775764626, "uuid": "49699fe8-344e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "marshfiel.dreswaoaky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775776087, "uuid": "f85badac-3468-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "matri-node.backeddown.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775703785, "uuid": "a1274bd0-33c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "matrix-flow.axiomatrixflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712545, "uuid": "06b3e765-33d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "matrix-vault.systemoraengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775754549, "uuid": "d2cc2385-3436-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mervale8on.epistemflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775723351, "uuid": "2f5d195a-33ee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "micro-svc.friskynanos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775693349, "uuid": "54b9a9c0-33a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mind-hub.cogniversehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775695744, "uuid": "e85e7c0d-33ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mind-sync.noetisphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775756884, "uuid": "42919e30-343c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mist-sub.ontofabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775710444, "uuid": "2266d283-33d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "model-node.theorivector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775721970, "uuid": "f808c0b5-33ea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nano-tech.friskynanos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775693706, "uuid": "298a3195-33a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neural-api.cogniversehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775714166, "uuid": "cc8974d3-33d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neural-node.cognifluxion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775735345, "uuid": "1c50cb14-340a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "next-svc.cdmilestone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775771405, "uuid": "11f3ff95-345e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nor-forgeor.gablewagon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743090, "uuid": "246ccbb5-341c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "northdusk.noetisphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726529, "uuid": "95724318-33f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nrmlogistics.ro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775751788, "uuid": "64dda489-3430-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "observernet.gnosistack.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712006, "uuid": "c5654d54-33d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ojemoneyyy.free.nf" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712845, "uuid": "b92411c4-33d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "order-svc.systemoraengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775727245, "uuid": "404e2016-33f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pack-vault.crumpledzev.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775731030, "uuid": "106d4961-3400-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "page-vault.literallukom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775752154, "uuid": "3f94eed1-3431-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pale-beam.gnosistack.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775701448, "uuid": "2fec0dd9-33bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "path-gate.epistemevault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775693047, "uuid": "a07bb40d-33a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "path-gate.systematrixflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775725624, "uuid": "7a49f2bd-33f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "path-hub.desertpract.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775778789, "uuid": "43157b57-346f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "patternreed.largechildren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775729350, "uuid": "2732ed7a-33fc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pay-svc.bankingrugnia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775743750, "uuid": "adfba970-341d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pbby.gnoseonflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775756406, "uuid": "25f4884e-343b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pdwex6.ontofabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775764028, "uuid": "e4f5753d-344c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pipe1-trail.dreswaoaky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775734385, "uuid": "dffc82c7-3407-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "plan-api.cdmilestone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775705465, "uuid": "8a7e480f-33c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "point-gate.axiomatrixflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711168, "uuid": "d1acacfb-33d1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "point-hub.theorivector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775774830, "uuid": "0b526e5d-3466-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "portastora.technocsnatch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775777766, "uuid": "e14899ed-346c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "primesun.largechildren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775736306, "uuid": "593040f5-340c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-1oad.importantserv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775752510, "uuid": "1391a733-3432-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-n1mb.gnosistack.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775719149, "uuid": "66f6bdaa-33e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-2ac530845a0b40f68c46df8146d4315a.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775697065, "uuid": "fbb4c017-33b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pure-svc.noetisphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712072, "uuid": "ecaf787d-33d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quickly.newrock.life" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775750174, "uuid": "a33c3a6f-342c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quor-forgear.metaphysixhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775770387, "uuid": "b2dda1ea-345b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorlithon3.learnstingray.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775708764, "uuid": "38bfd300-33cc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rank-svc.inferentrixhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775745064, "uuid": "bd8828f0-3420-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rapidgold.ontocorex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775748010, "uuid": "990d706e-3427-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rep4-signal.theorivector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775770686, "uuid": "652e9cc2-345c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "retaine2-drive.learnstingray.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775749811, "uuid": "caa9ee7f-342b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rhuhgz.metaphysixhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775735764, "uuid": "15e92dbd-340b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "road-gate.cdmilestone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775721610, "uuid": "2198d06f-33ea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "root-gate.ryesears.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775700726, "uuid": "81a18c91-33b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "root-svc.epistemevault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775702765, "uuid": "4144511d-33be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "root-svc.ontocorex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775765347, "uuid": "f6e75a3f-344f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rough9-point.makemicrophone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712126, "uuid": "0ccb289c-33d4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rule-node.systemoraengine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775761029, "uuid": "e977a95f-3445-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ruralgrove.dialectraflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775728987, "uuid": "4e8e642d-33fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "safe-vault.bankingrugnia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775724006, "uuid": "b5939a6a-33ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sand-logic.desertpract.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775700486, "uuid": "f2f44c59-33b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "secure-node.epistemevault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775732770, "uuid": "1d483ed1-3404-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "selyoptik.ro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775694009, "uuid": "ddec0084-33a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sense-log.cogniversehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775714585, "uuid": "c63ab940-33d9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sense-vault.cognifluxion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775755868, "uuid": "e4dea7b2-3439-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sfu2.ontofabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775744765, "uuid": "0b1a367c-3420-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sh13l-mount.ontocorex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775768405, "uuid": "15dac7d4-3457-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shadowneural.citizenconjunct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775740087, "uuid": "26a30f2d-3415-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shapefinal.bankingrugnia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775704506, "uuid": "4ea192ba-33c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shift-node.axiomatrixflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775698445, "uuid": "327754fa-33b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shift-node.gnoseonflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775732950, "uuid": "88ddbe9b-3404-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "site-node.bobinaslums.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775725385, "uuid": "eb8436b4-33f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "site-svc.desertpract.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775722267, "uuid": "a922b83f-33eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-api.friskynanos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726649, "uuid": "dd4db987-33f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-node.crumpledzev.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775719624, "uuid": "8225c732-33e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soil-hub.bereathfertil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775711526, "uuid": "a6dd17a1-33d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "space-gate.theorivector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775762230, "uuid": "b4c88fbf-3448-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sparrowhones.inferlogic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775696347, "uuid": "4fb1c5e5-33af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sphere-node.noetisphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775738706, "uuid": "efaac93c-3411-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stackstone.desertpract.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775746566, "uuid": "3cb8c3c0-3424-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stawel.terrae.rest" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775706912, "uuid": "e8b7d31b-33c7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "step-svc.dialectraforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775712066, "uuid": "e91c4d51-33d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stone.newrock.life" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775720945, "uuid": "952227ca-33e8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "store-vault.ryesears.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775704808, "uuid": "02f05cfe-33c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stream-svc.axiomatrixflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775759824, "uuid": "1b1b33d0-3443-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "streamerspectrum.dialectraflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775733369, "uuid": "8277fe32-3405-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "street-svc.bobinaslums.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775717285, "uuid": "0fd880a2-33e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc-relay.importantserv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775717584, "uuid": "c1d921de-33e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sync-hub.importantserv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775706130, "uuid": "16efe633-33c6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "synth-node.dialectraforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775761268, "uuid": "779f8432-3446-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "t57294m.dialectraflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775760850, "uuid": "7ebb786b-3445-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tag3s.dialectraflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775742067, "uuid": "c2cc1fd1-3419-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tal-lineis.cdmilestone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775752869, "uuid": "e96f7df0-3432-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talspireor.gnosistack.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775763488, "uuid": "a2d3ed57-344b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talvenal7.dreswaoaky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775735108, "uuid": "8f076619-3409-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "task-vault.cdmilestone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775764329, "uuid": "981c7877-344d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tens-forge.dreswaoaky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775730070, "uuid": "d449897d-33fd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "text-read.literallukom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775710811, "uuid": "fcd0d524-33d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "theory-svc.theorivector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775706730, "uuid": "7c3bc361-33c7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thesis-vault.dialectraforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715188, "uuid": "2df0378c-33db-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "think-hub.cognifluxion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775694424, "uuid": "d5b9b3c2-33aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "think-node.cogniversehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775695987, "uuid": "796691c8-33ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thought-api.noetisphere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775746446, "uuid": "f4c66786-3423-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tide-dock.dialectraforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775734089, "uuid": "2fc7410a-3407-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "time-step.cdmilestone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775733735, "uuid": "5cc8c0e5-3406-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trace-gate.bobinaslums.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775708170, "uuid": "d6c2e9a3-33ca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trace-node.inferentrixhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775721251, "uuid": "4bbf666a-33e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trade-svc.ryesears.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775741046, "uuid": "624e503e-3417-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "travelconvoy.literallukom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775757185, "uuid": "f605fcec-343c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tren-sta.ontofabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775729654, "uuid": "dc7d7d0a-33fc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trust-gate.bankingrugnia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775773750, "uuid": "87aa86f2-3463-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "uefvnscr.technocsnatch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775772789, "uuid": "4af93893-3461-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "uigjpx.gablewagon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767684, "uuid": "6819bc24-3455-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultra-tr4d.citizenconjunct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775705164, "uuid": "d758c2e5-33c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "unit-hub.axiomatrixflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775722634, "uuid": "83cccfc9-33ec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "unit-node.friskynanos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775767384, "uuid": "b516b2d6-3454-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "v1de0-mark.citizenconjunct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775709790, "uuid": "9c94d556-33ce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vector-api.theorivector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775715607, "uuid": "275fb981-33dc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vector-gate.cognifluxion.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775694726, "uuid": "89947fcd-33ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vector-svc.cogniversehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775747406, "uuid": "318a7256-3426-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "velmarkis.theorivector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775710627, "uuid": "8efadbdd-33d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "view-vault.theorivector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775761925, "uuid": "ff58879f-3447-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vor-lineet.inferlogic.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775775487, "uuid": "9317792d-3467-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vortide5ix.backeddown.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775730731, "uuid": "5e37ca39-33ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "word-node.literallukom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775726346, "uuid": "28befeff-33f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wrap-api.crumpledzev.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775732885, "uuid": "621df860-3404-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.hna-ksa.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775763669, "uuid": "0e7dace3-344c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yj6t.dreswaoaky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775777469, "uuid": "3021988d-346c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "z55hx.largechildren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775747287, "uuid": "ea65b394-3425-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zen-venen.inferentrixhub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775777112, "uuid": "5b593837-346b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenlithex.backeddown.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775779145, "uuid": "170af918-3470-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zigstdj.largechildren.in.net" } ] } }