{ "Event": { "published": true, "date": "2026-02-27", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-27", "timestamp": 1772237727, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "e4350d90-a83e-4ba9-874b-07cb8a485604", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1772150893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772150893, "uuid": "729fe6c8-163b-4777-890a-8778eba3696a", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772150893, "uuid": "83bdc597-a358-4adf-b286-3cd488d5a203", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772150893, "uuid": "0196a9f2-be7a-4efb-b752-47b6f57fe830", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772150893, "uuid": "7d4a778f-a9ce-48ac-b19f-7d025fbb0bcd", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772150893, "uuid": "23c2f4c4-9a4e-4c76-8e42-6ba186a5989b", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adef97ec-1376-11f1-8369-82aee05be84a", "comment": "Malware payload (QatarRAT)", "timestamp": 1772153587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772153587, "uuid": "3a561732-ebeb-49b4-9b65-54048472cb24", "comment": "Malware payload (QatarRAT)", "value": "5ed6f53e05535da82da34e600b0e5541", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "QatarRAT", "colour": "#9bf9c2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772153587, "uuid": "7e5454bd-d0d4-47e6-8976-10b4554af645", "comment": "Malware payload (QatarRAT)", "value": "f3acfbbd1ff87fb33ce62665085d9423b62f68fa54c00d70d3fdc53cb5912207", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "QatarRAT", "colour": "#9bf9c2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772153587, "uuid": "16309f5c-c991-497f-8246-0b3435033156", "value": "T19635CF5A9BB221FAE177C03D8AA65A76FDB278590320D7C703E456A91F27BD04B3D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772153587, "uuid": "9aea1b88-1a1f-45ce-a94a-fcf3d3d8fd8e", "value": "012b52c5b409e9f22dd209d7bfb843c2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772153587, "uuid": "86e16876-566a-4b7c-9640-aa26fb46ff8e", "value": "24576:H0I9BhzPmYuPl2k0qVaqZiME0uUyHt5gzj:H0I9BhmPlzZT7wHg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772153587, "uuid": "dd979154-f761-4738-8d9a-fd2de446c8d1", "value": 1068544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772153587, "uuid": "8607bb76-d74d-4ec0-ac81-42d5fdbde068", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0e3979c-1379-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772154907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772154907, "uuid": "55d941e6-2700-4d55-9fa8-cfc860e2c24a", "comment": "Malware payload", "value": "bf4add32a78270b731953ae0f69fbd3b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772154907, "uuid": "4ffe7b50-b84d-4f8f-8fe9-35281a41dd52", "comment": "Malware payload", "value": "1a2768b3fc437185a267a32ec594bdb677eacc85efd4ca94e84f7c0d26e43f7b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772154907, "uuid": "931677a7-ed4e-4075-bf71-3fb5ba760e72", "value": "T1B9C42304340741D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772154907, "uuid": "0aa94f47-9277-4f58-93fd-55335256859f", "value": "12288:b6wlOMWROC/FTeHo22Qm7NzofOr68mGeA924EwCc:D4MQOC/gHozN7NzomW80A9P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772154907, "uuid": "13d85530-214e-44a7-95f9-416e6a401fe1", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772154907, "uuid": "033886e0-f0ac-47a2-819a-9213698d9340", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07a8321a-137a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772155026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155026, "uuid": "6502ccd3-1934-420c-8dbd-c68afd3e6955", "comment": "Malware payload", "value": "97a1cc32ec627a5823a465ea30a61505", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155026, "uuid": "50cdf861-a44f-4ab7-aa76-89026751d8f5", "comment": "Malware payload", "value": "81422cc755a7ff2b2d0e7dc7e2ddc0adb9f5bbeb4917f0c20ab1691589607f5e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155026, "uuid": "c088e959-c88d-4bde-97c0-c61fc9db6cb9", "value": "T18DB423F5A7506BCC9D20522F2F4A27CE19274B41B403C54A1AD2875A421FAFF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155026, "uuid": "d8caa617-8602-4286-afb7-2d016cc267a7", "value": "12288:EBRdpQ73iBVYWtCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUu:EHUw2WI9XgbM0azTHiQIouDC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772155026, "uuid": "8b090d21-8879-4397-88a3-d749f85aa597", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155026, "uuid": "0f385dfc-55fb-49a0-bdad-eef1ba85f6df", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45c15c10-137a-11f1-8369-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1772155130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155130, "uuid": "3659ad4b-654a-4522-9ee2-e08d77a209ed", "comment": "Malware payload (NetSupport)", "value": "5ccd38b39a45ab1242129fe7f6bed6ac", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155130, "uuid": "70c618d5-10f2-44d1-8266-e7f60f114cd8", "comment": "Malware payload (NetSupport)", "value": "a558b4ba7d4b18cea0f69daaa0cd432454fd18b8f467502e3493f1e407460d21", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155130, "uuid": "1e1b7b07-1531-4354-b7dd-565bbfbe8f7c", "value": "T1DAD633A0A6E815FBF9EAD33DC861D592C89A75663B49C183D3F8D1A02C733C4697E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155130, "uuid": "75aa94a7-94f3-4ea5-a86d-c6f086f95fc2", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155130, "uuid": "e23d4767-e524-46ac-ab6a-534f443f639b", "value": "196608:I14oWUoB9qLZBFslHl7dZgnRMWF3y99TisLkuorLOIwFurH/P/XRLSq2KKeF:I14FSsFl7dCR1C99/LkuXIuuDX8W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772155130, "uuid": "63282a5a-d484-4171-bc41-3613b06acad0", "value": 13422219, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155130, "uuid": "0ef7ccfe-4875-415d-845a-5f0f6f7fc022", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46adcd8c-137a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772155131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155131, "uuid": "fa8d8458-0f6d-406d-aee4-060c4a5a0495", "comment": "Malware payload (Mirai)", "value": "8f491930da96ce4665bf1c77e0c84946", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155131, "uuid": "c3b23db5-7847-45ec-bdb2-bf2b96c1abdb", "comment": "Malware payload (Mirai)", "value": "a5f56a69331c0dc18ee972ae929595129b04a2025a70b44246a8db1006ee5664", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155131, "uuid": "a8e922a3-8050-47da-b391-eb8d2e44c0e6", "value": "T1ADE34B55B8828A22C9D513BEF92D018E331327A8E2DF7213DD205F2577C7A6B0D77A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155131, "uuid": "5f476e3d-f0e3-426b-9f9a-2a9a141ef660", "value": "3072:8NMcOPLZDozjynfoHwreWu1gSa0lI7TEy6KuImkq:IOBozjyfoHWuOSa5F6K4kq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772155131, "uuid": "283200a7-11da-4965-ab05-1e7d622ac0e0", "value": 145552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155131, "uuid": "9e8385af-53a1-42e4-a2ab-9b4370496e38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ded1acbe-137a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772155387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155387, "uuid": "761b21d9-b245-4189-b073-e58c13904a94", "comment": "Malware payload (Mirai)", "value": "8995b9d617b3dd0e09766718a2e536e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155387, "uuid": "c28e677f-1a45-43a0-86d2-f5b07ea77036", "comment": "Malware payload (Mirai)", "value": "e809fab39d54f7e46e4c164858b7900f6b46981a9de3d8c6e3d611bfcb0c8c0d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155387, "uuid": "1e0137f6-fca6-4b86-992e-b2660a8927b7", "value": "T1F113F785BC918A2AC9E427BAFA6F418E3321B3D8D2DF3617DC111B147B8691F0D67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155387, "uuid": "267b6e19-0bd2-47fb-8e34-93896e22cbe9", "value": "768:rrPw5kZ//DAdGWc8RuP1suK9EDfkaI/TNlUqel4WvLMkvWHOEUNc:AaZMkERpuKKDfkaIBCkWLGHOa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772155387, "uuid": "9bffffbf-8855-4fed-b851-f21fda8d4886", "value": 43092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155387, "uuid": "e87892e1-3463-4500-ab2e-7a14bd97bc49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66bdb28f-137b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772155615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155615, "uuid": "626ed7cb-0897-45ba-bfa7-10b5c1f03779", "comment": "Malware payload (Mirai)", "value": "4b9ac9fc27a93f3864ef13a469a2e342", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155615, "uuid": "e5d3162e-5618-4d2c-82d2-d757a9a1df80", "comment": "Malware payload (Mirai)", "value": "0d4c666c386f655df0b53719251644790d60840d6b846e76c7f82e8f6c0b2e9f", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155615, "uuid": "e1d032fb-4f54-4afa-8d00-c6a67d8b5012", "value": "T12643A70E2E258FACFBAD863547B79F24964833D627B1C584E16CE9001EB034D745FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155615, "uuid": "616329f6-cfab-4fc7-8c73-8e28b217475a", "value": "1536:ub+kUPQupLfsLfCELfZQ6mREATMNEugjYeV:a+kUP107NEusYeV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772155615, "uuid": "9aaf4b79-c5f7-4c76-aaba-1b015058c131", "value": 60232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155615, "uuid": "6a007e8e-ba32-462b-bec6-2c2fe7bdb364", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ffd0914-137b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772155630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155630, "uuid": "50f9a2d7-ba35-46a0-9b86-5023c9f8d391", "comment": "Malware payload (Mirai)", "value": "a5e23f6041a449415119d8313e346e5e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155630, "uuid": "f0567121-1ee5-4800-b266-5dbb3ac78dd7", "comment": "Malware payload (Mirai)", "value": "b8dadb346e1fb945dd291ef4853d077227f3de0af063722798dbdff58a7204fc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155630, "uuid": "fa20b9fa-6bb9-48fb-ba34-725d3a278f04", "value": "T193B339C1BA43D4F5EC1641307177F73B9A32F0791239DA87E7A89E327C92A419D0A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155630, "uuid": "210509fa-b6d0-4c61-8490-2148d342a940", "value": "3072:PbKW4dCLFaGFBu3/45g1rcV2wHzSr9bMFflx:Pbj4doYGFB0/45gdL9ulx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772155630, "uuid": "7949900e-6478-43c0-8932-232744cb7676", "value": 107824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155630, "uuid": "894b5307-04ac-4fea-a191-c3eadf1c0fed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96340110-137b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772155694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155694, "uuid": "5a954475-205f-4193-852c-56f5c01e61b6", "comment": "Malware payload (Mirai)", "value": "5e5a78d5ebd29b52ed0a40b0b0bac3a4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155694, "uuid": "f81737af-188e-464b-9674-478da8c485cc", "comment": "Malware payload (Mirai)", "value": "746ef34d96104cfd17fe9a0aea6b2d3d2584ade97c9e990fff4214ae8cab5e1b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155694, "uuid": "66510b2c-7de1-4a9b-807f-bd51ce0764b1", "value": "T121C33B46EB808B03C4D51775BAEF42493323D755A3DB73069A186FB43F86BAE4E235", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155694, "uuid": "4778eba4-0438-41aa-ac83-b0b5476dfb40", "value": "3072:6mL295Z0oW5zvnm82C7L0//+AHmDIM/9nT:6mLM5ZYbnm82CH0THmUM/9nT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772155694, "uuid": "305abeae-031f-4842-94d4-76fc7f573d5f", "value": 120609, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155694, "uuid": "71ef152e-94b4-43ae-bcea-3d8068d6fa26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0e702cf-137b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772155766, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155766, "uuid": "add1a7a0-6231-4134-9995-18eb7baf0b4f", "comment": "Malware payload (Mirai)", "value": "ac311ae3458694b951c9461aaf48bfb7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155766, "uuid": "777ef33a-6ca6-4c00-9eae-16ac266b2d82", "comment": "Malware payload (Mirai)", "value": "dcd333ee18df631af5ac7a289394ea2fec67fb6454582b5b0ae56b1757ea4ec4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155766, "uuid": "362caff1-309b-4e85-96d5-ac6f7d3b18be", "value": "T14B232A07A58580FCC56DC17846BBB93EC92775BE0239B2EA7BD4FF267889E210E1D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155766, "uuid": "f92d8380-3255-497b-a0f5-72826c0767a5", "value": "768:owLvSBiA/UTzQGNdlIwt3v+AN01W2esezgljpakgPMfAxXGnbKC8OIzJyJVm:LvSo1TzQG7lIW3v+HTYgljElU5bxoVyD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772155766, "uuid": "a186f352-54e9-4b48-ae69-e75e7757fcc0", "value": 47008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155766, "uuid": "428118aa-7907-4d0b-bca4-6361f21882d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1772155816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155816, "uuid": "a0da10b0-38d4-487f-965b-443368feb3f7", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155816, "uuid": "ddbea817-33ba-40d8-8384-a71edc1f7535", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155816, "uuid": "3ac3e7f6-c459-4e4b-8d87-50466944b1cf", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155816, "uuid": "b901008b-1e91-4f8f-b2d2-2f0039541789", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772155816, "uuid": "c010ab2f-1398-4562-95ea-150727894726", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ee73b76-137c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772156058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772156058, "uuid": "1559b063-9342-4b22-ae17-5ecb442661e2", "comment": "Malware payload (Mirai)", "value": "d29b31a438680957e2a235b31316daff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772156058, "uuid": "2f05183e-9834-42b3-b0f7-8f9f8c1492c5", "comment": "Malware payload (Mirai)", "value": "285ea81bb79444e62b38fff9bd8b001f66228cf75f71b045543fc1df86beb490", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772156058, "uuid": "244483e6-142a-4721-be23-d43e3824fee6", "value": "T197E35D96F802DE7EFC0BE5BE44670D19F931A3A13243072E529BFDA3AC311961D16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772156058, "uuid": "f4e5d2b2-44c2-4d14-8e31-f1bb7f94c016", "value": "3072:tamyNhgeKdgPa1CTf2gnCx4iUb7d19THHHipu4:4qeKdgiWnsMd19zipu4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772156058, "uuid": "64f26c0b-e07c-4d58-99b6-94a1302aba43", "value": 146892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772156058, "uuid": "53a90d49-cacc-4ac2-b346-7ea4a49563fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9fc5eac-137c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772156157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772156157, "uuid": "528cece1-975d-4e4b-9d14-3592ac9fbffb", "comment": "Malware payload (Mirai)", "value": "fdea23d7fea3e87f0a75657a64723c2a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772156157, "uuid": "31efa1ba-fea4-4541-9cf7-862cbd4386c6", "comment": "Malware payload (Mirai)", "value": "b11aad9b54fa5faf9e2d5911ba6f0d0abcc1fbabb67d418ad2211084861deca4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772156157, "uuid": "7414fd0f-9176-4971-beb7-7d10dfd21a7c", "value": "T1B293E551BC82562BC6E423BAF6BE668D336577E5C2CF722BC8214B117B8551F0D63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772156157, "uuid": "2837f91e-4c8c-482b-9fb8-b3de6e899ab0", "value": "1536:PWrd+dC++zBz/dPXQL0u4WaJuLaVlW04brj9uYpMNCsOLYMhR:PO+d8zBWLac0yMNCBph", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772156157, "uuid": "c2a77346-e6e9-4e24-a3ed-ada2a6104824", "value": 93804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772156157, "uuid": "d6e50da2-42cc-4ebc-b867-5b87311bde1f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c22402d-137d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772156402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772156402, "uuid": "2133aa71-5b28-420b-9820-5e7ac810b6d2", "comment": "Malware payload (Mirai)", "value": "56469ae597aef5449c903ea661e6bc88", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772156402, "uuid": "82fcde87-2cba-43ff-ab18-e43fdede381f", "comment": "Malware payload (Mirai)", "value": "3e362b0ff7ecf47596ae6022321bd49eefdc8f13e97c55a1eef07d9e7c82a49c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772156402, "uuid": "16c6bc96-fab6-4ffd-8e7f-1a2ea2cc16fc", "value": "T1DFF3C50E6E198F7CF79987344BB79E32965833872AE1C582E16CD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772156402, "uuid": "06e44d12-0010-4c8a-acaa-f69482bd764b", "value": "3072:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/Q4vkTTzTT4BFZDiwX:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJ5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772156402, "uuid": "2382d655-86c5-4ad3-958f-fdbc95f477d4", "value": 171724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772156402, "uuid": "d4196ac3-7ec3-41b2-9297-06566588ca47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af7f0e58-137d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772156596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772156596, "uuid": "6417647d-c4c6-4216-bbe7-7705fff0e434", "comment": "Malware payload (Mirai)", "value": "a53315e9e44749c7a702834dc726e2c0", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772156596, "uuid": "543fbb69-8b22-4ccf-89d9-fa04afd7d895", "comment": "Malware payload (Mirai)", "value": "128bf0790cd11aacb53eaa299d05e4ce2cb02f36e14c52323493b1395e7ad9b0", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772156596, "uuid": "4ef05a91-b210-4bd1-b58d-79da99ac923d", "value": "T149231781B8D19A02C9D453B7FA6E418E33256398E2DF33079D222F557BD682F0D7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772156596, "uuid": "df855d3e-45c5-43a0-a925-f8491fff12ea", "value": "768:Pu5lt0vq1lCCZdnLTaW7nDfaZNePmGehIWvLci4fyQpn83ZNOPcusLS:qlivUY8LTN7nLaZMjWLGaQpn8H+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772156596, "uuid": "d71fe062-bf7d-44dc-99a2-73b644e7ae5c", "value": 46968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772156596, "uuid": "847e4646-e8ce-4849-9a40-b4d86b029e89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "836b7703-137e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772156951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772156951, "uuid": "3db54f7d-e87c-41d1-b69e-5fd1fb258537", "comment": "Malware payload (Mirai)", "value": "3ca6781edd7644082f3b53ac696f8a92", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772156951, "uuid": "f22fa92e-7f39-4349-a36e-de9e283b721f", "comment": "Malware payload (Mirai)", "value": "2365493d0b4a6284d5b638176a29e2f736e30a64053a9081ebb8e23877e85f02", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772156951, "uuid": "1f6a33be-a843-4f34-b2bb-b6cc2aa075bf", "value": "T166D35C0673180E17D5A349B02A3F1BE083FEE5D121F0BA89651F9B6A8676D371485F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772156951, "uuid": "8db08379-1e80-49cd-b34e-b8fccad38e7b", "value": "3072:CV0zui1ZhMHJ6A+qrFP7OUK3y0uMg9FkUH:LP1YO857OUKC0uMg3kUH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772156951, "uuid": "668f292e-0edf-413e-9e00-59e85428c5a2", "value": 134336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772156951, "uuid": "7cdeefd7-9156-4cfb-a171-1ba9ba616a2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae58c61e-137e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772157023, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157023, "uuid": "e2743bb7-8cf5-4caf-a4da-fda69c467adc", "comment": "Malware payload (Mirai)", "value": "f7aef9803d6d2a48aadde461ff004043", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157023, "uuid": "56059e70-5f94-49b0-9d49-adebaef49e31", "comment": "Malware payload (Mirai)", "value": "67fa46764b8714702f1feb3e70619916e4f7d5511b7a3a225a1aaa9387464dc8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157023, "uuid": "85f6c107-21d8-433d-adcb-bb9a632e02ef", "value": "T12C343B45EA418A13C4D117BAF5AF418A3332A7A5D3DF730699246FB43B877AF0D636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157023, "uuid": "2f31323f-fe6f-42ea-b191-0ddd5952f441", "value": "6144:Ego/jNMTqzHzakeqacEp1d4n1tribf9ihM/9+AU:EDhk2HzakeqacE3W140G/4J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772157023, "uuid": "1772d3a1-8e25-4b45-a430-c4911d9be07c", "value": 230976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157023, "uuid": "c58f8ea9-b30e-46ac-873d-625e01eda444", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0999098-137e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772157054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157054, "uuid": "77ba5b5a-571d-4584-a990-ab01fb90d71d", "comment": "Malware payload (Mirai)", "value": "c670e2d3345f048f1db9482396c73080", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157054, "uuid": "2ab9a50b-ad02-4142-8194-c533efe3d86a", "comment": "Malware payload (Mirai)", "value": "6ae1afaba196cfa446ceebc1692b6d294ec0f484974eff50e46fd03e53e326ad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157054, "uuid": "59e89185-d12b-4776-baa8-546993d849ec", "value": "T1A5E37B8BB7026CA2C9918BF54BC747AD2B6322115F5BCBE76C0C6A3D4E219DD5E0B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157054, "uuid": "1b2bae5f-ff45-4dc6-8cf8-1c1b0d6b7a6e", "value": "1536:344oAgvT40qIYqqwhLgfKq+eorWUGip1ogLgI/LWaFmCrmKmuRl:o7eqNZUKJXGip1ogLgIqadrmKmuRl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772157054, "uuid": "7549eb5b-94fb-4486-a389-f2ae34ef2266", "value": 150664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157054, "uuid": "40a3c75d-277e-4b30-a43e-28b8096878d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2ba2cbc-11ec-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772157426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157426, "uuid": "3179dfca-754b-4a00-970a-7c271f63ac4d", "comment": "Malware payload", "value": "90b20abf80b2ecb82243533259921223", "object_relation": "md5", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157426, "uuid": "dd305aa3-1356-4f1e-8d6e-4d72036d9469", "comment": "Malware payload", "value": "670c2800abc04f1612d73f0df5f5040f6f348a55464dac69039e5ef1ecc79575", "object_relation": "sha256", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157426, "uuid": "e134f0b2-fece-4c2d-bd83-43e05091088d", "value": "T120545C4A77A440F5D9A78139C9A38A46E7B2B8650771A3CF036443B95F3B7E05E3E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157426, "uuid": "ba829789-b63e-4a0e-b929-8bf623d737e7", "value": "3d85d3c28c2c171776d82f97bfb95153", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157426, "uuid": "e8cebaee-dd95-4b73-bb34-07e71787a94e", "value": "6144:RvoTljfVSITGG9wNsf8cPR09QTiTrV2Z+qXTLrs+TpCsD:RU5GGiEPRoqXzs+Tz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772157426, "uuid": "c20b6620-b97b-45ba-ac6f-ce0dfa1e11a1", "value": 295424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157426, "uuid": "505c81d0-0a7f-479c-bc27-cae88e58b922", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbf1c592-137f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772157476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157476, "uuid": "ed697f7d-bc60-428d-aa51-9b3541896cb0", "comment": "Malware payload (Mirai)", "value": "a44764278a3166b0b482ad2cf2bc68c0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157476, "uuid": "6f579011-57d6-4c34-832e-6da313ac1ec9", "comment": "Malware payload (Mirai)", "value": "031b7e39381b72f93a2c8576032b1a737369b9a0a40484ffcdbfa479b1eb3c35", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157476, "uuid": "cb8386b9-12a3-404d-b48c-0e01d9625672", "value": "T1B3138CB7C559ADD4C14947B5AA208E3823A3F90093671FFA5E8685A99007EFCF21D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157476, "uuid": "7936bb8d-e357-4c2a-b82b-7e329353489d", "value": "768:RYXNhfPu+8r2FPDoLbxOME0ClBsoXYkrxCCo:RYXNh++loLbxPE0MokrxCCo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772157476, "uuid": "8707a614-fa8e-4b25-b66a-2bc7b84ca8f2", "value": 42676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157476, "uuid": "aff5b0c3-03c2-48f0-85de-2de39f3eed2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0c49d28-1380-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772157886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157886, "uuid": "729b467f-5654-4f15-af1b-edb2e73ce3c3", "comment": "Malware payload (Mirai)", "value": "0e78c17b714c229f03cc2d572934baed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157886, "uuid": "f1cf4a8e-c60a-4201-943e-58f4a69cc3a5", "comment": "Malware payload (Mirai)", "value": "d0d2a62f0d69409b4e2b4e728aa4ac05a1f9a001443783ad633cf4e840cb346a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157886, "uuid": "fdd05f6e-6fe1-498f-bb3f-c35dcc8ddf23", "value": "T1B8D33845B9829A27C5E123BFFA6E018D332563E4D2DE71178C215F217BC691F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157886, "uuid": "c8ba84f1-2290-47ab-b06a-6232649bb0bc", "value": "3072:snFif7apx6XS+kUgpjWXlsmMs0u29wzulziQSS:sn8ZS+dQWXlsm5s9TeQSS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772157886, "uuid": "7bde75cd-9098-4045-b062-41b6144ab937", "value": 140756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157886, "uuid": "66e67c3e-d723-42f8-82fa-ef6c0ff8f623", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea0606c7-1380-11f1-8369-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772157982, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157982, "uuid": "d9d222cd-c108-4936-b156-315dde6536ed", "comment": "Malware payload (CoinMiner)", "value": "ed349d80be836f94bceb18c3ad7fe31c", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "sosokenota", "colour": "#504c6f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157982, "uuid": "5da130c7-4b8e-4d8c-b07c-66c572cd56a3", "comment": "Malware payload (CoinMiner)", "value": "171ab9a3fe8ab78addb792fb40fcb81e89ebe9780465dba973e29e677682be9e", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "sosokenota", "colour": "#504c6f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157982, "uuid": "9541a9f0-f0e1-41d3-bb94-abc0575de0a1", "value": "T1B53633037BAFA5B9CA91163505544BB906BAEFE61F1283C3D75038178C707DA8E325", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157982, "uuid": "3f56758a-3f09-4bdf-a91a-e8153317415b", "value": "f6baa5eaa8231d4fe8e922a2e6d240ea", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157982, "uuid": "40e21c43-ae6f-483f-9e6a-7a7d4e253872", "value": "98304:9P5zJzxbdJX7K1HBWMf1wo/Ohcbg94NxGXO1R404DbCY+kn9W+k:9PFJl7K1HBWWtGC3+DbZ+kn+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772157982, "uuid": "23355909-cc47-44a0-afea-bf6be88264a1", "value": 4892144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157982, "uuid": "b6810049-5505-4026-9864-faeda66224af", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "180f1fdd-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772158049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772158049, "uuid": "801b2102-37ab-445f-8f13-31089b575a3e", "comment": "Malware payload", "value": "4ac6bbfa3abfdccd467339b3c509fb32", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772158049, "uuid": "c3a02d67-dd45-42d9-b07d-c553e56f057d", "comment": "Malware payload", "value": "3b520e8fac265406d1b67df863966ae456981b5c9ed92466011f8194a54c4af5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772158049, "uuid": "494556f0-1ef1-430a-8197-4b5ead92113c", "value": "AE43024623A63AB6857149F1A7F8FF49F14A3E68CFF61C057C217A58A93236D28C4D1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772158049, "uuid": "c6be7cdc-c015-422c-b7df-644461af281c", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EfX:yYI0ARqw1qAEv7UIFM8oJorFquyX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772158049, "uuid": "186a6b40-92be-4ed1-b985-da4f5cd2aaf7", "value": 55268, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772158267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772158267, "uuid": "9afbe811-590a-4f94-b87f-152bd6528a3d", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772158267, "uuid": "9d30e33d-f28c-4f1c-8e31-e1b915d0a382", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772158267, "uuid": "90eeb9af-7c8d-4f83-9c6b-3189d6b70caf", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772158267, "uuid": "8eab4420-8458-4b68-a384-db6abeb2f047", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772158267, "uuid": "327d5221-6af2-4bb8-980e-bf92ab462597", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61c1d038-1382-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772158613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772158613, "uuid": "7e663640-b511-4791-a4e2-abe0ec752202", "comment": "Malware payload (Mirai)", "value": "b9d397944038a0f04c2133a9a07a8c6a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772158613, "uuid": "5223a69a-bb06-4b0d-b7ac-7cc943e4c343", "comment": "Malware payload (Mirai)", "value": "1fb5455e76f075559d8bb914b486ea8e0b1b5ea3d0b68dd590f82285ac76848e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772158613, "uuid": "273cf034-387d-43aa-9b13-42ca61fb13e5", "value": "T16EE31759FD819F05D5D126BAFB5E928A33231B7CE3EE7112DD205B25238A91B0F3A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772158613, "uuid": "7aac6e3f-9692-4ee9-ac8f-2e1ae861d989", "value": "3072:tdJ4VSlLcTEZfbbikjaW6U3WrHKnygLffimW2DII7hE9Iuh/:+boBy8aWh3WrHKnNLf66Dd7hEWm/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772158613, "uuid": "25d8f8ed-4318-47c7-87e2-d38200979703", "value": 145260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772158613, "uuid": "f87f3523-5bc9-4494-9e3d-e77782e16034", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06b8596b-134b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772158733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772158733, "uuid": "733ea350-2fdf-4a18-a117-7f49f973e8c2", "comment": "Malware payload (Mirai)", "value": "e61be341a1148c07bcc2bac9540e3497", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772158733, "uuid": "55008617-384d-4262-a030-91c9af0d21c7", "comment": "Malware payload (Mirai)", "value": "0d812a11fea9f77546f762b6615668ffde942320f12ee47a6330f17cedd0a397", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772158733, "uuid": "ce49dd14-3173-48cb-8711-005b10201c1f", "value": "T1D4C39D87F68B14A0C4624AF013C71B9D6A53B212CE5FE8E3BC0D763F5A7A4DB19163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772158733, "uuid": "041825ce-a2a5-49ba-b175-7b2b68041065", "value": "3072:Ppk3/4GfWheOGWXBcoOqJo5THBoYJgOq:PiwGfWhkgxOqzoq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772158733, "uuid": "b2963574-4bb6-4958-b8fd-e281d88f4328", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772158733, "uuid": "1a11b758-7689-4ce6-be9f-5a2a0a1de2f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffdf7e24-1382-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772158878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772158878, "uuid": "3092bf3a-517e-4d05-a71a-f09aa7144cbf", "comment": "Malware payload", "value": "ade7a6bd78a223804c00a7c0f887a839", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772158878, "uuid": "e4e6b260-aa12-46e1-aca5-ad3fac4753a6", "comment": "Malware payload", "value": "3864670143ed9819033dda4fb5b74c25cf4ea0dc95417ffd66bf63270f921f3b", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772158878, "uuid": "31e48cee-956d-4d92-8faf-d1408111f7c9", "value": "T112D2228C3BC2B269172660376F1FB57BF6BEAC80705D8764D3A5A841F954708F0B39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772158878, "uuid": "ebb4932f-b000-465f-8d4a-10f910324d27", "value": "384:FB7KcRSi9W5C3tMQVXbVCEF79AqZZX9GN2UzP32vQSTjlbkZfD4s1Aye:FLNL3Xl3RVUD2lTjB+D4F3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772158878, "uuid": "bb307725-ea7c-4ae3-a694-cc2d1d050c0e", "value": 29490, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772158878, "uuid": "8edd4467-43b1-47ff-9e09-81067ef48362", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a617473f-1383-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772159157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772159157, "uuid": "dc6617ba-c72b-4b81-88dd-47b6366bc095", "comment": "Malware payload", "value": "17b2d5badb4cc4ffdb1940b602dfb559", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772159157, "uuid": "ee04b25f-e523-426d-8569-b6a112c369c0", "comment": "Malware payload", "value": "73ed7f62c7c320c3a2ee23a2eac83fd9c775eb1c3ac83a73f3ffd9d14b1aafe5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772159157, "uuid": "25c49f47-a745-4a77-9246-aee3688c143f", "value": "T18334F1AB8BD0D45E79C68D01A345FB2556DB4A47FBA0ECFF474C929C730220E88799", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772159157, "uuid": "6279df92-ad28-4b92-b50c-53dd3bc70594", "value": "6144:h3BV8qd0L5I4Htxjge29Jp8wdSh+OxNU5eLONOOsUUUxDOKZ:h3Iqd6+4HtxjyJu7IOxNFqNOO53Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772159157, "uuid": "7c01b90c-0e84-40ea-bdbe-159b5f137c74", "value": 247890, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772159157, "uuid": "dd710363-ad54-46d8-b909-0a34e45924b0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fbaeee1-1384-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772159468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772159468, "uuid": "bfec2f4e-30cd-4aa9-aba2-b684690b39bf", "comment": "Malware payload", "value": "c09d1fdbe8ae49c5fc6942f5fa972bc0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772159468, "uuid": "50bf7258-a2e6-46ff-93f5-0e3a59af1c90", "comment": "Malware payload", "value": "30121a3b8c0f8397b56f7731bce890586afbbe206a6f7ccc29ef1e0c3da33f4f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772159468, "uuid": "2190cd3d-0984-4e1a-97a6-45d763359666", "value": "T17C8309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772159468, "uuid": "45922a7e-0590-4e2d-bc82-20a2239ab3c8", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn2WaKVN/:XEKltp9txAX/yr2pb2WHVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772159468, "uuid": "acc07c44-277f-4725-b924-3a0a901a4e15", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772159468, "uuid": "b987dc05-5df3-48c1-8c77-2232b3897a21", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "133a9521-1385-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772159769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772159769, "uuid": "ed9022b8-ea91-4489-b5f2-34c4db000402", "comment": "Malware payload (Mirai)", "value": "ec27fa583e31f270ef06d45255791d2a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772159769, "uuid": "3d88a40a-b682-44fc-94fc-3866139e0025", "comment": "Malware payload (Mirai)", "value": "5cee3daa56dd53d99992cebbd5e5a6e823299ff5e00a37454fed98b5dbbafaf4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772159769, "uuid": "607ada8a-ef47-46de-b6b1-d2dcfd5b1321", "value": "T1E3C32902F98184FCC0CAC1340B6FB63AA976F1DD1238B2EB67D4AF123D4AE615E1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772159769, "uuid": "59906853-60ab-4c8d-b33c-8f6ba16c4417", "value": "3072:e483TghM/1weZbcnITO1yosFAIxnJdhgpDb7BuwGoTgzQLAdojgaR/O:eH3TghM/1weZbcnITeyosFAIxnJdhgJU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772159769, "uuid": "5aa5ef16-c862-40a8-b022-1ce568d54972", "value": 125472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772159769, "uuid": "3f00b44f-668b-4c4e-b5f1-b4d009211062", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c27c910e-1385-11f1-8369-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1772160063, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772160063, "uuid": "b1e24fd1-e5c5-45d3-9d56-8d786794e3e8", "comment": "Malware payload (QuasarRAT)", "value": "c301913b5fc190c701e486ed48e53035", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772160063, "uuid": "d7557c81-2b0a-43bd-b27e-a5c75d900de4", "comment": "Malware payload (QuasarRAT)", "value": "98b8e1e32402b26c6b508bf39528d1f7d7a671bd038302a87514c3d446996a16", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772160063, "uuid": "5df3123c-7f30-4586-a30b-695af615376e", "value": "T1E91633484A56ED02C9B2673A57A2E278077D1E8FB924D1275FDDECD33C32BB915083", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772160063, "uuid": "d1147fca-4c61-4391-93e5-a93e3dee5522", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772160063, "uuid": "52ad20e2-2fe4-4e52-9909-3b2b4bfb80b1", "value": "98304:UUMtPUGu5RlqKV8Dy6uNEUDKfCgDLPJWgLIfcE+wZdpCzzD:UUMt8G+R2y6uNEUm7PJWkcpCzzD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772160063, "uuid": "6b882323-865e-4387-a4e7-9149301b95a8", "value": 4121096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772160063, "uuid": "b90baf27-19b1-4329-933e-d58874fc7ebc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1772168828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772168828, "uuid": "108c935a-fff0-4175-8abd-1642be079b79", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772168828, "uuid": "403e9682-0ccc-402e-9781-38031d00b007", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772168828, "uuid": "8beebba3-e5cf-4d2a-a27b-e3807d9aa793", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772168828, "uuid": "60f6d4a1-633b-40f9-b1d2-fa9256f1b11f", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772168828, "uuid": "a617a699-4895-4c9b-9351-3498967a2192", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d238ab37-139c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772169968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772169968, "uuid": "fdfbd123-d3b2-454e-b35f-52960ee694c4", "comment": "Malware payload", "value": "71ffc45de1b20afa7ea805363fd6a875", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772169968, "uuid": "490624c6-b019-42bc-97d1-4f0495346ac0", "comment": "Malware payload", "value": "273e1b62d3782e610890ad9ca69ab7afa99e108b63eb41b0e455bc23630f4b68", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772169968, "uuid": "288b4c8a-9692-4c53-b5e4-1c3da5b75d7a", "value": "T1C0B5335172F8C0FCF8681A3101459B622A3AAE111B3585C3FFAC3D9592B36D7D9363", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772169968, "uuid": "d90b935d-8e4a-45e8-bb2d-235c7936c135", "value": "f6baa5eaa8231d4fe8e922a2e6d240ea", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772169968, "uuid": "5c73a39f-b30c-4183-929c-8cdd45f08887", "value": "49152:IgwRSbll6MeivssIUvFoOere1vPlIulCJDnk5ihQIup2T:IgwRSbL6MeivsmiOse1UJQ58yg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772169968, "uuid": "65f25a81-3f8f-4f83-a83d-00b8fd2d7350", "value": 2353737, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772169968, "uuid": "c499305d-be8b-4a6a-b0f6-297867266219", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772176268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772176268, "uuid": "16435d8f-59ee-4d68-8d70-e2a4f3e43c2c", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772176268, "uuid": "26cf8968-4c4d-4e0d-8434-b956ff68a398", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772176268, "uuid": "849034ea-8de4-43ed-829c-b47b68e448fa", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772176268, "uuid": "3be0bade-adfa-440a-a99e-633f034c255d", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772176268, "uuid": "00c3170b-a5f6-4cfd-be69-466e44e21242", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9658c57a-13ac-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772176740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772176740, "uuid": "be0c0769-8ba9-4cbf-8484-e27f2af5834f", "comment": "Malware payload", "value": "b5e62202b9ac1f2635a78ab24de09d46", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772176740, "uuid": "fbc2601a-7e1e-4995-a6df-9c74e9154854", "comment": "Malware payload", "value": "ae85580e7b8b78dc7a95c42967f3c9ec870894a72233059ae23107d72734c285", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772176740, "uuid": "7116074e-73ca-497f-bb33-c9f3fc26a4a1", "value": "T1AF44230A1B054056DBD9933BBB1CA305923D6B3BC7D620C0CB7FA64B484CEAD7916A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772176740, "uuid": "dbdf9da0-a5ed-4ff2-ab96-4061fb3d8035", "value": "6144:W+hw5/dXT2nhhM+GUXRAu6slAP+mjz5ycjKyeBy7s/bpHPz+uiM3S4A:W+hwBdyn3tGUXRAYlAPXjzxKqOzTi/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772176740, "uuid": "6931ba11-4d45-45c7-a8c1-cc6544e21b3f", "value": 261984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772176740, "uuid": "53d758b2-24b4-47d2-a72e-f428a80be425", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4591974c-13ad-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772177034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772177034, "uuid": "63484c9c-b480-4070-a745-f8846b425349", "comment": "Malware payload", "value": "818b1c6f62a260554db3495a5dd74f6e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772177034, "uuid": "0169192f-1b41-4fba-a372-9e78de73b7dc", "comment": "Malware payload", "value": "e3253392515a75ba1e6c616f423f92254f0157c2e9f1741750fcc9e0053d6c29", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772177034, "uuid": "b280b4c7-01cb-42f3-838f-0c1904523062", "value": "T1056423465D5F1E4EEAB501301E23C017B9DB8EAAC182A9767CD4B02B58FD43EB187E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772177034, "uuid": "88996f8b-b3fd-49db-9a7c-9f5a71b2ccaa", "value": "6144:X6ojS4oborxGPyA2Fwe2rko8Sc+azNhzCGvUgsNErRF4zQd:hLKorxOyAbko83+uRZENwAQd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772177034, "uuid": "a5184125-3697-47db-876f-dec71765876a", "value": 333460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772177034, "uuid": "90b4e8d1-4c96-4a36-89bc-90d14aa97e01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6dc9a5e-12d3-11f1-8369-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1772177514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772177514, "uuid": "4d791b8a-dbdb-4e8c-81ad-6952aa971817", "comment": "Malware payload (RemcosRAT)", "value": "7998aa5ec5515ae80a5fcb6f246e6bef", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772177514, "uuid": "f715a166-994b-4b16-b59d-d03d9e71f2a9", "comment": "Malware payload (RemcosRAT)", "value": "4f0c95a1885411100649bf8150c2f189dc0941ac569b801b3765d1ca64b760dc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772177514, "uuid": "260c055d-dc28-4ab2-9d00-5402c53a1d67", "value": "T148B4B001B6F2C172D976A4300935E774DEBCBD201836997BA3D61D9BFD30150AB39A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772177514, "uuid": "bb7d0e41-fc05-4e78-949e-c082053aa7fa", "value": "737fc4be4f9f7d7c06c790667c9f7669", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772177514, "uuid": "bb16c094-8e39-4b7a-b7f7-5c2de11cda61", "value": "6144:2XEE+QEZJvHVdFjl0WGYB+cvbWvpB+qADnN8XIniCrVSMXcvOsAORZlAXiBcea:sENlHV9FGeDWv3jADnyYiCNrsPZlc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772177514, "uuid": "28096f0f-0f0f-4f15-920b-971c8725b81f", "value": 528384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772177514, "uuid": "f31dc6d2-2ab2-4778-b273-f5de66e8fff5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80bd1e57-13b1-11f1-8369-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1772178851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178851, "uuid": "cc50c2a3-d837-4138-8271-31c5110c0f2e", "comment": "Malware payload (AgentTesla)", "value": "18c02b45aac69d88b3e17f119cecfa84", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178851, "uuid": "c036008c-975d-42ee-bf21-d7fb3b1a77a8", "comment": "Malware payload (AgentTesla)", "value": "0c5b9b1d9a569a97cf1eee2268d2085076d4ffbdc6ba7f80216354b18a3975d4", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772178851, "uuid": "76006a0a-1dab-41f3-8402-866012661373", "value": "T1A895C07BB122CB6CD0CAC5B824E396F21E307E141AB6524616CE275F2E73D502D5E9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772178851, "uuid": "dfdf8936-9b1d-40c4-93b3-39cea9ee6fac", "value": "88f70fb82598484a7ce88eef6418418b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772178851, "uuid": "01d7605f-8705-448d-a968-66edafce3cb6", "value": "24576:7ff84r7YFz75ELy9vS9/aOHR+SfKstbokJMxqavDzWLyvt487diDxHp+0:78a7anKy1S9/aOHRniUod1vDSLyh7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772178851, "uuid": "a25518f0-7a7a-407a-9d4d-73daec381bb7", "value": 2028032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772178851, "uuid": "f064689d-dedb-41fb-b3a4-ae2edc9588cb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80c83219-13b1-11f1-8369-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1772178851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178851, "uuid": "5688676b-10a4-4042-bd5f-bd6ac790fac5", "comment": "Malware payload (AgentTesla)", "value": "39b03a25cc21e99d80dd4accbdb0bcd2", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178851, "uuid": "a9393dc6-c16f-49af-ae0d-80f8f8ad7c67", "comment": "Malware payload (AgentTesla)", "value": "11784d1302924de204de6e9bb1192b79a1351753bda84a49b153938185836dfc", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772178851, "uuid": "0a7d84c1-b4ac-4b3e-9162-3d6a874f2cb5", "value": "T18895C077B122CB6CD0CBC9B824E396F21D307E240AB5124656CE1B5F2AB3D906D5D9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772178851, "uuid": "43c712c7-e8e2-49c8-8e1f-c714b6bfc926", "value": "88f70fb82598484a7ce88eef6418418b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772178851, "uuid": "e873c8ac-5ae3-482b-8002-2e4e69fd74e3", "value": "24576:3fs4r7YFz75ELy9vS9/aOHR+SfIstbokJMxqavDzWLyvt487diDxa/+0:Psa7anKy1S9/aOHRnwUod1vDSLyh7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772178851, "uuid": "b91c75ae-1cab-4cfa-8419-6b5d76363a81", "value": 2031616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772178851, "uuid": "582e9a05-ed54-4ec3-ba13-3cae599aff7f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "390ae8bb-0166-11f1-8b2a-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1772178854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178854, "uuid": "6b03c4c1-6128-4060-943a-387e8953a35a", "comment": "Malware payload (AsyncRAT)", "value": "7a7312f1677bf2747cdd3be62d92fead", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178854, "uuid": "812f2997-630c-476f-aa76-94e136bcb805", "comment": "Malware payload (AsyncRAT)", "value": "c3c465c8670333252fe74404324a72ddf5f151b13c1fcb219beb4e88da4926b2", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772178854, "uuid": "01b9a48f-19d2-45c9-a065-5e25324622a2", "value": "T1FCD623E9488562F4D4EB4A107087539F78C126AE45FC6C0A39D1BE521F42EFE254EF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772178854, "uuid": "43d54b61-401b-43db-a8e6-c882b1afaa1d", "value": "3237d9e15219482b63b98258b9769406", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772178854, "uuid": "ac7f1bcb-9f72-4215-acb5-47310194079d", "value": "196608:EPqjE661jnlYk2ptDP0U2QXk3kxoYNb2AHf9cOV9ud4NqGuoU:I3nYkw5P0NC0kJqA/BjMqru", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772178854, "uuid": "9afa8845-5f30-4627-9515-df4c3003cead", "value": 12835840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772178854, "uuid": "3da92ba7-2ea3-40c8-af1a-049f90c8d6d8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31cdc053-13b2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772179148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772179148, "uuid": "b5ac800c-6d03-4c14-a4f1-6d7d5bc2dd7e", "comment": "Malware payload", "value": "8839de129c0a227f080d57febf0e04d7", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772179148, "uuid": "81cee7d8-89bb-4856-9d26-28b0787269c0", "comment": "Malware payload", "value": "b80ac13edccd2ca442221d7b22a6e8c7eb98688426582d38bf4ebbd5e0ab265b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772179148, "uuid": "21a3b324-fe03-46cc-8aa7-16e993f9890b", "value": "T1AB269E07ECA108F9C0AEA37189B296567B75BC481B3263DB2E60B6782F737D05D793", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772179148, "uuid": "f0f8a006-3c88-4a7d-b017-217b9968f736", "value": "ed8b780a3ce7ca4aba78a21f6bc3d4e0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772179148, "uuid": "cfcd533b-286d-4cb8-a86d-4a447a926380", "value": "49152:cUITOK5wYv9w+Vm508U5oTumujEVXWAf4mGJRvXS4w5yxkNtTPv+0srqTKKURIg0:cUQRq0/o0J1w5GkNtT/UD0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772179148, "uuid": "95a09888-c8cd-4893-b2c3-006066baa6d8", "value": 4681216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772179148, "uuid": "8c8a5668-c388-4c99-8504-d0acb92ff0a3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9035b1e2-13b3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772179736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772179736, "uuid": "986d907f-1512-4d71-b9e3-7c1e823bf24b", "comment": "Malware payload", "value": "ca45b0f9bba4dc3145d43d4cc956defb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772179736, "uuid": "34e6ca39-6a54-45c6-a274-c51256499d19", "comment": "Malware payload", "value": "c19814b593bbccbc26ce36a1118f44dfcc5d6fd95351a66cfd96677076118cfb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772179736, "uuid": "e42fb80d-11bb-4226-a458-f76971551cb6", "value": "T17A542293859A8CED67027E57A33643CEC2718992C25E557174E3D696D338032781FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772179736, "uuid": "01d4e4f3-7b04-4d62-8ab1-1f7367229ee8", "value": "6144:7UaOOAW7uuLVwLSQtmGU7/WKuTkX/bDDD9xT8m5+STUFvbbbbbbbbbbbbbbbbbbY:wJOAWKuLmLSQQNeTkXdxAJmOvbbbbbbI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772179736, "uuid": "eed8c1f4-b6de-41f8-90c6-f48cbdb68da4", "value": 283723, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772179736, "uuid": "ed90a757-3c05-46aa-893c-95e56b0be77e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebd6bf9d-13b5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772180749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772180749, "uuid": "3c18188f-c142-4608-ac3a-b86dc5866444", "comment": "Malware payload (Mirai)", "value": "e4899eb1c37c74d231b1a0cd910c10ff", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772180749, "uuid": "7ed5816d-48f1-4cc8-b556-3e1f364ac8b9", "comment": "Malware payload (Mirai)", "value": "42285dd1d38c2f960524e2c968555d3dedf202092c32d0ac77cfd0e0abb8237a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772180749, "uuid": "6f1b180e-e951-4612-9aa4-43e558815f4a", "value": "T11DE31945F8405B23C6D612BBFB5E428D3B2A17E8D3EF720399216F25378695B0E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772180749, "uuid": "b4d6ef71-f752-4d13-b649-a2c65e07293a", "value": "1536:AXXQB9roLvTOC/aXamb+uENviszue38MAxztJ4VCiBaTn0iWwGvVCOgSqjQjUtKO:AXXFjUy6tI8M64dE4iWwWBStMit+0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772180749, "uuid": "aa53d5b4-e775-4de8-9c9b-0d85202f1f1a", "value": 146240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772180749, "uuid": "06e0d365-c767-4174-8561-5656e07043f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eec27094-13b5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772180754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772180754, "uuid": "301b0fba-f2da-4e7a-8ccc-62eb269cbe73", "comment": "Malware payload (Mirai)", "value": "047bc6b7fa31078739a6b62d5250da77", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772180754, "uuid": "8eb0ee73-996b-4be3-bbff-f2835dfcdeed", "comment": "Malware payload (Mirai)", "value": "d21a18bb2bf6195c81274399d8218bb0890a6a7531ccc133b2ca910676f802fa", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772180754, "uuid": "4ea29792-d8e5-4c98-aba3-b0f50fba237d", "value": "T1E2A35BD4F383D4F6E85701B02136F7339B32E0765229EA53D3A89A33ACA1541DE1A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772180754, "uuid": "a4d75eec-9416-4293-99b4-efa619ba43a4", "value": "3072:r2uqDep2ABzPY3pwvwED0vZsLJfqf58b0SdvY81:r2uqDewAJPWpuwED0B83vxY81", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772180754, "uuid": "69224125-0812-45fa-bfd8-5948b07bdfb8", "value": 103180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772180754, "uuid": "5edc43f4-cf3f-4527-b9b8-86b503a8e2e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea224c4f-13b6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772181175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772181175, "uuid": "246f0aaf-43e0-4c41-b6dc-a048a80c60f7", "comment": "Malware payload", "value": "998ce5fc2252662a2f1734543324f362", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772181175, "uuid": "5d6eee36-9c3a-461b-85ad-f5ac68b745f4", "comment": "Malware payload", "value": "43ff8aa8c47bb704f1e3bc667fbec609a6e2294c78d583ce721b691b5a1d4645", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772181175, "uuid": "65bc2d51-c1a0-4ba7-9085-6486b9976449", "value": "T10E2302DF9035421EEA00620D6CCD4A55F92ADD8707B527391C8A3D1D218BF93A2F8E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772181175, "uuid": "4ab79966-b7ec-469f-8ccf-0bb8cdafcc2e", "value": "1536:GZKz8BCZ/2KY+A2rDV51fTQO+xjHSfCri:GZKgB8EGrp5hT/4zVri", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772181175, "uuid": "ab21a463-1632-42fc-bed5-50f83700d291", "value": 49868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772181175, "uuid": "c45d0cfd-3ae4-4ceb-9c25-a7d0cd3add1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79a78105-13b8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772181846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772181846, "uuid": "46096c93-22d8-4afc-aef3-fc249d87e3fa", "comment": "Malware payload", "value": "53cbc5fdcc64f3aab147f6e859fc952c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772181846, "uuid": "e6f55dc4-922b-4e85-aaf2-0b8ed7244b83", "comment": "Malware payload", "value": "13b1703e61ad11f3ed6af1dc454edeaa6d2be9b2428414af2b9beacf7169ce63", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772181846, "uuid": "ec50b0e3-de61-46ff-b81b-9baf1ae13254", "value": "T1246423C473AD8B40C3C9E6F4F98944EBB65E88F35091AC5D8D59EB7CA732D4B89009", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772181846, "uuid": "ceb5dfde-51d8-4436-b944-21d757599970", "value": "6144:9fZLx3Tl/ezz5Sg2CUMMooIxe6mphWvSfSwE0In6lbV3cdP/GR:xZLn8z5T2bMGIxJtw4n8hy/E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772181846, "uuid": "814022a4-29df-42dc-9311-cc05f774b690", "value": 317624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772181846, "uuid": "787b6588-1f63-4b7c-a700-21a7c3940836", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b2b5a60-13b8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772181902, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772181902, "uuid": "0ba5078a-5585-4c19-a702-5a3d71e8b948", "comment": "Malware payload (Mirai)", "value": "e2f3076721a957569d8a2a3b8915585e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772181902, "uuid": "4ddca701-4b0a-45b0-a7dc-b32c3ccdb240", "comment": "Malware payload (Mirai)", "value": "cd25915552a5845b5d14e39d791c39f199dea8e3abe15dd4660298e9692234d5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772181902, "uuid": "f9e76bff-5afe-4af2-957b-9ab7f297ce1e", "value": "T140E34B17B5C194FDC4DAC1744BABF53BAD32F1991238B26B27C4AA261E8DE305F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772181902, "uuid": "bab22f95-4f77-4cf2-b5d0-78dc0799ec48", "value": "3072:2XK7w433c9QwvffU28ykhhMEzawjtH4g1lNCuzjkPd1oGBhve:2XK7w433c9Qwvffv8PRVOkHk1Lve", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772181902, "uuid": "a7928b3b-ecc7-48ec-ad53-7f1b9ba4b30a", "value": 152104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772181902, "uuid": "665d4f4c-4a7a-4399-81d3-a659c5a7e3e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6df6a79-13b8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772181921, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772181921, "uuid": "abbc2239-bd1d-4f16-9e5a-d2651edd745b", "comment": "Malware payload", "value": "3b542ed80450705a0d33d71f1c2c2e43", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772181921, "uuid": "a322e843-0a77-4925-85c7-8f48a80b1e6f", "comment": "Malware payload", "value": "4f67383bf43d2b94c7fb51f57815d135e7f8b2d648065d0f67bd582d86fd43b7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772181921, "uuid": "6fd3f86b-1d14-4db3-afb2-233fa6dfd6b0", "value": "T1CBF6331D269F2FB7E7A7E73277FA41320FACA21B54D1C93724A81641C79398D3682D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772181921, "uuid": "d48b3c4e-731f-48f7-ae3f-a1e185d306d4", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772181921, "uuid": "a61622d0-d5b2-4b7b-8261-d86a1119c27f", "value": "393216:9pTR0ECKZ9qZ5Ok9zhJztgYiRpReRHwGmRD/0DJR8RpF94tE+y0J:e/y9qZgk9zbWYkpReMMVWFnk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772181921, "uuid": "4331cb27-f144-49cc-87a9-0c96807f69b9", "value": 16673792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772181921, "uuid": "07e4bef0-a5cd-42c5-8507-0c0ec197aaa9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772182687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772182687, "uuid": "99afe5c4-da39-46e8-a4f6-75c001ed5faa", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772182687, "uuid": "a22b31a8-1c43-4aa9-be25-e4a7be5f6a5c", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772182687, "uuid": "97aac58f-56e2-4214-b1b2-d2d09bc0fa4d", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772182687, "uuid": "11df3aa6-8c88-4e09-ad41-556933341d7a", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772182687, "uuid": "9d979fc0-4ffa-4c53-a782-f14bd198badd", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "784bd57d-0ee2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772185277, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185277, "uuid": "d35afac7-9a13-4b95-87cd-4dd7d43968f8", "comment": "Malware payload (Mirai)", "value": "d49cfac636a80e889231b1f98958775a", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185277, "uuid": "30f96107-9415-4bdd-a341-ebd4d015230a", "comment": "Malware payload (Mirai)", "value": "f24022271ac741b623cc725e64a14e40cd7720dc97c7f3da30083676550721c5", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772185277, "uuid": "bc4de606-aa3d-4003-9559-bac0fe360ced", "value": "T1ED03F782AC92865689D813BEF93D41CE331273B9D2DF7152CD015F18B6CA94F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772185277, "uuid": "59b72962-9c02-4ece-bdae-921e1703700e", "value": "768:CMn1EjZA//+1vTRfRiOC7wYqT4JqsWA3B5d7I9ybMioW+j/LsYtXO0Cr:CMn12A//SrRftY97WARbIcbboW+zLsY+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772185277, "uuid": "185b3237-c177-4b52-821b-b503db65f973", "value": 41412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772185277, "uuid": "59e59f97-1812-4e82-b253-9b3f244b5eec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94b53495-13c0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772185327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185327, "uuid": "08e0ab8d-2f3d-4f9a-a86a-c487dc8fe3d7", "comment": "Malware payload", "value": "8a66481ffaf76100e8a1971b27ebee82", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185327, "uuid": "d52cf81e-b58d-43aa-aea0-6fb9c5b2060b", "comment": "Malware payload", "value": "61f5e68f1dc91eee925af875bf511de0de1483a8e663567c22ca4bc568808341", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772185327, "uuid": "65cd834f-e5e9-4036-bbc3-2c2136ff3d3c", "value": "T123B423CCB6C788CC15A63134E6A24B4154DBBF33B2DF73A1B4B849700DE6A6710297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772185327, "uuid": "fe5b5e67-af0e-4329-bdc2-2232b7b0de11", "value": "12288:XwsK8MG1KnyC/G76u6M0gXar5qduxct2ien3P+bef:lKGcGmuwjpQen3PwS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772185327, "uuid": "571273b7-10ba-48e7-b82a-3892b9f95dbf", "value": 515391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772185327, "uuid": "bfb62fa2-419a-4613-b9e9-6dacc94eeef3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b899dfc0-13c0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772185387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185387, "uuid": "56fd11c3-4bd7-4f68-98e0-d7a7a6a9aac7", "comment": "Malware payload", "value": "ca63d5423c1be2eda0f7f5624b1b0f92", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185387, "uuid": "95636c33-4215-44bf-a8f8-10f446d00de2", "comment": "Malware payload", "value": "4508b938d16e16585d4065d10ba5890f380a9d7e82d1ae0246bae41937d17add", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772185387, "uuid": "a246c864-0707-4f98-969c-6059270ddc8d", "value": "T1F2C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772185387, "uuid": "45286762-8d19-43ae-a221-e4a16f8babd5", "value": "12288:eyBXIs7rM1mcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5E:rImQ1CEA/f0Za6TCXKBxeq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772185387, "uuid": "a289d9a7-033b-44f8-8751-f0a701963b85", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772185387, "uuid": "347c88fe-207b-4287-a751-501ecb13a267", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbdfecbc-13c1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772185930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185930, "uuid": "65f7e8bf-e0f7-401d-8cbd-0d511a7c79a4", "comment": "Malware payload", "value": "690d7c8018b8dc14efc22f52f3c3d0ae", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185930, "uuid": "47643ef4-2037-41cd-ba52-ece888c98fe4", "comment": "Malware payload", "value": "365d1b01cd5e605f6e7d39b192aaf56040176f2bce6eaec0fc11584850793a83", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772185930, "uuid": "4a3d047b-9b4f-4c39-b6ed-44174a3d3706", "value": "T176B423CE5A286CAC5BE85E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772185930, "uuid": "81c5ed0d-5d88-4a29-bafe-63502b735833", "value": "12288:7GRl4nbDDGIabs/7iiEVwYg2l3/2NHyy+wK8K:DTabs/7iiWw0KtxK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772185930, "uuid": "10f8c92a-28b5-4583-a90c-519eb3301037", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772185930, "uuid": "2a884579-cb9f-400f-b70e-87992c2b4a26", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89bc0f18-13c2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772186168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772186168, "uuid": "03533ff2-d26e-47e0-9c54-8bfa4956b4d9", "comment": "Malware payload", "value": "1fed6eb66a2351f5032a467ad1ff27c5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772186168, "uuid": "8f14c265-b685-4447-9a27-143b225d8291", "comment": "Malware payload", "value": "2c5d4e26385d968570ffe8c602e431bd7fc88c3f637d0b1736ee7326c754b9ab", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772186168, "uuid": "7e5cbc2f-58b9-46e3-a05a-ee48091c86f3", "value": "T116C4238BA3FE845390BF1F58AA57B48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772186168, "uuid": "5be050c5-4de1-43cf-9151-f38e74052221", "value": "12288:X+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bycH9I1P0QKw6FEG:X+QqldA/TSO713u7xncH9IaQKHL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772186168, "uuid": "64cb8752-d947-4bb0-be36-3899588801c8", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772186168, "uuid": "e0e8d260-1411-4f54-99a4-0386f073f2fb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad08c8fe-13c2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772186227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772186227, "uuid": "fc192978-db45-441c-b6a8-2f17e7d986b0", "comment": "Malware payload", "value": "e5805bba945fd095fd04c6784c16f9c3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772186227, "uuid": "08db01b3-c01d-47dd-b54b-7b3add4f55fd", "comment": "Malware payload", "value": "302d5d23b4dd2c4e1edcf6fa26fea617344fd287122df415f12a3786ef61cb57", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772186227, "uuid": "fe78b2d9-dbf6-4899-9d27-df316b747b06", "value": "T1A6B4231EF4D478CFD68ACDA394292C785FAC96C9CD122B7246C4EE9312442F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772186227, "uuid": "def84404-42a1-4d38-956b-8c21a33cbcd7", "value": "12288:NTibgSMFBOBSlqr/Ku7FxPbzJTVBU+8JM9hAC8Z36VOBRkbKQDiUbpKY:0cSMFY1KkxpTKJM9mCw36VOMWAPbpH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772186227, "uuid": "737d317b-1dcc-4ad1-b766-3473749a4e68", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772186227, "uuid": "9e2e2844-ca08-4379-a11c-34eb0467dc81", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0ec9893-13c2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772186287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772186287, "uuid": "300b0864-39d4-49d9-833e-7bab24d48f7c", "comment": "Malware payload", "value": "7b69212e0f9e632a75659140e1fafb18", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772186287, "uuid": "743dafc0-2365-47a5-8562-05c165ebd8d2", "comment": "Malware payload", "value": "89730887d1ac7aab9e37d590081a5c9c56fa3f79b24960bff3f9cdabb0486424", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772186287, "uuid": "9d318c95-9779-44f9-a2c8-f0377c4fe9e6", "value": "T1B2B4231EF4D078CFD68ACDA394291C789F6C96C9CD126B7246C4EE9312442FA27A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772186287, "uuid": "90f4efba-4313-4a56-ae2d-598b67e4d573", "value": "12288:9TibgSMFBOBSlqrcKu7FxPbzJTVBU+8JM9hAC8Z3vVOBRkbKQDiUbpKC:kcSMFYqKkxpTKJM9mCw3vVOMWAPbpN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772186287, "uuid": "117131af-ea06-4177-aa05-6672ec869fd9", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772186287, "uuid": "703296c6-a17c-4b6d-abf1-ee160838d9df", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a35660f0-13c4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772187070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772187070, "uuid": "6b9bd53e-c261-48b5-af4a-265c9edf21e2", "comment": "Malware payload", "value": "09874964747be5f7e063d888bfa0187c", "object_relation": "md5", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772187070, "uuid": "11b98f40-89ea-42e7-9d93-9bf013d709c9", "comment": "Malware payload", "value": "143e201488e40e85dd553ebaecf33266071ac512b2827d13c6001e7585bdda61", "object_relation": "sha256", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772187070, "uuid": "2ac22228-9e78-4236-bd64-1dec38c5652d", "value": "T1DE07337BA2243435039FE78A4E2AA7064B312E16C50D776AC7C2476267F44EEB31B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772187070, "uuid": "ec72ce2e-980a-457b-93fe-657a0a4f6272", "value": "393216:YuBNPx0aY3v03KT5SWhQPAORh4TQi+rZP9HQNX7Um:YuTPZY3vBtSWWAQ9HUF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772187070, "uuid": "1f385096-4646-4e60-8f3c-74a9109039be", "value": 17000891, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772187070, "uuid": "b5d1582c-a364-456f-8d09-cd83e99e6b59", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad747841-13c6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772187945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772187945, "uuid": "257a9521-1e76-4777-bc17-1b83c035de2f", "comment": "Malware payload", "value": "a743e6c8f9180b9212bd8d799f5d5f7e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772187945, "uuid": "7a6ac127-5fc4-4c65-83a5-6aa426835476", "comment": "Malware payload", "value": "3d006eb91eba9f1be8624ec476e7a02f2b47c9b9416656a58042ae073dfecdc1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772187945, "uuid": "8f2a3ac6-0231-431c-acc0-0266e4f9a18e", "value": "T13334F1DFAA03EF1D68EC6696981171255FE29AE080DFCD2E087F8ACC761C53650D2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772187945, "uuid": "fe14b74f-065b-4448-be8f-e87c100509f5", "value": "6144:J03zLDesdQVjJA7PTrWxnCaE/K1924lnGOcwtj1AZVsuacVVVVVVVVVVVVVVVVpa:gLDUjJoWAD/uPlnGYCV3HVVVVVVVVVV4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772187945, "uuid": "6f09f93a-4e42-4b5c-af82-7b19e0207389", "value": 247870, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772187945, "uuid": "48a8ee3d-d7ef-400c-aa21-427c665d2ab4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "303a97ce-1237-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772188269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772188269, "uuid": "b309b357-d64b-4610-88ae-d58d42be60dd", "comment": "Malware payload", "value": "b6570ba8935a9a4f0e83a40880a857cd", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772188269, "uuid": "87cb3f57-ffa3-449e-a5a2-620a02305560", "comment": "Malware payload", "value": "2d92df6beff6ccdb68272adedc1673ea12c1a19efecb77a16f9161ecda56ae8b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772188269, "uuid": "7e126fc2-c4dd-44a8-8ed9-cc5359c5c732", "value": "T18EC4D9B46204B8C0D46EAB729C74BFA8A13E11B59FCE3ECC1194BAD01FA37557A0D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772188269, "uuid": "212860ca-3b44-44c3-98d1-cadd4921db23", "value": "6144:ACHu6h+VH6n4WACNXYPSNu2XrwsYVPUrT7CompdR36Ue8kTCExan/lOH:ACu6cU4WfBdyPUqpyylO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772188269, "uuid": "1b83f78a-79ef-4221-90e1-c3711d19e171", "value": 594222, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772188269, "uuid": "48ebec66-017d-4ae5-8491-10c574e94d31", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "748f0677-13cf-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772191715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772191715, "uuid": "827e1c08-38c8-405e-bd85-1bdce3cd73eb", "comment": "Malware payload (Mirai)", "value": "642553704dba7ed1433a23ea382d9ecd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772191715, "uuid": "8a3fef86-d9a6-4695-951a-c3617d625da6", "comment": "Malware payload (Mirai)", "value": "7ee339b6c14a2ec2ae0e18892e8cca216fffdd9bbf1f4701ea144d0efea265c3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772191715, "uuid": "a7676312-a417-4f4e-af9d-3a823722dfc3", "value": "T11614D716AB510FFBCCABDD3706E90B0139CC655B22A53B3A3674D528F54B50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772191715, "uuid": "9ad87b18-6427-4dc5-b999-51a58d226ba0", "value": "3072:iJj3G62uPcQacZw66TpRF8zHAmBzPxH/sN:ihW6RPcaw66/FgH9rxHE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772191715, "uuid": "60fde4e9-ae5d-4a05-b539-fc3a98b8a446", "value": 194176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772191715, "uuid": "53abf8da-1ceb-4f29-9fa8-517d9276b13a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bae4ca0-13d4-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772193875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772193875, "uuid": "e3252af0-a15a-46dd-bc8f-30b1dec7c458", "comment": "Malware payload (Vidar)", "value": "f9fce1e03c3e5521122d20b33542a27d", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772193875, "uuid": "78b9e816-8555-4d2d-a8b1-9a9c35cb58bc", "comment": "Malware payload (Vidar)", "value": "cd4bbd671e59dea7aa3602e403326169e81ad4ba81523ff7d519666ea7eba954", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772193875, "uuid": "49647b92-5354-414b-9816-caaa4157868c", "value": "T14A2422C7DE5ADF43EAAB053200276B5EAAF05E7F4FB4121D4C3B93AD4196C6214BA7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772193875, "uuid": "fc56881a-baa6-461e-b1f4-d7f9f851d47d", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772193875, "uuid": "498dbf8c-1bfa-4216-9cc3-5f2a58e1db0a", "value": "6144:mDUozo0qBbeUZSIzEj4heP/6JvQt0heZ:GtF0SrIg8heP/84aU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772193875, "uuid": "06cc376c-3d84-4b4e-81e9-190189d992eb", "value": 217088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772193875, "uuid": "3564ff90-d1ad-4a68-8383-f9a1e20bb4b0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb7dd911-13d9-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772196156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772196156, "uuid": "bcc7f376-7c32-420d-b044-347578af9f0e", "comment": "Malware payload", "value": "201cd971b55e0c16c6664be2087ced5a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772196156, "uuid": "d4b7e1cc-cd74-4089-9e08-f3c54619158a", "comment": "Malware payload", "value": "cb9ae60f2b8c5cbc89dc5703c09dce596cf82836ef57540b78c45194654045ac", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772196156, "uuid": "1c1e6d96-2042-43ca-98ec-b5550568e40c", "value": "T1E621BB7021F148731D541940F23727A6AB73D85745D3614C34DE2F39AFA7B03A5BE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772196156, "uuid": "c7c519a3-a23e-4775-989e-65de85b7b420", "value": "24:cnnRUR8fARVNvoslc9HHYbxtNuPl/Ha+iUyfEYul/HVeN:cnRu9RVJoslwnYbxaPl/BiUnl/s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772196156, "uuid": "8d3b1332-4bc2-49dc-8a09-ade4ae203937", "value": 1429, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772196156, "uuid": "29bcb5d2-a65a-4af6-8e7b-c177479a1337", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2716597-13d9-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772196222, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772196222, "uuid": "8cba1a2a-ff5b-4daf-849e-b16d38069988", "comment": "Malware payload", "value": "81f2898f141e8ea293aa0af797ffb876", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772196222, "uuid": "e5253988-836d-4acb-a140-33cb11da14aa", "comment": "Malware payload", "value": "c38c35f6ba285e770aa0803fe4d0283059db39af61b096b7c3ee4110833094e5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772196222, "uuid": "597cb962-fdd1-4061-b0af-4c54fcaf285e", "value": "T1238309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772196222, "uuid": "336aebbd-d8a4-43b5-943a-aca03bbf2728", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnWWadVN/:XEKltp9txAX/yr2pbWW0VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772196222, "uuid": "02667d11-c435-4372-89b9-b634ee7c853d", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772196222, "uuid": "fe169e89-d699-4add-9bee-2be99bac706a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2647a27d-13dd-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772197597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772197597, "uuid": "756e0392-1189-4c7e-afb7-e7483af6b416", "comment": "Malware payload (Mirai)", "value": "b29e72b551265cbe8dabb766b9fef836", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772197597, "uuid": "11aa93a2-7635-4a51-86cf-f3b05cf09048", "comment": "Malware payload (Mirai)", "value": "addcf578d5290ff2b99a8ad23d9e075d8087e2abed1a789818566e0ee499e431", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772197597, "uuid": "22fd6064-a972-4242-8e16-f0cdf85c9eed", "value": "T1C6C35A77D82A6F18C255D174B4618E792F53A29182575FBE29B7C3B18083CCCFA05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772197597, "uuid": "f49c699a-9713-4c47-939e-73a6dcc2e598", "value": "1536:6exZGq/IUcH9QZysUi1hmpNumC6dKgEdu09vawdhbW1fypgOiSNfhJNi:6exLQUc/sUoKNumfEgqvagbW16pgOJi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772197597, "uuid": "488a7f60-ed56-4aa9-83ce-d5bde6213172", "value": 129888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772197597, "uuid": "0ccf1e02-2866-4b62-a1bd-948de20f8d1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c2eccfb-13df-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772198573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772198573, "uuid": "127fab70-06ee-4c76-a2da-604994efb9d1", "comment": "Malware payload", "value": "ed7ee9e51422d3ded5fa58c6bb100b34", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772198573, "uuid": "9bfcf208-7280-4e97-8f65-c8bf9b3aac47", "comment": "Malware payload", "value": "781bc15e218f1845b33c450ecd3feec2bb42f59a7a85e25a2d17d356908b8a7b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198573, "uuid": "fb456782-96ce-4251-906f-8adcf94b5f30", "value": "T13652483721F08B3297D055C4A3771BA14F72A70B456714B8F4BE5A269F2EA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198573, "uuid": "67065a7e-071a-4e17-b906-38984523cb78", "value": "96:cCuGB6n7sht+O+v1fsn+h4+tIicqbA/GsGCuKNppjrwaV+I+j+3+FIBmIBGIBXgT:cCuq6nC4hvZ5mzjqKNpHPQsmJ1p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772198573, "uuid": "55a45d2a-77fc-4c91-84ea-33364fc86e71", "value": 13432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198573, "uuid": "87a18e95-2465-464d-b167-793ef25fe42e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a8834b7-13e0-11f1-8369-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1772198866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772198866, "uuid": "d83ce767-84ad-4aa3-ad75-87d1580df023", "comment": "Malware payload (NetSupport)", "value": "e6f24d09bd6a0fef75be1d61eb8686b6", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772198866, "uuid": "27cdc31a-77d9-4d59-a0b9-8d7d43b32299", "comment": "Malware payload (NetSupport)", "value": "6cdc023534af5779fc1a05e1ba99c4823cb6dc7e3472598e0b8db8572d68def4", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198866, "uuid": "ece467c3-5925-479e-be3b-8d341a7f5f86", "value": "T132D633A0A6E811FBF9EE933DC9619591C99A75673B49C183C3F8D0A12C733C46A7E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198866, "uuid": "ee9ae646-22b6-4148-a98f-6dae2103e419", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198866, "uuid": "92fc22ac-7687-41d9-952b-2e83dea48466", "value": "196608:714oWUoB9qLZBFslHl7dZgnRMWF3y99TisLkuorEl+vkvHurH/P/XRLSq2KKeF:714FSsFl7dCR1C99/LkuVlikvHuDX8W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772198866, "uuid": "fada511d-3a41-4440-866b-ff4965bd9b38", "value": 13422374, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198866, "uuid": "f82481f7-f94f-44a3-9f94-cb6fb94de8bc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59e02dad-13e0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772198972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772198972, "uuid": "a3e2a8c9-292c-4aef-9d36-a6352950cfb8", "comment": "Malware payload", "value": "37bfd105b84d9e199c118088f2e1473b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772198972, "uuid": "c11798a2-ac67-45f7-981f-0ef08a154770", "comment": "Malware payload", "value": "0f331a7db40669b61d9e85212f8cd45277f6be2220a347329b3515e624c430b3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198972, "uuid": "7fb454c8-978f-4a99-a7b0-9601e8d9500f", "value": "T14932563B21F08B32D3C420C953A65B654E72A70B452614B9F4FE6739AF2DA0371E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198972, "uuid": "3e2b2bf1-08ce-42af-a504-d88b45d3a57e", "value": "96:cAu1B6msht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvj6YFWnR98b:cAuH6L4hvZ5mN9oKNpivYG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772198972, "uuid": "061ea15e-e923-473c-a69b-70c555e3d207", "value": 11082, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198972, "uuid": "83ee95cc-7321-4a1d-ab69-63c409e49c99", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67f8ff4c-13e0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772198996, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772198996, "uuid": "5213903d-5218-4541-ac12-1255e0cd7f4d", "comment": "Malware payload", "value": "03fe9c1ad8548802e8afb039cd51ba1f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772198996, "uuid": "2d4c3cd9-e7ef-4620-bc76-4c983a0d25c0", "comment": "Malware payload", "value": "6525c636f93255cbf2c41900145f9c3c2e8218e5457ce0b53619136da772824b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198996, "uuid": "4f01e85c-4179-4016-9dcf-cfaaa9e5e4f0", "value": "T134613B7015F00C736E201944F3772BA6ABB7E8574A97618C388E2E396F97F42A5DF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198996, "uuid": "caeacb77-4129-4709-8688-87af8079808d", "value": "48:csRu9+J9nB6gHrJilrmAE69lr8z6E69lriFE69lrElEHlEzl/+BUdl/w:cCuIB66Si6fA6fv6fiEFElBjw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772198996, "uuid": "b9d8558e-5490-4678-b303-52312e1f769c", "value": 3333, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198996, "uuid": "7439bd37-a154-4b40-b228-177dd9cfb523", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c823ea0-13e0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772199084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199084, "uuid": "408f7504-1b45-4693-88f2-9dffeb6cba1c", "comment": "Malware payload", "value": "9a73cf2ca389c8649b8e0993c6556f20", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199084, "uuid": "4a382534-1cc2-446f-afe4-92c4abdf6a52", "comment": "Malware payload", "value": "8537f2fc8e4af0d1d9c1ee4773903b17f64fad801ce80b77aab109244d7b9597", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199084, "uuid": "6ae5c6af-1ff3-4bdb-90fd-6967c923d188", "value": "T156224D7034F04C732E256580F37727A69BB7A85749A3318C35DE1E2A6F87B12A5BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199084, "uuid": "cc5f2cfd-3700-48e5-9b80-809907246db4", "value": "96:cRmX9Eh9mLj+ksN8ZPa65UOsp8CfUwD14Ims2hZD0:cRmACU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772199084, "uuid": "405d6e85-f877-4f8b-ad00-9f516887c6a2", "value": 10177, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199084, "uuid": "18fe84ce-ce74-480a-bade-1c57c1084b30", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11ee6755-13e1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772199281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199281, "uuid": "85559feb-868d-4cbf-aeb6-f341e4b716a5", "comment": "Malware payload", "value": "df2516bc442d559b89096fd5897c3663", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199281, "uuid": "9cbd1eb2-04f0-4527-8cf1-aa8ec6def06a", "comment": "Malware payload", "value": "27fd5db9838f020878d3bb243051f291cede135e8e83a4087216d8be2c0299f0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199281, "uuid": "6c213e96-c8f2-450d-bcac-d99fe22f2698", "value": "T11B12443B21F08732D3C410CA53A65A654E72A70B852614B5F4FEA33AAF2C90731E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199281, "uuid": "a19c76c1-6d32-4015-acd7-8bc5c8d33c2e", "value": "96:cCuosht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waYvj2Cp+is:cCul4hvZ5m5FG4j4HKNpivu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772199281, "uuid": "8ea807d3-b03c-4e2b-8b24-6a3afd7ecc5d", "value": 9770, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199281, "uuid": "7fc57095-3e8a-4b12-970f-bc10d073f8d5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45dd8e03-13e1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772199368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199368, "uuid": "595f6030-f74b-48c4-b02a-e8d450359abd", "comment": "Malware payload", "value": "7b158a1a4421d1c3ebed00b9f21ee5fc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199368, "uuid": "0f920630-b0a7-4b3a-8d8c-ef15977df1e2", "comment": "Malware payload", "value": "8ad34ee9f304099fb8da08966769db735b3328874b0f804b8af67d6a2cd62aa4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199368, "uuid": "3047db8b-491c-4788-a84d-b58bd977acaa", "value": "T19CD1D67125F14C333E606980B3772BA6ABB6D95345E3218C35DE2E366F86F12B1AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199368, "uuid": "dc703d1c-47ea-479d-a77f-012ff676f421", "value": "96:cLu7B69xiUSUOSCx2xkStgFIrOIB6IBUfs:cLul6CUChQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772199368, "uuid": "e7f63077-3af6-4d1d-99be-eefc992d78ec", "value": 6390, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199368, "uuid": "55de2bbb-4859-4271-b0ea-217bbeb55a92", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f03169b-13e1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772199410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199410, "uuid": "852c84ed-31ee-4bd9-9eca-777670bdc118", "comment": "Malware payload", "value": "758a9cfe62d394c98737de74d65b1f88", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199410, "uuid": "cb4f5415-f762-41b3-9fdc-8fb3bfabbcc8", "comment": "Malware payload", "value": "dd4492fff71cccaf1ca5e3be9e6b31131d5dc9de9cd7b8422e4abee43f24e8f8", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199410, "uuid": "4a4116eb-5320-4a88-9581-22c2ade40bd2", "value": "T143B633342BE08E32D8BE1FBE8519856965A6ED29BC47F34B540039B50F3B2D152532", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199410, "uuid": "e3b06f7b-23c4-4da7-b97a-f7d8049148d8", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199410, "uuid": "03337a03-eb3f-4b38-9be4-f71b8196d78a", "value": "196608:w002GVzPPXmHGFRptXA92gOGCN0o5PvowgjAcFoxnHj+u37u2:B0jkmLpq8jGVm6PSxnx7u2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772199410, "uuid": "e0fdef7b-c175-4524-a2c1-6839e2308dea", "value": 11096064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199410, "uuid": "222772d7-dc04-4873-9df8-63acdeda9a88", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98d5cea1-13e1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772199507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199507, "uuid": "a0b9566d-393b-48e5-8832-4d542f8530cd", "comment": "Malware payload", "value": "ca37633d2254279b0dfdbe515042380d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199507, "uuid": "9d67b649-8ef4-4eef-86cc-60d846508ea9", "comment": "Malware payload", "value": "9a103bbea861f56d1a47494a45a9496aaf3ae7be3d6ce1fc773f2a16a3e0d4a2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199507, "uuid": "bccb33a1-ca78-44b5-970d-33f7a7d4ff2b", "value": "T17B62663721F04B3297D415C8A3671BA54F76A60B456724B8F4BE57399F1DA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199507, "uuid": "e83b0e14-ea3f-4cc4-90f5-87b78fede917", "value": "96:cCuolB6Lsht+O+v1fsn+h4+tIiKkC1ymyRyzuKNpUj4waYvjJlVv38Zo8zJwD6fe:cCua6S4hvZ5mN9i/KNpiv2ZkvsMQ+j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772199507, "uuid": "b6616433-624b-4bc8-88c5-719babc4b79a", "value": 15719, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199507, "uuid": "0525e445-6ff7-45e9-850e-9fc5fd9b8e2c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bd5c6ae-13e2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772199754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199754, "uuid": "497a2054-e9be-4aa8-a70b-f4e175e8d594", "comment": "Malware payload", "value": "3fd6605fed3837c7fb37f1b3009d8ba4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199754, "uuid": "51ad3aa1-3628-47eb-b5bf-36d087f97f1f", "comment": "Malware payload", "value": "451193819bc4abc0aa2f134f4eb4e1ebe5a12de449be9861fbae186f1e5fc31e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199754, "uuid": "4fa4573c-dbfe-4e68-a6b3-0a8d64ebe71a", "value": "T16A81A4B035F04C732E616A80F3372BA6ABB6991345A3318C35DD2E395F96B12A5FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199754, "uuid": "6a7c5923-f16b-4c6c-bf15-b60aa68494e5", "value": "48:cniRxuGRy/+DdvnSfr7lwnYJ/dl/B4Tilwn8Gs7wnizLI7wnE/+ol3+L+ol3Mt+u:cWu47kQMaXv+R1mhm/IBRIBGcbC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772199754, "uuid": "d11fd2cc-d644-49e0-97e2-84e805425121", "value": 4023, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199754, "uuid": "1255a7e5-1033-4271-8ae9-729e89415d0b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c0100c7-13e2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772199754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199754, "uuid": "43165efe-1ca2-45b0-a85f-46eb6be26a0f", "comment": "Malware payload", "value": "0b49f539b834dd3bc6b612b710aab722", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199754, "uuid": "dcbe90ea-74bb-4c29-a370-2d319c1d67dc", "comment": "Malware payload", "value": "9d6d9ee96034ec7ebe1b191dae0ae84916e9cf783bb21a026a9b9ba859d8f76b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199754, "uuid": "be22705a-0fdb-4c7d-b106-585f7b22c0dd", "value": "T1DB42357721F08B3297C055C8A2771B614F72970B456714B8F4BE5B2A9F2DA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199754, "uuid": "f56b4dc0-3878-4e3f-9bcd-57bdc4568bc8", "value": "96:cCu3k0B6n7sht+O+v1fsn+h4+tIicqbA/GsGCuKNppjrwaaIBRIB0IBT7IBbJYJN:cCu0g6nC4hvZ5mzjqKNp02LG7hxm+T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772199754, "uuid": "8168c661-6940-4ae3-9045-fea3f9583a88", "value": 12355, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199754, "uuid": "0adbc0d5-1aae-4886-bfde-737149a04c5b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a437176-13e2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772199778, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199778, "uuid": "635057df-17bf-4951-8c82-af654d2333c7", "comment": "Malware payload", "value": "394e87873dec7ce7e083b45067d9b16b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199778, "uuid": "7e75b7f8-2835-4241-97cb-9c95f70e6930", "comment": "Malware payload", "value": "ea6f705ca2739b0c87d1912a59ffeb9c67bdb103c44af8f09b294eb9e613ffa6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199778, "uuid": "e295df48-106a-4519-b263-431d4be4e187", "value": "T1D5528A3721F08B32D7D061C8A2671B614F72A60B456724B8F4FE5B259F2DA0374EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199778, "uuid": "685c1df5-2a27-4701-9961-cd8c82766b57", "value": "192:cCur6p4hvZ5mN9oKNpivvV6PFITVaHvhF:5p4hvZ5mN9oKNpivvQPFITVaHvhF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772199778, "uuid": "5fd14e60-e4c4-46c6-ac11-3687a17002ed", "value": 13569, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199778, "uuid": "5a15755d-7701-4377-bdd5-50d525ff0398", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6ee23f1-13e2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772200095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200095, "uuid": "ad3674a0-dc11-42c3-9941-ec1313d3657c", "comment": "Malware payload", "value": "51a34a59f7c54f06fba5d24aad41267a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200095, "uuid": "e9b9f12d-01b2-42e6-952a-4ad849e05851", "comment": "Malware payload", "value": "4d91ffd1013a8a494e36e8862729d0ed60ffa97b4cbb99122560df8904e6423e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200095, "uuid": "24eadbf8-b12a-4912-8296-923658a71bde", "value": "T1EC32567B21F08B32D7D410C963B61A614E72A70B496614B9F4FE5739AF2DA0370E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200095, "uuid": "ec62dfb8-8f57-4b00-adc3-9f2d69b90389", "value": "96:cCuolB6csht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvjKlWXaEXHArCAr8yIok:cCua6p4hvZ5mN9oKNpivAwRD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772200095, "uuid": "91230bf3-b112-493d-9bb9-ac86a5a25ded", "value": 11969, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200095, "uuid": "850500c0-17d3-4fa9-b2a6-3d807860ab39", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17593c57-13e3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772200149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200149, "uuid": "721bccda-84f7-4bbc-9018-79cee057e512", "comment": "Malware payload", "value": "6219a7664a430954babcf97d9c7e8437", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200149, "uuid": "d3b5b490-1181-451e-97fc-747adc22d7ad", "comment": "Malware payload", "value": "b8a32c8a2298476b755a1d54031345abcb33f6b8f37729337dc73eaa14b93b6f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200149, "uuid": "a99b191c-9e0a-4cad-b7e7-35159f559f65", "value": "T1CA32563B21F08B32D3C410C993A61B614E72A70B852614B5F4FE67369F2DA0771E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200149, "uuid": "8efb5798-c02d-4ae4-b95b-c7bcfaf86a87", "value": "96:cCuisht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6HcQAbAAFAAzHb:cCu34hvZ5m5FG4j4HKNphv5v1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772200149, "uuid": "af4ed693-b445-4569-90d6-a2064b62bbfe", "value": 10976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200149, "uuid": "711cd083-0153-422d-9cd7-54380514100e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0d15564-13e3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772200514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200514, "uuid": "6e871098-3324-4dab-93b6-84736781f454", "comment": "Malware payload", "value": "fb4fe1145759e080f0a12c81b3f85699", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200514, "uuid": "254b0469-43e7-4598-8bf1-d80f9b055c20", "comment": "Malware payload", "value": "e731caf31c58e0f2987126739f6883876ecd283fff029f986b5f7f2fd611018d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200514, "uuid": "d1129b33-a96b-4941-ad40-3bb208974bbf", "value": "T123828D3621F08B335A9065C4B3772BA54F769607456720B8B4FE1E359F5AB03B0EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200514, "uuid": "93000bc7-b6ee-4b25-aa07-9149302c83c5", "value": "192:cCul4hvZ5m5FG4j4HKNphv1KLMW6MN7molZQ:a4hvZ5m5FGGoKNphv1KLMW6MN7mo0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772200514, "uuid": "bbed5b26-62cd-4d9e-aed8-28f834b34b51", "value": 18577, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200514, "uuid": "fa515494-08c9-461a-a6c3-f44f24609301", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55731bc7-13e4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772200683, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200683, "uuid": "b0e74b01-1ec7-459a-97b7-ad80bd4f8fc5", "comment": "Malware payload", "value": "e5a5bd72a0dce16ddc93ad10b70ae89c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200683, "uuid": "fc187a3a-b4f2-4e65-a8e8-ea23132f2f36", "comment": "Malware payload", "value": "1a1159ccdf502419ecbfe5cfc4782dbfd8f06f1f022586bfeb3fc53031048438", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200683, "uuid": "1baa9ead-db74-44ce-8320-7ddfbc05755b", "value": "T1F491B4B420F018332D215540B3771BE6ABB6D85796A3668C34DD1F3A6F9BB03A5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200683, "uuid": "6bf6d330-fca5-4966-9100-ecdfc303797d", "value": "48:cnRu9RJ9nB6gTUblrmTUblr8FUvylriJUbylrEJUbylr+nUbylrMJUbylri0Uylq:cRu7B61xvxhvwJUvU9UXU8wmlLF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772200683, "uuid": "d1ffcce7-a782-46d7-80f5-bf7fb8e4d55b", "value": 4553, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200683, "uuid": "6c2e43d9-ad90-4ec6-915a-9acd692e030b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6dcf89f-13e4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772200846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200846, "uuid": "567c0367-334e-4c91-b6ea-2d915b4ea62c", "comment": "Malware payload", "value": "21ad3a893f37a05139213bac67e247b5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200846, "uuid": "064c24ba-d5ea-4f68-a182-ea95bca6ef0b", "comment": "Malware payload", "value": "39c18af4cc725f4b9afdbfe468fe821e42a946cecb0955c613e45c0aec7e8333", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200846, "uuid": "f40e2bff-6c61-4479-a115-59fcad41914b", "value": "T12642673B21F08B3297C461C962A71BA14F72970B456614F8F4FE57269F2DA0371EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200846, "uuid": "375d6d13-6d5e-40e5-8aef-9a385c329ae2", "value": "96:cCuYmB6csht+O+v1fsn+h4+tIiKqCTyOysuKNpUj4waYvj1XioV7+d+C6IB9IBCE:cCuYK6p4hvZ5m5FoKNpivdVGOy+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772200846, "uuid": "b75c2ba0-65dc-4b28-ab20-5c0974a18162", "value": 12318, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200846, "uuid": "a62e89b3-3d33-4709-899d-418ab290d972", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12a8616d-13e5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772201000, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201000, "uuid": "bf213f04-d6b4-4cae-a9ef-0583ee00ebc2", "comment": "Malware payload", "value": "f9d37ff23362e38a484df813a1d83f69", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201000, "uuid": "c3f231b9-48a5-4ffd-927c-ce09f5b541b0", "comment": "Malware payload", "value": "35d90455526e0bd9326933f0c907a38d6780727ddcbd4516e29253d66d08abbf", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201000, "uuid": "fc3506f7-ea02-4f08-b4cb-06fa2dd7359f", "value": "T148626C7621F04A335B9065C4A33717915FB2A61744A720E8F4FE1E359F5AB03B0FBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201000, "uuid": "abd10b17-58f3-422b-9803-26416f325b40", "value": "192:cCu/K6nC4hvZ5mzj7V7jiDDDM79E44+TUO:+C4hvZ5mzjB7joDg79E4L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772201000, "uuid": "39d32e7f-fc36-4be4-85d0-f209afb91c46", "value": 14688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201000, "uuid": "12c795d8-7d15-4cbf-bc2e-62b673d158db", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43e7798e-13e5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772201083, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201083, "uuid": "9476d57c-14e0-4527-a405-e825956740ab", "comment": "Malware payload", "value": "d7c1754b6e6c446f25f5ea0043231673", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201083, "uuid": "7605faec-8de4-48c5-9b23-4ef617fbafde", "comment": "Malware payload", "value": "e5f37ce84f58742b7c18766fef2a71ec95d1db5a60381e98c0a063ff3e3312c7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201083, "uuid": "8f82925e-ce8c-4d9a-9854-2fadfdc5a7a1", "value": "T1A973E83112310A7B028751E5F494BF4492D583FEDB4F8F439CB89EAA27DAE508A372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201083, "uuid": "0e1f002f-9380-457a-aeda-8726c765c780", "value": "768:1ORPcxHtQ/zB/VvthJvQXgKluPuCsi5FCRTKhANTwFmN+kEQL0n5+Db+E6VIaOWW:MRPJvvCwKhN5kE1n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772201083, "uuid": "524951f7-7ff7-4ec3-8a97-ae1a1db2844b", "value": 77220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201083, "uuid": "6984776e-da50-48da-9fe1-09267409dfc3", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65b3b1e1-13e5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772201139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201139, "uuid": "14463c58-570f-4a51-923f-6e768e6f4eba", "comment": "Malware payload", "value": "b164e27ead011b07c9836987fe67f3fe", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201139, "uuid": "e3a41a38-ee81-4732-9960-05d354dbdc72", "comment": "Malware payload", "value": "b7dd1e79bc7035ac1f9476ba3a41424492d768ef3b7be710be3bd44508c3208b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201139, "uuid": "d6d57285-baf8-4f60-a8c7-c1b0b5398534", "value": "T12E62573721F14A33A6D054C8A2771BA15F72D60785A720B8F4BE26369F5DE0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201139, "uuid": "a6533e88-6fd2-4968-b096-5d054da6ea67", "value": "96:cCuhmB6csht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6Ml6fz7+kxBhh:cCuhK6p4hvZ5m5FG4j4HKNphvIj1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772201139, "uuid": "f5ff48b7-1d3d-44a4-bb0d-246a16bb5314", "value": 15322, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201139, "uuid": "aade7cde-ca40-40f4-9427-c51ac5155f68", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1e50355-13e5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772201321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201321, "uuid": "2b07cef4-aea5-478d-a3d7-15c474f14c27", "comment": "Malware payload", "value": "6f48240d8d517df66fbb2d7ba4848e27", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201321, "uuid": "4e2ee7d1-554c-42b6-9d93-449a1d600177", "comment": "Malware payload", "value": "f3b6bdc0efddff3c2b8847f4739869787332fbe74f8164da491a5aaa41e364ff", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201321, "uuid": "da53d293-d944-4fc4-b1f0-8fa28f502782", "value": "T15C518B7060F14D732E686540B2B72B956FB3DA17415322DC35EE1F3A5F8AB02A5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201321, "uuid": "372bd150-74a1-4bf7-b259-34a1f230080c", "value": "48:cniRxuGRys0/iPdFHPwWYclwnECPZmDl27lwnp6Elwn8RUmkl/F:cWu4SioVdZqzQdFF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772201321, "uuid": "51c5d918-b41a-4ba2-888e-c3a913111d2a", "value": 2665, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201321, "uuid": "9094b980-702a-4f18-bf12-a01b381c6edd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01862631-13e6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772201401, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201401, "uuid": "0eacc49c-c9e2-4b3d-b085-1882b00315bc", "comment": "Malware payload", "value": "4746c2f3fffb730bc78ab2c2634a8add", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201401, "uuid": "7e265417-4fc6-43c6-8b89-5ef8b904f90f", "comment": "Malware payload", "value": "fe2bf4c44d3afd4fcbbb6a1042962cc850fecc902df5280a57bcb48e615882a2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201401, "uuid": "0a62b098-36c1-4891-ac62-c0f113c10003", "value": "T14E42F4B425F14C731E611A40B23727F56BB7945789E3218C39DD2F39AFA6B02A4FE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201401, "uuid": "bcd9d5e5-3829-430b-ad59-fb270f38b7a7", "value": "96:cRrqB6uL/7ppbpleU1eUGpE9pNZeUF/eU6inFdLeUndpZdNdVdtdWddd1uPuFuOp:cRrO66eweOeke4eH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772201401, "uuid": "bb269c9c-240c-4740-ac93-a2b431dd8a04", "value": 12918, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201401, "uuid": "e40dee24-c7ec-48e7-8593-03d48286496d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "461fbdd3-13e6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772201516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201516, "uuid": "30758769-4516-44fb-a6d1-2af59d056ac4", "comment": "Malware payload", "value": "e89c97793cecc0288b0c56d404b90e7f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201516, "uuid": "4e2fa2d0-b4bc-4f66-9388-424f5920f820", "comment": "Malware payload", "value": "cf7187570cfaebab52d02fb4ea128e415604b32c7654c9b94e9b9a33745b038d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201516, "uuid": "084fc991-dc37-4932-94fc-b188738a4016", "value": "T11E62893721F08B3397D055C4A3771BA54FB6A61B456720B8F4FE1A259F1AA0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201516, "uuid": "38f46127-1cb5-4113-b8b5-c5c5e5c4d805", "value": "96:cCuisht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6mkQdG/NBr+E+C+O/:cCu34hvZ5m5FG4j4HKNphvUZ/lxuP+D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772201516, "uuid": "d3835750-92fa-4004-851e-77bebbd3378c", "value": 15894, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201516, "uuid": "c4bba4e7-7dc7-4210-980f-6a37ab960c0a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64eadef3-13e6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772201568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201568, "uuid": "3821551f-ca50-49c3-8e8e-a0926d2e8ce2", "comment": "Malware payload", "value": "e46b627feb5f17679baff4042a70af53", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201568, "uuid": "cd68efca-3ec0-4ab9-a45c-f57dadefaabe", "comment": "Malware payload", "value": "d4eb9acff3465171b3290d6e3eb44032054f3a3a16a44b2262da49054430a7e3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201568, "uuid": "6352f3a6-16a2-4aa2-8d76-5b710787207c", "value": "T12E42337B21F08B3297D010C9A2771B614F72960B456624B9F4FE6735AF2DA0371EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201568, "uuid": "d812f700-3bc8-4434-94dc-a3dc1f12730a", "value": "96:cCuhmB6csht+O+v1fsn+h4+tIiKqCTyOysuKNpUj4waYvjxlPOSEgXYUcFn0N8F:cCuhK6p4hvZ5m5FoKNpivOXp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772201568, "uuid": "23dae767-034b-4419-a595-9c4dca73be0e", "value": 12549, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201568, "uuid": "489b0050-0ed2-41eb-90f5-731a86beed36", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fee4349f-13e7-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772202255, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772202255, "uuid": "252d2768-c0b1-4082-9581-c778d7400a22", "comment": "Malware payload", "value": "50b3206339f7b3cbe2d6985184539778", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772202255, "uuid": "726fe9aa-34ba-4175-9015-4e8d041f99d7", "comment": "Malware payload", "value": "23748d838edf43ebf1312bcafd9ea7d616b651a9dc323fc5d5aba5ee3d494dc7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772202255, "uuid": "4e692473-7bc4-455b-8588-2fdf9949d623", "value": "T10EF1D16B21F08B71D3D421C9526656A54E71A74B992A08B8F4BF933ADF2C90334E3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772202255, "uuid": "1eef89cc-b47d-4aaa-8694-068d1a822a3c", "value": "96:cCusB6n7sht+O+v1fsn+h4+tIicqbA/GsGqZ4BPqaF:cCuI6nC4hvZ5mzjHOf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772202255, "uuid": "898e1102-de78-428a-a353-6e5ff115fa9b", "value": 7506, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772202255, "uuid": "0c03e764-010f-48e8-b310-f3b825cbd73f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3ef05e4-13e8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772202532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772202532, "uuid": "086f3186-f0eb-46d3-bc35-5138e5e83bfd", "comment": "Malware payload", "value": "73e08403bf586db35e478c9936754ad0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772202532, "uuid": "76231859-27ea-4820-9ea0-8e8692649dbf", "comment": "Malware payload", "value": "138479047bc63b023b6b6f93a15300e32e0ba2bd8ae2b3ade6aecc7c22b869f5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772202532, "uuid": "34506430-3776-4044-8102-a9da073e4cc6", "value": "T14F22453B21F08732D3C050C953A65A614E72A70B492614B9F4BEA33AAF2C90731E7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772202532, "uuid": "befc3c88-0303-415b-8f94-1bcc71d4dfb9", "value": "96:cCuYmB6csht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvj0zCjsF:cCuYK6p4hvZ5mN9oKNpivl6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772202532, "uuid": "9c210914-5b3a-46b0-90c4-e865620fd5f0", "value": 10059, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772202532, "uuid": "6a563066-e0ef-41cc-bd26-cd1ebbbe737b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af7f0d55-13e8-11f1-8369-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1772202552, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772202552, "uuid": "8845702e-59ef-4a5f-9773-e0f5009fce70", "comment": "Malware payload (RemcosRAT)", "value": "fe868e87888e7e76f8a4eb916308cdba", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772202552, "uuid": "855aac61-5a05-4b4e-9022-4f58d974d2d6", "comment": "Malware payload (RemcosRAT)", "value": "731ae18f35cdcefa9d8ad03ceb602a3655085cc343a6e5bc3ad0ba8108d00837", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772202552, "uuid": "0e2bab14-55aa-4676-94c7-d1668f90d1c3", "value": "T18626125404672EE40FC9C35DF725E878EB62B41629631DECE243F18B4CCAB8A749B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772202552, "uuid": "e7c035b6-49f3-45eb-8eb4-b0c0728d3a0b", "value": "192:mmhC3+ldTNuTGB3cFSlPOM8HZyc63/Y2eyExruXPa2zvc6Kdk32Df6dWV02kWj/X:O+AaWj9xiXii2LJsFwbPBkY5owEy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772202552, "uuid": "5603f0e9-8de8-401d-baec-615b2e665abd", "value": 4427935, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772202552, "uuid": "eeec846e-8c97-41f5-b354-b18555af689d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5f65eff-13e8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772202589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772202589, "uuid": "2762aca8-7c2a-420d-850e-63b40dafacf2", "comment": "Malware payload", "value": "d54894c0608c60bbba673a5c1e31af4b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772202589, "uuid": "4ab36eea-7f39-4c02-970d-5a7ef45f3113", "comment": "Malware payload", "value": "0635dd15cb585c36fd03cacbad59a044ff606b967d51ceac3614c44f2d604427", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772202589, "uuid": "cb0ce01f-884f-4f17-9bce-3fa23f8eadd8", "value": "T1AAD129B025F04C736E601684F3772BA6AB77D85389E3618C35DE1E296F87B42B5AF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772202589, "uuid": "6fd1039b-a043-490d-8988-049fb490c288", "value": "96:cRuOB6/rqBi+8u56fm6fexCUxCafCqEKEVdENE0tEAEpgEFEl9p9+:cRuC6zclZ5v8MFxp+26", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772202589, "uuid": "69cb0a05-f918-4313-a5ab-521968e54ab9", "value": 6317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772202589, "uuid": "02ef1e0a-41ab-4dc1-a8ec-a147987d9b81", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5d4aa08-13e9-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772203046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203046, "uuid": "ab870b7e-04e7-4f34-a20a-68beb2138b5f", "comment": "Malware payload", "value": "5a75901bd576fd481ed0e8c000c491fd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203046, "uuid": "8ef506d2-effa-4d9a-abdd-61075d6fa03d", "comment": "Malware payload", "value": "9967575e2899559fd22c911d7dd17d61a5e3d3dbbcbe232a9947bbc4a0e414e2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203046, "uuid": "3467b5fc-81f6-4a79-9ab0-81ebf594dafe", "value": "T12532D67025F18D732E25AA80B3372BA69BB6D95345E3318C35DD1E265F87B12A0FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203046, "uuid": "97c725ba-f671-4628-815a-60372a329956", "value": "96:cCu3k0B6VzYMPZo8zS+6+x+s6IBqHIBZIBcIBSIBrIB4IBNIBrIBFRDfBVZUdR1m:cCu0g6VjZYBe4Tm/9g/C4Qhfp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772203046, "uuid": "19c18ceb-ade7-4eb7-8961-f3fe2150c2d9", "value": 11491, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203046, "uuid": "4147a117-20b8-42f2-abb4-2248136ae776", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21438be7-13ea-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772203172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203172, "uuid": "a3b74358-25dd-4e71-8a72-94d7d1eb4835", "comment": "Malware payload", "value": "5d26f3c6fcfe3519080358aba11d97d7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203172, "uuid": "81d2e45a-47c1-4d18-b054-7a381ef5950f", "comment": "Malware payload", "value": "47afdcadd568df2d24c8a6ce332efc871b5429d36f304f722b7f800609f1038c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203172, "uuid": "2c9bb871-175b-46e0-b8b1-e610b0315779", "value": "T17632B37125F14C332A206984B3772BA6ABB6D95385E7318C35DE2E265F86F12B0BF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203172, "uuid": "99c5fb61-d8c9-4e45-a10f-29853fed4caf", "value": "96:cCu7B6zJQOlexE+fkxaSN/oSoSogcm6mM+W+pIBBIBwIBVIBAXDDF069x0:cCul6zIFD/7zRiK7yS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772203172, "uuid": "e33154f8-b59c-45f7-959b-b135bde72c4b", "value": 11675, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203172, "uuid": "fa9eac37-8617-445f-a39d-597469158d14", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e025db1-13ea-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772203220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203220, "uuid": "5731e1a2-5bda-4930-aa6d-0cf91f6d93f0", "comment": "Malware payload (Mirai)", "value": "c46a81d52047c679cca99086e5e18976", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203220, "uuid": "7cd7cd57-8294-4f70-bc87-ef8f9ad26742", "comment": "Malware payload (Mirai)", "value": "32fa31787e5542daa134b8a3e14cc276a09f15750b3cc7db07968a179d5ae550", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203220, "uuid": "9f5824c2-08cb-4440-8ef8-9fb8edfe6f0d", "value": "T156E35D96F802DE7EFC0BE5BE44670D19F931A3A13243072E529BFDA3AC711961D16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203220, "uuid": "b0693660-ab93-4480-bd45-602df843009f", "value": "3072:tamyNhgeKdgPM1CTf2gnCx4iUb7d19THHHip24:4qeKdgUWnsMd19zip24", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772203220, "uuid": "9f550c59-671a-4876-94a6-0b7bf0d57b2e", "value": 146892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203220, "uuid": "388ece73-e543-4032-90d4-6a2845cb1bb1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f626ffa-13ea-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772203223, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203223, "uuid": "397bf935-cf1d-4558-8ffb-58833c553620", "comment": "Malware payload", "value": "68d685a443496548f4995f28631b0bae", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203223, "uuid": "75015b48-4c5f-422b-ab55-a1038b507f87", "comment": "Malware payload", "value": "59a7742bbccbd1d4bb11ff3ccf9145c823b29befbf7b17862cc9882c5d67aa66", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203223, "uuid": "0ef8a459-8226-4adb-be23-52b5752acf55", "value": "T1D042387621F08A3397D025C4A37717A15F72E60B44A724BCF4BE1A399F59B0370EBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203223, "uuid": "05f7a058-86ca-4642-9386-fdcb279545fd", "value": "96:cCu/mB6n7sht+O+v1fsn+h4+tIicqbA/GsGqNz2rJO11IB4IBq5rC2OJyJpJDDA7:cCu/K6nC4hvZ5mzjE+f1miM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772203223, "uuid": "85ae20a1-98d8-413c-91a3-6c0792f3d281", "value": 12732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203223, "uuid": "ba5f8f80-aa2b-42f0-9e28-c0de58e6c544", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b81cd79d-13ea-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772203425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203425, "uuid": "f5132c14-a4ad-484d-8cbc-12702413293b", "comment": "Malware payload (Mirai)", "value": "85702200c9058605cb8708ebc20de410", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203425, "uuid": "9febf1a3-3621-45d3-96ad-a589a0f4d08b", "comment": "Malware payload (Mirai)", "value": "84dc5392b56c73d7b88ff374b22b0cfda40ef701102d22d95e7be0780a100176", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203425, "uuid": "73eaad1d-2570-4a0b-912a-826c5ffe900f", "value": "T12AD33845B9829A27C5E123BFFA6E018D332563E4D2DE71178C215F217BC691F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203425, "uuid": "bf764be6-a6b3-4cd8-af38-2fa0011e8351", "value": "3072:snFif7apx6XS+kUgpjWXGsmMs0u29wzulziQSq:sn8ZS+dQWXGsm5s9TeQSq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772203425, "uuid": "6cdd7d10-da82-443f-abd9-1b2412e6698e", "value": 140756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203425, "uuid": "2b5a5c98-53b6-426f-8acf-96385d9114f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19258105-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772203575, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203575, "uuid": "91029efe-9e0d-40ed-a8cf-e957d68f113b", "comment": "Malware payload", "value": "f860c4318ab1cfd43fafd24f99c176cb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203575, "uuid": "7845d8b4-fd18-4823-b051-003da4f66c9d", "comment": "Malware payload", "value": "d8430372204682e98e75cdf589ab45e2f09960cd0aff5af741341671481b3656", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203575, "uuid": "fa8ffe4e-0bf5-4766-b3c2-5848a5653117", "value": "5972E18A2EAC3B07F4B296F2F33C7E58F3052E9D76679817D199712350A301AA114C6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203575, "uuid": "f5e1069c-f3c4-4bfd-b93a-2fdbbfd967f2", "value": "384:YTYXvQDuYY2xZ6VTgDK4mpwTl5yejHSDeWBbo7hcn:YTYIDfYG6ZmewZ59+n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772203575, "uuid": "5caab320-0cb8-4425-be5a-12be6ca4845d", "value": 17376, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47c6fddb-13eb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772203666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203666, "uuid": "4d5ceaf9-227c-4958-849c-c94eb5bc2d6e", "comment": "Malware payload (Mirai)", "value": "8fd62e6792ec7c27c177a3ee935b6b2c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203666, "uuid": "a5c3b38a-9f3b-4966-afa4-be48c3cc5642", "comment": "Malware payload (Mirai)", "value": "5f3c3492ac8d904a88391e88fd39c923dd76d097bfed19d5372d44d366dc90ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203666, "uuid": "19751cf3-d56a-435e-894c-b2f7aa0292b3", "value": "T1BEC39E32D8396DC4C1945434F8B1EE711F62A5C441A25EBB1AE5C97900C7DA8FA0EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203666, "uuid": "a103ccb4-937b-44b5-8aa1-dd4ac3c7ccb2", "value": "1536:iaZwsA5XjVZJK0twtfXd/GW25UhMMJNu5xWKZYMkaXN7Y+UKigHcYSQwKprlzww9:if5Z5Z98XdmVMJa0aX7biySQHrMwE8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772203666, "uuid": "85c84791-ebcb-409d-9fa4-bf13ef8a99d2", "value": 120332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203666, "uuid": "6225d9ca-e2f7-4693-b43e-e7b2a4836474", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5838d678-13eb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772203694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203694, "uuid": "8ee04361-335e-43d5-a02d-376261e0449d", "comment": "Malware payload", "value": "7ca960866a1e8be36c5806fe05c6772e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203694, "uuid": "e092464e-1670-41f3-9f64-e0380782399d", "comment": "Malware payload", "value": "ed0a2246ae7d4ed2b3a0322c19ffa99a3d103d3faff3df53421c320cfc3719e2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203694, "uuid": "ae74e4c2-82da-450f-9cda-78d2fd6d6ff2", "value": "T11451397024F11C732A256540B2772B91AFB3EA53496323CC39DE1F2A6FC6B03A59F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203694, "uuid": "f379da4e-5749-4750-bcb0-ef0947e0d293", "value": "48:csRu9RG6B6gId/iPdFHPwWYccrmZZcr8MHcrivdcrEmUbl/b:cCuy6B6v5ioP5UX89b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772203694, "uuid": "98d72bca-b151-4ee8-9333-5909b4692142", "value": 2935, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203694, "uuid": "1deb46bf-3c68-49d7-8620-c4683b283df0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89b0d6a9-13eb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772203777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203777, "uuid": "56d4bf73-6bfc-4768-a6e6-70197bafa046", "comment": "Malware payload", "value": "857e03cdb50c1d016554d64602b81d5d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203777, "uuid": "73c1355e-4da9-47e3-bc5b-a3bee8e33b3f", "comment": "Malware payload", "value": "ba3c1e72512aeab90ffebaf002c8702277036176315247bb3c80692666adf81e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203777, "uuid": "c93ea499-a881-42b9-a1e1-da6c4ed0f838", "value": "T15C32453B21F08B32D7C410C9A3A61B654E72A70B452614B5F4FE6736AF2DA0371E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203777, "uuid": "fd9b336b-cb55-45b8-a791-ed95e4ca77a1", "value": "96:cCuosht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6y7OJgaqvlAAZ4b:cCul4hvZ5m5FG4j4HKNphvW/qdc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772203777, "uuid": "98af3944-8474-4833-aa22-e61a1c9bface", "value": 10985, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203777, "uuid": "b3482fce-6e17-4e52-b2c8-d1a36b66e647", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a44410ce-13eb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772203821, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203821, "uuid": "c82cd49f-9fa5-439d-8488-f7fe23484d13", "comment": "Malware payload", "value": "10474373f4912217f5290e614c8f7645", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203821, "uuid": "290e331b-c2db-4334-8603-7f7e82093994", "comment": "Malware payload", "value": "c038dad28a1f71fbd6c497a032cdff65e8fbd5830ef2e97243f4994c9052e38e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203821, "uuid": "60bb0606-5d91-4e4c-869f-cb0ec872a527", "value": "T12E32B07125F14C333A706944B3772BA6ABB6D95385E3318C35DE2E266F86F02B1AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203821, "uuid": "d5bb183f-337a-4ac5-b083-c86a8cd8cb75", "value": "96:cRuKB6es5FUJRxG22lQxfafW5SKSOSCgHSajmYmFZ6xz6fN6f/U0:cRuu6ernThW/L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772203821, "uuid": "538ef402-43e1-4e32-a0eb-1828f041d927", "value": 11863, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203821, "uuid": "bea9fc39-ffef-4bdb-a05b-3a562c8f0840", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cde37d20-13eb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772203891, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203891, "uuid": "07aba6a7-0acb-45b5-b464-a200928ec500", "comment": "Malware payload", "value": "bc9e8a8736825b8805f7a494c7a14f86", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203891, "uuid": "d270213e-0faa-4021-b1b0-1e94a6084835", "comment": "Malware payload", "value": "6edd72592c734ee3d7e7f04069e86e2625f6ba4b727d9bcb99969220b3571dfd", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203891, "uuid": "849da3ae-3edd-44ed-9995-5c6369edd48f", "value": "T1F472DF9CFAFFA644469A093CBE630D1C11688C039E9432039EB729F95B2D0E94D5A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203891, "uuid": "92db60a5-24d6-41bf-b562-68c9d44bf8e0", "value": "384:mvOzhOd+oKj4b05Kttc+l3K15K9JEO2Z40dCX0TiGtUuTAvKkoZr9fYdI9+9f62C:mvLEo05K3rl3Wec40MkGGHAykoMC9+9q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772203891, "uuid": "722b7324-e96f-4d19-941e-22654479abca", "value": 16640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203891, "uuid": "cfcfa922-8e34-431a-bf59-a2cb7a1b7100", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da5149c6-13eb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772203912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203912, "uuid": "7f2af537-4bbf-4e4e-b553-e51f66280db9", "comment": "Malware payload", "value": "dba7ca0e96d4084345cd7391d94ff95c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203912, "uuid": "6c4d3305-a9ed-4a9d-9f03-4b035cdfcd4b", "comment": "Malware payload", "value": "176f26971afe92683e062bd1c19706048c4c9c072d0045421892bd927e683bce", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203912, "uuid": "58becc65-892c-4b8e-b767-6071a97fa6d1", "value": "T1E591B5B435F14C732E645580F3772BA6ABB7D84349E3318C35DE2E296F86B02A5AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203912, "uuid": "20f6d4e9-93f0-4f6f-bbb5-6ed2ad4e5a4f", "value": "48:cnRu9+19nB6g3ijlwnmQpklwn80pklwni8pklwnEoC5pklwn+i+1l3MT+1l3idTr:cRu6B67sdfpZC1CbTbhblPWF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772203912, "uuid": "3f8c6809-a30c-4f65-b0ad-faf1e6fa2d9f", "value": 4280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203912, "uuid": "8d901ac1-b667-45c7-8815-04af8f0046e7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffd289c5-13eb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772203975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203975, "uuid": "6d6d7c1e-4558-4e9e-9d03-49dbd8268e8d", "comment": "Malware payload", "value": "2e584d857b5d0218860f86359b6f9004", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203975, "uuid": "5a206eb3-33d3-4d50-8087-708894c738b7", "comment": "Malware payload", "value": "2c5d60be38c7e78f88868c1c95c6cf6660f9406ec49f4f503bf00810a24d0682", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203975, "uuid": "e4c0ee8d-490f-4987-a6bc-b4348599b2bd", "value": "T15FF59EB16213FEEB962B0C6CD45439101C9998A7571281E87E8C17DEE19FA18DEFDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203975, "uuid": "3b33162f-082f-45c4-ada3-1f575906283d", "value": "49152:8UixbItdTrJoFVPMvXGB+aWJUOndPGxgD:7iBI/JoFdMPGs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772203975, "uuid": "d91c135e-a46a-41a2-8a3f-fddc5293b43a", "value": 3489277, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203975, "uuid": "8b645492-abaa-4ce7-a375-56d4de4fda49", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e8c9abd-13ec-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772204053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204053, "uuid": "f3bfc963-ebb3-41d8-ac4d-674e7706e4cb", "comment": "Malware payload", "value": "8af7a12b5a730ace01e68e5a007966f6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204053, "uuid": "1ec79b7f-8b55-42c4-83c7-518d3505bdcd", "comment": "Malware payload", "value": "f6bbbeec6cb3f490d6a8617dcd5efce5578c6ad83c8999aea44ef054552f27aa", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204053, "uuid": "b91c6d52-9d7f-4bc8-90b3-685280269ad0", "value": "T10622387B21F08B3297D021C8A36716615F72E60B456714B8F4BE1A3A9F5DA0370EBF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204053, "uuid": "9d8602c9-f0d7-40ab-bbd7-636301eebac8", "value": "96:cCuO7sht+O+v1fsn+h4+tIicqbA/GsGFnI78ORtgjo5C4wEJgEFElxO+:cCuOC4hvZ5mzjG5fd+6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772204053, "uuid": "91535ab2-9946-4bc7-81d8-81d2c0207213", "value": 10777, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204053, "uuid": "86849d6b-5a53-469b-99d1-ec9531fe3909", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c49428f5-13ec-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772204305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204305, "uuid": "65f3d560-60c6-4aa4-a99d-f155e42318ba", "comment": "Malware payload", "value": "9fd2265f9e7c478056d80382f4057981", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204305, "uuid": "79d1481c-7321-48ee-9f41-1c3808cb43b3", "comment": "Malware payload", "value": "169f02bdc037e014dd51cb3bda3dcc7fe29e929d566bcac8ee1ba439a7c3b35b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204305, "uuid": "0f6035b5-f16b-48af-9f9d-b2cc14acaab6", "value": "T169A27E7621F04A33AA9055C4B3772BA14F72D65784A321B8B4FE1B359F59B0370FBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204305, "uuid": "f5d23340-6a4c-436c-8cd3-9ca648b8af4d", "value": "192:cCu2g6p4hvZ5m5FoKNpivFDFCrxIT+10DUwoKmjLaeOWO+8TRi/:Bbp4hvZ5m5FoKNpivFDQrxIT+10DUN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772204305, "uuid": "85fd322d-fb84-45e0-af77-ebee32027cdf", "value": 21422, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204305, "uuid": "8fa0e894-5020-4b80-b412-24e1df17e4a9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4275278-13ec-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772204331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204331, "uuid": "72e8d902-9b98-41a9-9d4d-757d1d6c36ad", "comment": "Malware payload (Mirai)", "value": "16322cdf78a0e33827cdaf96f5e2bd69", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204331, "uuid": "0e232616-cc26-4458-9965-a78ed11991a5", "comment": "Malware payload (Mirai)", "value": "d6d5dd4d717ae9b2812b24267247e4b6170353114c90f70e985f4c8cf8104785", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204331, "uuid": "d9b1a667-4e2f-42cd-8aef-801d9abc95ca", "value": "T16E343B45EA418A13C4D117BAF5AF418A3332A7A5D3DF730699246FB43B877AF0D636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204331, "uuid": "0831d3aa-6cef-43c7-add8-f707913854c0", "value": "6144:Ego/jNuTqzHzakeqacEp1d4n1trmbf9ihM/9+AU:EDhK2HzakeqacE3W100G/4J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772204331, "uuid": "89744fe4-cd3a-407d-9418-bf9f552c40bb", "value": 230976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204331, "uuid": "65aa00f2-ed4e-4aba-85a7-ad9a609a6495", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9a3d82c-13ec-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772204394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204394, "uuid": "11962921-7a55-460f-862a-01e2c039a489", "comment": "Malware payload", "value": "cb3376b896ddb0cbde792d51682dec96", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204394, "uuid": "a23944df-bc4f-4ab4-adc2-3524a1503111", "comment": "Malware payload", "value": "f15f864bfd637a9577813fa24e7a77b64a7a098bad8f020f09f7dc067305dbd4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204394, "uuid": "79698d25-72cc-4487-8980-1772fc097923", "value": "T10E82AC3621F08B339B9055C4B3772BA54F769617456720B8F4FE2A259F5AB03B0EB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204394, "uuid": "0e416a58-c360-40d0-9dba-9cd39c8fdb82", "value": "192:cCuA6p4hvZ5m5FG4j4HKNphvn/TONVLxo8vhM3xL+B:Mp4hvZ5m5FGGoKNphvn/TONVLxoE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772204394, "uuid": "ef33f7ff-7a3a-4f05-bace-275685139d83", "value": 18072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204394, "uuid": "894e6916-fb50-4ed0-89b1-ef1f5d9112df", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14f8705d-13ed-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772204440, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204440, "uuid": "4147c3de-5349-4602-b922-9ebd7d39efa7", "comment": "Malware payload (Mirai)", "value": "26aa1e2533510a3afefe81f92354d076", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204440, "uuid": "a194710b-4aa8-40fc-91f4-a512f18c2652", "comment": "Malware payload (Mirai)", "value": "6822b1588ecf119ca8e8dc868812c371aa37c61417f522bc9f064450c7f7b20c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204440, "uuid": "9e86b3a7-1d8f-46a1-bf3b-f0236dcd8764", "value": "T1C8F3C50E6E198F7CF79987344BB79E32965833872AE1C582E16CD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204440, "uuid": "501a1bac-856e-4398-8674-700004a86576", "value": "3072:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/Q4vkTTzTT4BFZDiwZ:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772204440, "uuid": "2288e6dd-36cd-4ed9-b206-d26d25c1149a", "value": 171724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204440, "uuid": "8bb62585-9c54-488e-9d64-6c2cb73ef4ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ae7e8e0-13ee-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772205067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772205067, "uuid": "489fe1ff-3dc2-4370-b7b5-4ffc2ae30323", "comment": "Malware payload (Vidar)", "value": "c3386900ff75beb655f599b7ee2f3037", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772205067, "uuid": "88f0e86d-3d39-46b0-b1e1-f8e2b6beba11", "comment": "Malware payload (Vidar)", "value": "ebf147af0097ac710001e7088fe641e78ccb2aa691abf543a1fb5bad97a79887", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772205067, "uuid": "f7ea7645-85ad-4c39-a9db-4fecd1803710", "value": "T188D57C17ACA148E5C4AE93359CB222827B71BC090B3263D71F907A752F737D85D7AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772205067, "uuid": "47b4c870-c54e-4392-b2e4-701ef7f6ee7b", "value": "ebc247a77b4d4a804b261f97a1fd075c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772205067, "uuid": "92f1dee5-2871-4760-b20f-123cdf89467e", "value": "49152:s5O9pu0mfpgK0f+Uda7BEMG3lvcYNOty:s5ndepRF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772205067, "uuid": "3f6ee385-32dd-4117-9eeb-21be51724431", "value": 2781696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772205067, "uuid": "b77a57df-4143-4d23-9872-a968aaa38630", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2279825f-13f0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772205751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772205751, "uuid": "94a038f7-25ec-408a-9915-398d68db577d", "comment": "Malware payload (Mirai)", "value": "28e9fb19929dd03046e1b139a4649be9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772205751, "uuid": "8a7b4be7-2174-439a-9131-b4d6aaf3aaa0", "comment": "Malware payload (Mirai)", "value": "2e01be1aef977c22fb0f1a88d6ca90a1d7e6707bc5067deba0d7b0fc651b6841", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772205751, "uuid": "1b6b5139-b7c8-4524-9173-c1777f777320", "value": "T163E31A45B8405B23C6D622BBFB5E42CD372A17E8D3EF720399216F21378695B0D3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772205751, "uuid": "4a850d12-0d64-403b-9da2-fec13649b4eb", "value": "1536:e451+mp2YK6lmoTu9mbMAF3vWMf338uApPm4VKpraTWzqsN/OVCOk8q2lEWKr+g+:e451NtyEFOwn8ub4mG2qsN2zsWMBMLz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772205751, "uuid": "b8f4d440-3a29-4c5d-aa3d-08301e7be509", "value": 150304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772205751, "uuid": "ad6b2042-5a99-4f30-84eb-d5332e70844c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdfb6c39-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772207730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207730, "uuid": "8f5f7bab-10ca-4c5b-974e-e50ab1caf5ee", "comment": "Malware payload", "value": "94f215392bb53b678559a358b5110922", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207730, "uuid": "256bcea3-26c1-4a29-935a-0a925aaf499d", "comment": "Malware payload", "value": "3647a1987192f0f529d63c433ecde04dc74d10d98e81a000eb831e8c02ce37db", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207730, "uuid": "0923e33c-d2b9-4573-a82b-fd89edf512f3", "value": "T12D3733217A99C635D17D0072A869ABFE427CAE150F2145CFB3DCBB584F306D227362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207730, "uuid": "ef47f1b8-56f3-4267-8721-9e267631cfa5", "value": "393216:tuqJ2i4eQObGUDkozmUttmljjOnLCaiKk3MRh9MYI+hQW7cwftlgDA4BZikRwtgu:gQOObGUDkozZTC/yLXikFjxgDHB9RwtT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772207730, "uuid": "4bdf4516-996c-425d-abc5-de7701a9d9f2", "value": 24535040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207730, "uuid": "6b4c0e9d-e243-4b48-bf8c-db8fd67b403d", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfdff495-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload (GoToResolve)", "timestamp": 1772207733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207733, "uuid": "26550351-5d02-4065-b44c-d32bce606bb9", "comment": "Malware payload (GoToResolve)", "value": "b8a4b883def07ed1899ec7ddf0afec25", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207733, "uuid": "37d69f0f-1c49-4fba-9caa-c9a1a6be9b79", "comment": "Malware payload (GoToResolve)", "value": "dc972b649df9362fc603699f32ddef1147c6e7f969716ef9f7921714ac102e39", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207733, "uuid": "521a1bdd-e610-43a8-9382-df80db4db0a9", "value": "T16F3733217A99C635D17D0072A869ABFE427CAE150F2145CFB3DCBB584F306D227362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207733, "uuid": "ea949ceb-dfd9-4378-90a8-3e03e791bd8b", "value": "393216:tuqJ2i4eQObGUDkozmUttmljjOnLCaiKk3MRh9MYI+hQW7cwftlgDA4BZikRwtgu:gQOObGUDkozZTC/yLXikFjxgDHB9RwtT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772207733, "uuid": "ba164397-af46-4cf9-96e8-ae1952235d16", "value": 24535040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207733, "uuid": "35b8ffad-f01a-48bb-8fb7-c0581c2bb121", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c24bb1e8-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload (GoToResolve)", "timestamp": 1772207737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207737, "uuid": "ecdfc48d-3a6b-4c39-8a8c-c1af2b0fbcc9", "comment": "Malware payload (GoToResolve)", "value": "26710415966e3deb208f3a9c087bfb1f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207737, "uuid": "21143b8f-41b4-4dfe-a113-e8bb91bff727", "comment": "Malware payload (GoToResolve)", "value": "e13a8bf2d66774042a0d0ca1ada2b9951b52fbd833a9844979edb633e2b0314f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207737, "uuid": "a000b67f-5db6-454b-b2f4-82b76823a730", "value": "T1D83733217A99C635D17D0072A869ABFE427CAE150F2145CFB3DCBB584F306D227362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207737, "uuid": "e9b9e08f-5b2e-4ef0-b2ab-f7a74ac7a77c", "value": "393216:tuqJ2i4eQObGUDkozmUttmljjOnLCaiKk3MRh9MYI+hQW7cwftlgDA4BZikRwtgu:gQOObGUDkozZTC/yLXikFjxgDHB9RwtT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772207737, "uuid": "001ecd98-a84f-4384-8485-0832699af116", "value": 24535040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207737, "uuid": "dd9f2243-79e6-4388-9fae-4a7d35dd0a86", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3ac63d2-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload (GoToResolve)", "timestamp": 1772207740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207740, "uuid": "fe6f6a61-baa3-450b-8fd5-089049664074", "comment": "Malware payload (GoToResolve)", "value": "69df4e7a5f745318c650c38c98341343", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207740, "uuid": "4bbc1e56-8ccc-4354-a526-797975e61a19", "comment": "Malware payload (GoToResolve)", "value": "e8eed1f14fdb46bb0fa0a7f75b24bd7917264203129f6850f6faeb446d46b53b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207740, "uuid": "509aae0a-393c-4674-b40b-6936fa8a6046", "value": "T1323733173988C571C6AE01B25468AB7E967C9D210F7105EBF7EC7E4D2B303D36A326", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207740, "uuid": "b0239d8c-1bda-40f9-a303-b8a56d72becc", "value": "393216:OuH6t/ADslrnxHHiACqwWFgvUX0TE5HkCshd2t1Q7tDjy1bpJs8zoajmG4cKhuEf:tH6ZGsBxFCQEUX35dsAtO7t419mz+6qM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772207740, "uuid": "290caf74-b61d-4a9f-907e-ee9c848cb2e6", "value": 24526848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207740, "uuid": "23ba19fa-ada9-4007-8c2a-7615f6932f2f", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c479d7b0-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload (GoToResolve)", "timestamp": 1772207741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207741, "uuid": "ba7e912d-95b2-4f73-b8da-d6c09ea89ea4", "comment": "Malware payload (GoToResolve)", "value": "39f561076859c79b0210007df8605b93", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207741, "uuid": "7d535198-45a2-4639-bbad-e7bef2975f80", "comment": "Malware payload (GoToResolve)", "value": "e1849e82dc6ab6a8f3cf264bc426681cc252b940ee8d7d7e8f4f8dad971f84d8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207741, "uuid": "b7218e1d-adaa-46be-9b9f-22ac40726c01", "value": "T12A3733217A99C635D17D0072A869ABFE427CAE150F2145CFB3DCBB584F306D227362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207741, "uuid": "64bf6b46-0f41-4833-98cb-420a7c222ae4", "value": "393216:tuqJ2i4eQObGUDkozmUttmljjOnLCaiKk3MRh9MYI+hQW7cwftlgDA4BZikRwtgu:gQOObGUDkozZTC/yLXikFjxgDHB9RwtT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772207741, "uuid": "d32a4ee9-f25e-4dc8-95f4-ba7a6aad20d2", "value": 24535040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207741, "uuid": "0ef26fc2-6566-49b9-a9d8-24fe54c99cea", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4b20575-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772207741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207741, "uuid": "f3ad555e-cf35-47d3-9034-0c7de1af4763", "comment": "Malware payload", "value": "18b1362db52e4bcfceef7649aca372dc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207741, "uuid": "a088d4f8-00af-41fa-872e-628e2bfe5ef0", "comment": "Malware payload", "value": "f65fd4b0ced652f8be41c194f10f507b127d5eb0a4ec04ae455a93c225929c72", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207741, "uuid": "a7c6d402-1511-498f-81af-50620dfecdf3", "value": "T1193733207649C171F53E10B289286BBF427D6D320F6580DBB3DCFE9A5B312C16B36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207741, "uuid": "ed5c40d2-d595-44c1-83e7-ead2d49921ac", "value": "393216:ru0G/h3+M0v1UuQHRTRGH6JHfTF7UY+/kqFj4eFSmJlVvKneUdPlZQnl2H7gOnhI:S0GF+Mm1UuQ3H/T1uThFJll+eUdEnwHo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772207741, "uuid": "d0e59f36-897a-40a7-b3db-dc7a39be2ef8", "value": 24530944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207741, "uuid": "c65688be-8828-49c9-b08c-42b1edd79c04", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be4ff28f-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772207742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207742, "uuid": "e9221832-713b-483a-9959-93df11b617c6", "comment": "Malware payload", "value": "74d82b42b72924ce7fd8b9cb32fffa39", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207742, "uuid": "a9ef6bbf-dbfe-4724-a753-8c155f39a492", "comment": "Malware payload", "value": "a87d9091e26c03a31bc7e6cff7502a8602d795c60f49466c4bd808acb42e905c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207742, "uuid": "58d36a53-f592-472c-9889-321707d85007", "value": "T1253733173988C571C6AE01B25468AB7E967C9D210F7105EBF7EC7E4D2B303D36A326", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207742, "uuid": "d9235585-4620-462d-b45b-304a1b7fa8ab", "value": "393216:OuH6t/ADslrnxHHiACqwWFgvUX0TE5HkCshd2t1Q7tDjy1bpJs8zoajmG4cKhuEf:tH6ZGsBxFCQEUX35dsAtO7t419mz+6qM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772207742, "uuid": "6f064e4e-0c40-4582-976c-9085ecb4bab3", "value": 24526848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207742, "uuid": "7bb64eb0-be69-4500-938c-c519820a98a0", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7087127-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload (GoToResolve)", "timestamp": 1772207745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207745, "uuid": "d980ed0f-ec41-48c1-a75e-e080ed21a09b", "comment": "Malware payload (GoToResolve)", "value": "b0646d5521b84139d1aff3b59e1b3263", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207745, "uuid": "44c656a9-c9ab-45b3-92a0-49e8cfbb25d8", "comment": "Malware payload (GoToResolve)", "value": "0a0c51170da4483e4593f0290c17826907b91998ada8900270bed20fd0b85e09", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207745, "uuid": "38bed5fb-4c14-442c-bd3b-eb41b16112fa", "value": "T15C3733173988C571C6AE01B25468AB7E967C9D210F7105EBF7EC7E4D2B303D36A326", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207745, "uuid": "5628f908-d144-47e7-bcce-d34de4111e04", "value": "393216:OuH6t/ADslrnxHHiACqwWFgvUX0TE5HkCshd2t1Q7tDjy1bpJs8zoajmG4cKhuEf:tH6ZGsBxFCQEUX35dsAtO7t419mz+6qM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772207745, "uuid": "238c9229-d581-4f9a-bfaa-8b7605d0453b", "value": 24526848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207745, "uuid": "28b13889-b364-4656-84b6-cea236ce67ba", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c81c9502-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload (GoToResolve)", "timestamp": 1772207747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207747, "uuid": "7cd0231a-788a-42a7-9fb4-ce1d5b7349b6", "comment": "Malware payload (GoToResolve)", "value": "1d27eeba4e06a175f5292ade1c00cba5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207747, "uuid": "50cccc6b-8d9c-4998-ad85-5ed72dee34ad", "comment": "Malware payload (GoToResolve)", "value": "2c223853deec24258e623a88c9fb3995e3cc6022683b1495477ee533cb3a5ff2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207747, "uuid": "eebeec80-addb-49a8-abf1-e6a190d5741b", "value": "T1F43733217A99C635D17D0072A869ABFE427CAE150F2145CFB3DCBB584F306D227362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207747, "uuid": "c668d10c-9e14-4802-be97-fe597864754b", "value": "393216:tuqJ2i4eQObGUDkozmUttmljjOnLCaiKk3MRh9MYI+hQW7cwftlgDA4BZikRwtgu:gQOObGUDkozZTC/yLXikFjxgDHB9RwtT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772207747, "uuid": "4887aee7-1acd-47d1-b35f-aa109fbe0c0e", "value": 24535040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207747, "uuid": "eec6d620-e718-4242-8583-0d58a9ab044c", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c847c724-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772207747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207747, "uuid": "db3268a9-a021-45a3-8658-4db8b85ee468", "comment": "Malware payload", "value": "22c217183d59ac9619f2c33dfcb90476", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207747, "uuid": "1761ad63-4902-4de9-89c5-aae6c3268afd", "comment": "Malware payload", "value": "5b9313dc82b57882babe0f0ef728af239a8f4d90ef07f9c2227b966136fcd7a4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207747, "uuid": "436bfc44-ed74-4bd2-a3d9-3d2edc447444", "value": "T17C3733217A99C635D17D0072A869ABFE427CAE150F2145CFB3DCBB584F306D227362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207747, "uuid": "5c46ca7d-9a9a-4dfe-bb85-f788589a80a3", "value": "393216:tuqJ2i4eQObGUDkozmUttmljjOnLCaiKk3MRh9MYI+hQW7cwftlgDA4BZikRwtgu:gQOObGUDkozZTC/yLXikFjxgDHB9RwtT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772207747, "uuid": "29f96081-b35b-4a6c-82f9-0216948fe43b", "value": 24535040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207747, "uuid": "9f36759b-f6e6-439b-a665-938f27bc75e9", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c968f723-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772207749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207749, "uuid": "581ebc66-a0a3-4ed1-9416-d6acc5fa3301", "comment": "Malware payload", "value": "e25d78c4c1e94a47f2d0a7a017fe761c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207749, "uuid": "67e9e33a-c703-4bcc-ad4f-0bf3b0ceb2a5", "comment": "Malware payload", "value": "759bbbe6fb5b5ce5d4cb0278e89d708c35b01654001e07c6d21d35c007f143e3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207749, "uuid": "7bf4b3be-d9e4-4592-9373-9a5c200b9898", "value": "T1ED3733207649C171F53E10B289286BBF427D6D320F6580DBB3DCFE9A5B312C16B36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207749, "uuid": "93d9768b-e2bf-49cb-b25a-af7caba86ae7", "value": "393216:ru0G/h3+M0v1UuQHRTRGH6JHfTF7UY+/kqFj4eFSmJlVvKneUdPlZQnl2H7gOnhI:S0GF+Mm1UuQ3H/T1uThFJll+eUdEnwHo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772207749, "uuid": "a33eae52-93f3-44ec-9d62-fb4fae138553", "value": 24530944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207749, "uuid": "6a28c689-6b29-4f16-9017-3df599b496b0", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cef0624d-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772207759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207759, "uuid": "56d9849c-cf7f-46cc-a041-2b52acdbf42a", "comment": "Malware payload", "value": "5661cf54dd991527ea4399155fe06872", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207759, "uuid": "33e20c91-6197-4f49-b5bb-32c2686d54b1", "comment": "Malware payload", "value": "73813e7ab280691da1ba021e45081f7150da8e92a609c8ea668695df21a08697", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207759, "uuid": "7169903a-a74a-4274-b6cc-fe3dae80536f", "value": "T1093733217A99C635D17D0072A869ABFE427CAE150F2145CFB3DCBB584F306D227362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207759, "uuid": "c8b5228f-c63c-445f-a10f-78e8b9475252", "value": "393216:tuqJ2i4eQObGUDkozmUttmljjOnLCaiKk3MRh9MYI+hQW7cwftlgDA4BZikRwtgu:gQOObGUDkozZTC/yLXikFjxgDHB9RwtT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772207759, "uuid": "9e7f653b-1f38-44f6-9baf-c0a0644eee34", "value": 24535040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207759, "uuid": "362c100c-c054-4939-a42e-8dcade55b945", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16a71520-13f5-11f1-8369-82aee05be84a", "comment": "Malware payload (GoToResolve)", "timestamp": 1772207879, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207879, "uuid": "3eca0c9d-016a-4bdd-aba3-8f2fd3d45422", "comment": "Malware payload (GoToResolve)", "value": "24f01989bb4610c083f89cfc4ac4bd80", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207879, "uuid": "513decaa-30ec-4126-800e-aa8710d06a0d", "comment": "Malware payload (GoToResolve)", "value": "2e863949ec50b1bdef0eacbcacb8a8adddcf1b02b74c2f3f5e221bdd9b6a075a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207879, "uuid": "5dd4b54f-eaf0-43be-8932-6cd5858e06ad", "value": "T1C73733217A99C635D17D0072A869ABFE427CAE150F2145CFB3DCBB584F306D227362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207879, "uuid": "ee419fdf-82ab-4ee6-809f-7bfdc2df953f", "value": "393216:tuqJ2i4eQObGUDkozmUttmljjOnLCaiKk3MRh9MYI+hQW7cwftlgDA4BZikRwtgu:gQOObGUDkozZTC/yLXikFjxgDHB9RwtT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772207879, "uuid": "cf56b18f-738f-425e-94f3-010df14cd9d0", "value": 24535040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207879, "uuid": "d13f26a9-563b-4890-9769-29f5ab58dc0a", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40f44256-13f6-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772208379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208379, "uuid": "b2cdfe4a-d4aa-47c7-9dc3-abeef1754b6c", "comment": "Malware payload", "value": "5239d6867d7e09a0d4236f0aab95193f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208379, "uuid": "8d7bbc51-526b-4a56-ad48-493e790d6ff5", "comment": "Malware payload", "value": "28bfb5ad030de1cb0be842de702da578869ddf6bccdd32b7f6a991e65025587d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208379, "uuid": "287ba51f-8f90-4f4d-bbc8-5dc96da99720", "value": "T19A873329F39599FECE33D0FCC0854487EA96B9E54385412717F085EA4E206E58A2FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208379, "uuid": "a5e8c32e-4e99-434b-a187-461c9a6f9be3", "value": "da7539752d4292fc084c7d813366cc8b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208379, "uuid": "48bb509d-2e8d-4186-9f7e-fe148bcfbf52", "value": "786432:/rKU6DT0ucbTbMv22zAeV/X+0tdshTc3XyPteDeCOdeuKF1bV:/uRf+nAu2FuQd73XyFeDMnKTV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772208379, "uuid": "4a60efd1-a7f7-415b-a576-32c8f3fc1204", "value": 38833672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208379, "uuid": "2d68a30f-81db-4f57-9776-04a402edde53", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16700dde-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772208672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208672, "uuid": "be2b8e01-edf4-49ce-b96d-91d9fe203afa", "comment": "Malware payload", "value": "e7acf29a52dd9c0f04cf2cb5f463bdf5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208672, "uuid": "a940d6b2-cd6d-420c-a2db-98b613ba70f7", "comment": "Malware payload", "value": "4952024944397f022d24740ddaa55e415c88ff8c67edf990df9d0583b4809a6c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208672, "uuid": "4bdf2f41-6602-4480-8e32-0b449c4d3a92", "value": "0D23029223A53F72D52148F8D7BCEF8A614A7E54EFE6181FBC113A94B47135C28C981E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208672, "uuid": "c5f38eaa-8415-475d-a908-9a96011ee2b7", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1XZ:yYI0ARqw1qAEW67UIWi7M8gmfmJZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772208672, "uuid": "40328aeb-cbaa-42b9-9178-f47295f1bb71", "value": 46336, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25849bd0-12d4-11f1-8369-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1772208910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "aff0f079-083c-4ccf-bfc9-7e317879399b", "comment": "Malware payload (RemcosRAT)", "value": "231e7b516429326b9084b1772ef77d98", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "c6ec1c27-4dc4-4dec-a737-e24d49d0d66b", "comment": "Malware payload (RemcosRAT)", "value": "1bd50faa3a761deff7f9b94efb42cac9ee9b074e5296ec721a089f34af9e972a", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "2e7739f6-9572-462d-80b1-2ddd2a687580", "value": "T1DF5501642796DD06C36D433158E5F17897B59E97B120C20ABEEE3D97BB2EF110A823", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "e4dd8213-e8a5-450f-b662-0658e6ad6099", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "da2935a6-7f61-4cc7-9e2a-1edb29e51969", "value": "24576:CKSrMii7OCuCJZFqFJChgncP7g17XAmYYUWHSkyAN1xI5aO:CK2MiRCvZFq7nc817XAfY5zNsU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772208910, "uuid": "38c4ee73-5b2d-41e9-a235-c0365094865c", "value": 1360896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "1bc40a30-a3a8-4a88-9586-332100b67a86", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "406d2a83-1349-11f1-8369-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1772208910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "18a87529-800c-4032-bd05-4be5b353ba4f", "comment": "Malware payload (njrat)", "value": "3ad01ec1cb405242ad51015fb2a03a6f", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "9ee94daf-61f8-478c-9dc8-0928cd4e7d17", "comment": "Malware payload (njrat)", "value": "3d274658a5e335879fd6b3529183941eb75b882b4980383229491132b454dbfe", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "7bda6367-8a18-4be2-acd6-098037579d90", "value": "T19C05024C1758D803CAB92B7A59B1F27807BD6EEAB410D31B4FECACDB7962B5118083", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "577acd3e-1227-4b1f-8311-ce449f872d9a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "37951446-1ce0-4bf5-8458-b560634697f9", "value": "24576:SI5aO/QBOlS2B4x2BYMZgVyjSG1Uj0HTifC:DUAS2B+6/ZgVyjSGij0zkC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772208910, "uuid": "081fec58-33f8-453e-8ccf-198e56018d6c", "value": 865288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "c6a711db-c94a-4386-8187-a7270daac175", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d15beb4-13f7-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772208910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "53d381ae-9e2c-41b1-9288-7d0361a32914", "comment": "Malware payload", "value": "11b1655daeadae57c177eedeb6105c99", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "24013dbc-a357-4e7a-95e0-b6d2207a6dce", "comment": "Malware payload", "value": "901a125823a1ebb03d9b67a3f44c3722af6b6629739d3bf7eb7b46bcf2337aab", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "99ab5de0-38f7-490d-b76e-cd8ffbdcef65", "value": "T15234BF2328C40538F4636271D59C1837B70D71CDA2A7A56B1EECE49E7F7D98B2B122", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "6e5f705f-091d-400b-8c35-97bfb63c83fe", "value": "6144:aPK3yOZuRdX61wmY8e8R7zP/XP+W3WZJ0:aPK3yawUY8eSXXP+WGZJ0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772208910, "uuid": "43816eaa-777f-4610-96cd-620a132e04a4", "value": 244769, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "3bf8e51b-5bc1-4575-a296-5d82fd04a381", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db5b5497-1315-11f1-8369-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1772208910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "58c9eaf1-e6c0-4bf9-b694-e24db1e0381c", "comment": "Malware payload (RemcosRAT)", "value": "0ecf5b200685e740a0270380a506723a", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "0f92885d-8c07-479c-96b8-af62d6fc24d2", "comment": "Malware payload (RemcosRAT)", "value": "ddf18913e974e0d83e4f65d4fb9b20e98974bf87cc414af05184fe20bc0f6e87", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "c1dc0154-bc74-4ac7-ba59-8ab1ddfbfeb4", "value": "T1424512581789C417CAEA53BA29B1F1784B7DAEDBB510C3564FECBCEBBD2171018083", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "6b060127-0afa-40e6-b1ad-926884417c95", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "b354bc24-04d1-4bcd-a77a-63be55656748", "value": "24576:SeI5aO7XTl9kE8EqKd0cerovv7eDd+3p4emyUADnr:aUiXpOu+ovzGd+3paJADnr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772208910, "uuid": "74910259-dafd-4d12-a7b5-b50315a8d7af", "value": 1275400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "18d76525-99c8-4bc3-9073-5d79d0489c6a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d75efc9-13f7-11f1-8369-82aee05be84a", "comment": "Malware payload (PhantomStealer)", "timestamp": 1772208910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "5a8f4e23-7179-4a50-b7cb-ca8b7a9ae39d", "comment": "Malware payload (PhantomStealer)", "value": "62b4563e05a19ae79b05c4c51cbba5a8", "object_relation": "md5", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "0110bedf-d1a6-4d0e-93d3-0d2bf78ce98e", "comment": "Malware payload (PhantomStealer)", "value": "f0210da3603f43d66ac5fd9ce665c9bd544cdb66ec47d30b03b8191a6c1c09dc", "object_relation": "sha256", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "81b57b5f-840e-4e8c-aa06-ad2ea31b0ece", "value": "T1CD75025427A59C1AC77D473659A0F1789774CE9BB111C24ABEDD3EE77B2AF000A823", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "eaab086b-8259-4d00-aeab-6381cb7f197e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "12e08fff-5936-4e1a-a117-847665a3aafc", "value": "24576:97/k9mc44Cjl7wrHZd0wlYe0mmvlUfMwEAonf0pTop/J6emd1N7E/Z6I5aO:9zk9L47aNdffeodonf0pTQ/8ei7qZrU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772208910, "uuid": "4e6370b8-4fd2-41b5-894d-5ad6a9998a1f", "value": 1640960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208910, "uuid": "aa46cd0f-7a76-42f0-8367-4b35bc9364da", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3889d1b-13f7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772209082, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209082, "uuid": "058b6cf3-39d6-4d13-bb4b-aa6d4f7d0a29", "comment": "Malware payload (Mirai)", "value": "7f86faf9fa2944797070ce4a8b6cdac7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209082, "uuid": "04791194-9d1a-49a7-8cba-2432402099ea", "comment": "Malware payload (Mirai)", "value": "7342b921f4fdc22dd9eaba072b3b95e2b124caa4b7af7c969718b773b7d7e994", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209082, "uuid": "31aefd19-96be-4d07-8fe2-928054dc9313", "value": "T1EFF34CD7F801DEBDF80AE73B48170905B530B7E250825B372297797BED3A1991923E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209082, "uuid": "fbcdefdb-07b2-4b96-949b-2e2984afbba6", "value": "3072:CgGw1vMV9AEpaJal62EfwRPRyFIj0f09D+WbgPusfRVxjbijLFy0ED5e:CgGwFMV9AEpaMljfJyFu0f09KWpsf2L7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772209082, "uuid": "f8ef765f-47ae-485c-83fe-c3fe91d0a492", "value": 163936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209082, "uuid": "e74f0840-57dd-4eb5-8413-aba314298660", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08a80035-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772209144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209144, "uuid": "8067c76c-9ef6-44bc-bf9a-cf062c490481", "comment": "Malware payload (Mirai)", "value": "07072d5c62ffa51bd7a945d38cc39c32", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209144, "uuid": "2b8e4110-b882-4b36-b175-64ea35e7d0c3", "comment": "Malware payload (Mirai)", "value": "674b3ee885ff0c6e1091dea19844daa7cd75d3418357ea49705309997954b4f8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209144, "uuid": "e6f8af91-9fed-469f-9f81-311c71462d59", "value": "T1E5A34AC4F743D4F1EC5701B16137FB36AB32E1B5212DE943D3699A33ACA2541DA0AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209144, "uuid": "11dd4936-0f26-4a12-8536-33062d3ed7f4", "value": "3072:hkAFVLsS9EYiWZFsRb5HLHyKXBcu6JL+B:hkAHLs6EL2FsRtOxL+B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772209144, "uuid": "a603e4cb-c97a-4c00-b0ae-369e4a7377e0", "value": 103404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209144, "uuid": "bd36d818-27fb-4fff-bf2a-dde7afcfe146", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80fe85cb-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772209346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209346, "uuid": "10f2a294-08df-443c-8f55-a9ad954e5461", "comment": "Malware payload (Mirai)", "value": "44e285242c9283c84f34c57805ea9113", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209346, "uuid": "50260075-a410-47a2-985d-8c83ec8fa69e", "comment": "Malware payload (Mirai)", "value": "fa6596f9f49becc7d33d43ffebb63ea856bebfd4b9cc0551361bf364f94296fb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209346, "uuid": "30648412-41f5-4465-89fe-de1219ce41e9", "value": "T1C4C36A33D82A6F68D159E030B0718F792F53A59282875FBF59A2C2758483D8DF905B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209346, "uuid": "a047bbac-d27c-47ec-a23a-aaba7738ac3f", "value": "1536:ywxGXM/nvXvjuZ+sDj8WvoxloxtC+7Ks0AEbcpoYIMrTGjZzDkhJvDV4WjHQRr3e:ywxtfvXDsDjphxtb+s2khJp4WLQR7z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772209346, "uuid": "53df6d17-6add-4018-8113-b700e17157a8", "value": 129888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209346, "uuid": "d3b99bea-6977-458a-b37e-8ebeb94e1a8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25ef7a66-c12d-11f0-85ba-82aee05be84a", "comment": "Malware payload", "timestamp": 1772209396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209396, "uuid": "c5150f57-f7ca-40a4-a693-0909d43a9813", "comment": "Malware payload", "value": "e0eac26288befd717745dbffa3cfe1a4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209396, "uuid": "6cbafd77-c163-4ab4-b467-f767c9fc219c", "comment": "Malware payload", "value": "e89e28d724e96c6718fb253db65f77db633bd66de5ffe739662e1d1f37a4c86d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209396, "uuid": "55c8a81d-3ad6-4e61-8f86-da923e9ff523", "value": "T1B516E09AB7585B2FC87B103349EA563222978D178E839B436858361C3D776F80F5DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209396, "uuid": "8854a8ad-8613-4d19-b779-3fcba3da5964", "value": "98304:+ggKi2ozkZ0HJrMfB7ji5dyfLbb9XVd2ofr9HDb:+Ai2ozjYxe2DbxT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772209396, "uuid": "0793147a-11fa-499e-83a1-550af78805f6", "value": 4391368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209396, "uuid": "d2a52e7d-d15d-4d48-aaf7-3baf49ef036f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5c2903f-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772209407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209407, "uuid": "99fbe3b9-a8ad-45a8-a982-a1ab9fd3e04f", "comment": "Malware payload (Mirai)", "value": "9af261ec97f5c22e3f717b8d5b200154", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209407, "uuid": "87d8a215-6367-4fc7-a173-08d99f36b6f2", "comment": "Malware payload (Mirai)", "value": "2dc7e93530172624227487f380cbb00841c45c609b1e6cc6c6444585f0907cad", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209407, "uuid": "17e42c8b-4b51-4844-896b-2c257bec5fa2", "value": "T1DE14961E6E228F7DF668873447B78E25975C23D627E1D641E2ACC2105F6028E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209407, "uuid": "1077ff7e-8827-4d5d-b2c8-0feddaa410b5", "value": "3072:3c2nXadriWZ+2fLLTwMif6md0gM3eDBilA+OEuoz:s2XgZ/fsMo6eMSBp+OEz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772209407, "uuid": "db3d3e40-79a2-4745-b9d7-055e174dfbb0", "value": 194176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209407, "uuid": "b672cd22-6025-4d14-b4c5-d2f658bf0903", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a95dade5-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload (DattoRMM)", "timestamp": 1772209413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209413, "uuid": "c8195891-c197-49f4-bd3d-0ac733003bbe", "comment": "Malware payload (DattoRMM)", "value": "029946957d7f52892bde378225edb2cd", "object_relation": "md5", "Tag": [ { "name": "DattoRMM", "colour": "#167832", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209413, "uuid": "eec9a599-64b1-40b9-b0eb-975c7695deb7", "comment": "Malware payload (DattoRMM)", "value": "284de2080205f748855a1d1bb499c1d4c7cd4153f25e4f19394b2e5eaf56bbf7", "object_relation": "sha256", "Tag": [ { "name": "DattoRMM", "colour": "#167832", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209413, "uuid": "1a065a43-6697-4698-8683-11e9b4abb125", "value": "T146B63347D9778DF0CA330B3890D21A6B3205980E485BF4C9E509277ADEF35AADD287", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209413, "uuid": "9c5a9ea6-dd72-465c-ad6c-c3c8497509e5", "value": "187b3ae62ff818788b8c779ef7bc3d1c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209413, "uuid": "41de07fa-1adc-4784-83d4-a02022ac2369", "value": "196608:/aZk+w9P+CHD4a+KFwUUUx9Y2NPFOsti7A95rIUsFp29XaIT030Hy0SarlZr8s2M:3ngmzZFw5S9pE7Asjp29qIT0jarlZr84", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772209413, "uuid": "51fb15db-15ae-493e-af92-76c900f1ec0f", "value": 11056040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209413, "uuid": "2a0c6293-76e6-47df-be01-ddbba6c7ba0b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afda4f6a-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772209424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209424, "uuid": "fa851533-b74c-4e01-83e1-8e4868c27a97", "comment": "Malware payload", "value": "82c1ede52d87eb345226ff7667fef282", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209424, "uuid": "9a69140e-ad7b-4799-876a-93e55501e5aa", "comment": "Malware payload", "value": "c44660ea89c20d69e7751d5a19bce83ea0686d02979c2a436d1d3799f36571c9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209424, "uuid": "dbd4ae2d-6d69-4dc7-b4cc-44a5514ed764", "value": "T114F7594262EA05C4F9F7DA358AE65217D673BC166F3081CF325C172A1F736E08976B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209424, "uuid": "e16dc401-4757-48b5-950f-fa28db4bbba2", "value": "772ec87d3452991a9933a3ba0d9963a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209424, "uuid": "2fd5445d-735b-4687-b238-c0340c0aeafe", "value": "393216:Pn1XQgPR2k3m5C507G9ITEc5eAlkLbQurxMWhAsIyNOPS0B4AycWsCYaxFzwW/tL:P1XR7AsxYqt2oRGj5rs3wb8/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772209424, "uuid": "4bdc5bb0-ab85-4ea3-929a-961126578cc2", "value": 71415296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209424, "uuid": "da6a158b-fdcf-4e7b-a11d-fd97db084a7c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "577e0ba3-cb58-11f0-85ba-82aee05be84a", "comment": "Malware payload", "timestamp": 1772209437, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209437, "uuid": "97c4e99f-8c5f-4e72-af84-91f9c02f10d3", "comment": "Malware payload", "value": "44c6892c563114a8ea147edbb898c661", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209437, "uuid": "e0e09bc2-961e-45c6-99c6-cae2b38c97b5", "comment": "Malware payload", "value": "ca475324f39dfa1d8d6b8e5475e5b75181d0c2528b212a1e77bb89b79e2749a2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209437, "uuid": "796b68d5-d7d5-4b43-8efa-fab5a89c7158", "value": "T17846F1C6F7D8A92FC8775072C9BE52B141874C028A839F836D18760C69BB5D46F5AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209437, "uuid": "d2eae36f-2427-4107-9979-0ea264697c3d", "value": "98304:JWPi62oTwrY5KOfsros5OrsbxYfc0D1BWoz5qPvrEZC0vPqmYZnXrfLR/mpClte:8K61KOfyaIbaciAFvrEZpXqmY9XrF/m5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772209437, "uuid": "24e48403-007e-47cf-bee9-f19743933614", "value": 5833071, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209437, "uuid": "db2ce2d3-1c0c-43e5-9d9d-e44a1c11e0cb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20c9e48a-13f9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772209614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209614, "uuid": "29b2a9e8-71b8-495c-968a-e91253d45a60", "comment": "Malware payload (Mirai)", "value": "481e6fd3e1df670ec795737bd900c5a2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209614, "uuid": "19ec44f9-dc83-4077-9e66-d1bd9e7786b1", "comment": "Malware payload (Mirai)", "value": "692002a3025ebdaebdb995169c8f552d2a75027af884ee5c7e00499fdf1416fe", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209614, "uuid": "431beec3-a3a6-476a-b58a-e17410ecc9af", "value": "T14EF31B45F8814B12D5D112BEFE1D128E37231BB8E2DE72129D245F647B8A97F0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209614, "uuid": "af78b78f-78d0-4a8e-8b1d-7e610c705c77", "value": "3072:ZcLaYBU6hhoTXubj7I4XaO7PGJ8VGYvDYbY:ZuaYBpQTXuv7IyaIXGYvDYbY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772209614, "uuid": "885e7202-7c64-4e7d-b820-bc43c208e074", "value": 157596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209614, "uuid": "1b9db80c-5951-401c-836e-9f2d7f6f1679", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88c47109-13f9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772209788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209788, "uuid": "c9d28f46-a1b2-4c28-8115-88e4a64413fe", "comment": "Malware payload (Mirai)", "value": "5f4a43173ed1bc23d3a524a3afd57f0b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209788, "uuid": "e4e3c05e-cb05-4b02-aeed-00c6d69ccfcc", "comment": "Malware payload (Mirai)", "value": "f19a5e21890fd7c9cd91c023419507310c675e6b74d15417d52b805c1368ccc3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209788, "uuid": "12ac1232-ea76-42e2-bb3d-988701de57d9", "value": "T1B2142A46EA404B13C4D627B9F6DF42463333979493E773069528AFB43F8679E4F12A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209788, "uuid": "8fed6b9e-abff-45b6-a982-ce3738ab3240", "value": "6144:2R1aaBqbNragXnDWS24eLlBOIA0rM/RuRw:o1aLbNraInDWS2DFA0A/cW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772209788, "uuid": "ed1dbbd3-ed9e-4082-9798-fdf9de3ed378", "value": 198026, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209788, "uuid": "441aa89e-4a9a-43ab-9081-a359f43e24ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb6021fa-13fa-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772210383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772210383, "uuid": "860711c6-b220-4606-9d31-18bc1baf43aa", "comment": "Malware payload (Mirai)", "value": "eafbb23d47b8e4d81a8107698fc13c84", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772210383, "uuid": "92856ce2-d80a-41a2-9ae1-d7df543b64ee", "comment": "Malware payload (Mirai)", "value": "8e7b7dbbdc2691ba6dc52da311073dd9215e662e32a9be076d180e27d0e10840", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772210383, "uuid": "a9231fd2-b436-481d-95db-9171e45e9990", "value": "T181E33A17B5C194FDC4DAC1744FAEF53BAD36B19D1238B16B2BC8AA221E4DE305E1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772210383, "uuid": "4b8915cd-eacb-456a-81aa-bb4c436981cd", "value": "3072:8qyoG7VMD+5T27M/eu3AC0EFGGXGxgUFCu2g5FY03lpF:8qyoG7VMD+5T27M/p944iPpF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772210383, "uuid": "cd196376-4dd0-451f-bfac-a28b8112da68", "value": 152424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772210383, "uuid": "39372476-83d4-497d-8544-62967167e364", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "683b76fb-13fb-11f1-8369-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1772210593, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772210593, "uuid": "14c67521-ad1e-42a4-994a-314ccdf890f7", "comment": "Malware payload (AsyncRAT)", "value": "9bf19424e1b08ea01b0df2271116e45c", "object_relation": "md5", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772210593, "uuid": "d850ab73-b194-4ee2-bb8a-bfcc50c69b91", "comment": "Malware payload (AsyncRAT)", "value": "9a7153d921414cf235936c00352f7a54ebedd0c131314382099d85acd83b286c", "object_relation": "sha256", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772210593, "uuid": "f0246579-c751-4097-89f6-1b62e2147171", "value": "T17F1612CBC7501EC619F3A2B0E28230E45ED59050DEE3666EACA05DE7C6DB49C4BC74", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772210593, "uuid": "a880522d-01a8-4b13-8af3-f1ca5c7fd1d0", "value": "384:zqXfg0zXb+Q+auPCTAcBzUm3kHFg95c15eIaEuE0k+eMw0I1HALDW7dauZ0V9RH:t0v1qO3+FxpSaHDO+datH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772210593, "uuid": "6205c9e7-04cb-4111-812c-f176afc0c4ef", "value": 4166461, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772210593, "uuid": "ca5cfe5f-a67a-414d-894f-e712b804dd7a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eee60172-13fb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772210819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772210819, "uuid": "3219eecf-d5ce-4279-b89c-84cc843f2cc2", "comment": "Malware payload (Mirai)", "value": "0ba7bf49846ba1f9cfce819c66c05d95", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772210819, "uuid": "291d9642-c159-48ad-b139-6a7dc6503c8a", "comment": "Malware payload (Mirai)", "value": "816ec83efac24d356e9adda3d3f0a7158e4d3c50f95767f4e13aa0e2bd618f93", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772210819, "uuid": "45b81b17-194b-4b5a-928e-df29ce6d38ec", "value": "T15EB339C1BA43D4F5EC1641307177F73B9A32F0791239DA87E7A49E327C92A419D0A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772210819, "uuid": "c58cfdbb-5016-4d16-95f2-b13c765a4725", "value": "3072:PbKW4dCLFaGFBu3/45g1rcV2wxzSr9bMFflN:Pbj4doYGFB0/45gdt9ulN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772210819, "uuid": "3a50f72a-6baf-43fc-9255-0ad2c809e1f6", "value": 107824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772210819, "uuid": "23d9650c-ef47-400d-9d57-b3f3a9d050f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0549aa2f-13fc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772210856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772210856, "uuid": "72015a01-c493-43f4-b2f4-40bddd000a1c", "comment": "Malware payload (Mirai)", "value": "bd0b38996045a19deff993bfdf5e5f5d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772210856, "uuid": "0b3dab29-b31a-46d8-b14f-aa894b84e255", "comment": "Malware payload (Mirai)", "value": "02082001f835e38b674ac75f1a4b2e91c77ddfcddfe2383b6b955736eb94fb05", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772210856, "uuid": "7bc1f35d-f520-4e34-9486-b8e29f2075ef", "value": "T1F293E551BC82562BC6E423BAF6BE668D336577E5C2CF722BC8214B117B8551F0D63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772210856, "uuid": "b0d36709-853e-4875-9c58-366a0dbeb16d", "value": "1536:PWrd+dC++zBz/dPXQL0u4WaJuLaVlW04brj9uYpMNZsOLYMhp:PO+d8zBWLac0yMNZBph", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772210856, "uuid": "cca1842a-89d0-4b8c-9f47-97ba576bebf3", "value": 93804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772210856, "uuid": "b300950d-890b-4b80-b027-0d1c11904a96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab293e4d-13fc-11f1-8369-82aee05be84a", "comment": "Malware payload (Loda)", "timestamp": 1772211134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211134, "uuid": "372dae36-abd5-484d-a59f-c08f73c86f4c", "comment": "Malware payload (Loda)", "value": "4338bb038cba4d05da2e19076eb88631", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false }, { "name": "LodaRAT", "colour": "#9499f9", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211134, "uuid": "0f597bf8-9bba-4bc2-951e-35c89f2f3dfd", "comment": "Malware payload (Loda)", "value": "8ffd4ed3a40ad525ba7d114cf1ed8feb50cb4d6dbc453ed78c809780ea4695ff", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false }, { "name": "LodaRAT", "colour": "#9499f9", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211134, "uuid": "6b8bcf63-2100-4466-9ea6-fdf075992e9d", "value": "T12BF6333099762D791BEC4A7DE45B1FA83DD0EAC78444B9C54988B3F3B2CA704567E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211134, "uuid": "ef367e81-2594-486f-a025-9510e9434c6c", "value": "49152:SLyz5G2bAbI24AUZyV0L8WUTSnkJjqNTNhkSoqq2QLr3l+0pTxmKWs14Wbhs7Eew:o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772211134, "uuid": "d518c474-fd51-47fc-a6b4-ce41b3944e22", "value": 15832334, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211134, "uuid": "2da5eeee-dcc5-4e49-9528-a84894fbeff4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7c0ff1b-13fc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772211236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211236, "uuid": "b54e28ec-61d4-4288-852c-6bb36577544f", "comment": "Malware payload (Mirai)", "value": "1e13b3425b933260d751e6e48e610501", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211236, "uuid": "d20a78c1-ffc6-4f06-b9a7-a81991017faf", "comment": "Malware payload (Mirai)", "value": "492883c85d22334f56c4d41e66d3999bca6180238db5062d0b7e0a85960c8497", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211236, "uuid": "ad7b6c20-4bf4-4a1b-be82-0d9db442898d", "value": "T16DC32902F98184FDC0CAC1340B6FB63AA976F1DD1238B2EB67D4AF123D4AE615E1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211236, "uuid": "5edcc573-7305-4ca8-8b82-ad716254689f", "value": "3072:e483TghM/1weZbcnITO1yosFAIxnJdhgpDb7BgwGoTgzQLAdojgaR/y:eH3TghM/1weZbcnITeyosFAIxnJdhgJO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772211236, "uuid": "90b250a5-307c-42d5-a131-80427f61b3b7", "value": 125472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211236, "uuid": "fa6f81ca-0fc8-4a35-8e34-d3fc1e9f04c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44f1826c-13fe-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772211822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211822, "uuid": "e56a25ad-7da4-4cf4-b307-bf1e089007cd", "comment": "Malware payload (Mirai)", "value": "80e248cfc161104d2cb8aa47a516f2e0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211822, "uuid": "3011c7e1-d014-47c8-93d0-33ea4700778b", "comment": "Malware payload (Mirai)", "value": "e067775f0c324edc8115adfe8cb778d2c540e37757ddfc5377b94ea49c932cb5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211822, "uuid": "49665ee5-c4dc-4f58-8e5e-d4c25ce70f03", "value": "T1DDE33B06731C0907C1A32EB43A3F67E193FFAAC121E4F644255FAB8A9571E361486E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211822, "uuid": "097e46eb-571b-4498-9723-bdce2be919a2", "value": "1536:vUDTFLKg1RtU1IWkPdxfTIrEPXuZGOtu7B74D3vAqjtzzuoeNDqKBNHko9C2:vUzRvWkPdxwE/067x4Eq6Eg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772211822, "uuid": "68923395-16dd-4fe1-88a1-abc35fd6e4d1", "value": 146356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211822, "uuid": "723b5fd5-eb82-4c90-a7cb-6732bff8fcd8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6281d76d-13fe-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772211872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211872, "uuid": "077633b5-9afe-4f4c-8d73-8a5e00e6d7af", "comment": "Malware payload (Mirai)", "value": "41060323b6ece7be8fed3cbf09bf5c5e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211872, "uuid": "4fdafe90-e4f0-43cd-aac2-ce4da3da3594", "comment": "Malware payload (Mirai)", "value": "5307e9f904db8954f0914f2032aa8a49f8a7e42f69cba1a3f507834519f8c6eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211872, "uuid": "9a0fcca5-c737-4034-9111-35a5a03a43a7", "value": "T14DD35C0673180E17D5A349B02A3F1BE083FEE5D121F0BA89691F9B6A8676D371485F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211872, "uuid": "ee252b5c-6b04-4b85-a768-5ab8427ad4e4", "value": "3072:CV0zui1ZhMHJ8A+qrFP7OUK3y0uMg9FkcH:LP1YM857OUKC0uMg3kcH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772211872, "uuid": "896a249f-6b03-4352-86cd-94b0443be5d5", "value": 134336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211872, "uuid": "50c0449a-8117-4dfd-b56e-67e2529a0672", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84b6f1a3-13fe-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772211929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211929, "uuid": "e811f4bf-fad0-475e-b7f8-769591da8165", "comment": "Malware payload (Mirai)", "value": "7fc4c68d6743cd3d5b0b8fe8964086ab", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211929, "uuid": "f35ba2b8-04a3-431d-bb16-7152c1419157", "comment": "Malware payload (Mirai)", "value": "837ad180528c688a9eeb3755a1b292d94bb7bb5cc8743040e651de9f7c486c17", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211929, "uuid": "4249d039-af55-41b1-bbe7-9b87317e2fce", "value": "T13A14E81AAB550FFBDCABDD3706E90B0139CC944722A43B3A7674D528F54B50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211929, "uuid": "cd98c310-01cb-4dc5-8f56-0dab3b12e8a9", "value": "1536:ZApm3TGAbl0qCHcwm7d0aTswUNt8h7cF8aRzEtZvdue2lU1LgXZAqxjE8XNCIwgR:apm3TReqlr0Cn25lTXCKNCmhmCYOCA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772211929, "uuid": "13845e58-ab24-4a29-98ac-ff1731232ca1", "value": 194464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211929, "uuid": "fe5df6e4-36c5-4ac1-8154-22e3411c2490", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1934a4c0-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772211967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211967, "uuid": "7fbbcc47-7a33-4c84-b141-288c83528500", "comment": "Malware payload", "value": "1ff5a92a793b1503e1399bf2434ac5c8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211967, "uuid": "0780db83-ddd0-4c4d-82c0-6a54641f8859", "comment": "Malware payload", "value": "22eb75dfc037517fc0f62570c77379a708a8769fe654bb7c58177ecb17f3c2ee", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211967, "uuid": "601b7dd4-e6e2-4860-8b92-8998b5e87184", "value": "2213028237A53F72D52188F4D7BCEFCA614A7D94AFA9181BAC123698747135C28C981F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211967, "uuid": "83ca2f23-8a95-46ab-ab9d-6e2ce6fad0a0", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsD9:yYI0ARqw1qAEW67UIWi7M8gmf9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772211967, "uuid": "baa49a6f-6337-4085-ada8-ca9e9dacb5a1", "value": 44888, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95253bae-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1772212386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212386, "uuid": "2e1521db-28ea-4124-b9d0-73189dc19a9a", "comment": "Malware payload (Amadey)", "value": "4a297bce61aaa3b15d5bcfc532fa6db4", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212386, "uuid": "4bb37c6c-d0c6-47d6-94c4-b28ff843147b", "comment": "Malware payload (Amadey)", "value": "ab4a92b1b4fd0320e7a13519c8c2b8fa8a828ec56db52864dd70dc48061604b3", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212386, "uuid": "e3cfa198-3c08-4548-a180-33d1ac5d5874", "value": "T11A24226301922667E52298741CD5470875E3DE7FE2A02005D2F776172E1F3EBEFAB2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212386, "uuid": "d6474fd5-b010-486c-9cd5-709480fc7178", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212386, "uuid": "baf03182-dfd4-4f80-b918-a2adc31be67d", "value": "6144:DzpZjyqgdX/w7drhQZXveORMOqHa02FDz4+7cj:Dzf7gdPw7drSF3tq63G+g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212386, "uuid": "cccc9fb4-b3ba-4fff-a9e4-a602d615aa19", "value": 219648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212386, "uuid": "1bd1dd9f-87d5-4ef4-9425-ead33e53cb4d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2d44a3f-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772212516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212516, "uuid": "523b4cd6-00fe-4c8f-809e-2d8cabb776e4", "comment": "Malware payload (Mirai)", "value": "68ba579383d462319091988981340440", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212516, "uuid": "e1972314-e354-44db-8102-f9bc547a8d29", "comment": "Malware payload (Mirai)", "value": "0d1ccf3bd239a8335a403b1ed97d0c2609a27a7ca63db2761cb260990f63be96", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "347e0706-921f-43ff-b1c1-cfd23d9ee176", "value": "T1B903E10707D811CCC9D3B17B9BB5BA4A0464AD4DE7BE66AD4A18A042DEE1BDD362C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "7baf3bab-8c90-45ed-8f89-bc6c2d5e5c59", "value": "768:15zGYSTbRCklMeLnwsA0wYwm8jo2c/WwaNe9dWn84yrOdZOyTCck/2nbcuyD7UHm:3Guklj268jtBFNmdmyraOgCcRnouy8Hm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212516, "uuid": "637142d6-cfa4-46c3-8663-81c65d44e9bb", "value": 39972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "65288d6f-bf53-42ad-bbbd-553536013bc8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2d5aa91-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772212516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212516, "uuid": "f4b496e3-bbfa-4665-a4c3-baa894a4c33f", "comment": "Malware payload (Mirai)", "value": "a69efbf75d19eae1a814fa78f3d93578", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212516, "uuid": "7122bfb7-fcd0-4724-b94b-d63e1c964bfb", "comment": "Malware payload (Mirai)", "value": "83cc2d75ed129fc3bc44540b4bd8dc204b57addf8125d79345870cb7391ba499", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "e12ceb67-78b6-4781-8a6d-55d034070591", "value": "T1E572C022355AA570D0719CB9DD7DC70B7FD809BCC9DA3324261483A4E6832077A78B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "ef9222db-6822-4d70-9258-7ee277b58004", "value": "384:j7Kkx6VmPigOCvXcR1ShThymdGUop5h8X:CkQVrCvXcP8Ts3Uoz6X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212516, "uuid": "a106798b-e650-4b65-8763-27ff486ff072", "value": 16640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "4bf93e89-1f49-4a44-a760-cd10df17735e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2dc1dbd-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772212516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212516, "uuid": "c5494337-2144-4851-a2b7-fbafc53af2b9", "comment": "Malware payload (Mirai)", "value": "dd5f05c731cf1058a1deb53a980e69a6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212516, "uuid": "6d2c0067-d785-409a-b0ae-bb1e3b5c22f9", "comment": "Malware payload (Mirai)", "value": "8d908a5588e9b6c1f940de92801f1f0c5e0ac19c2d1f151c0cc350895f418115", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "6f6bf19a-e0a7-4e94-bebc-89806284eb4b", "value": "T15C5171A6F31649706FB165967DBA4054758893A25ED5AB0BF8FC78FC429DF0820E06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "676d37a6-d158-4bcd-9c70-254e2bc0a49e", "value": "48:iOzL8zLZzL5zLTzLNzLl3EzLIzLZzL4zLjzL1zLpzLSzLIz:iO383Z353T3N3tE3I3Z343j313p3S3Iz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212516, "uuid": "16aa8745-69d6-471c-b175-2053b5855f2b", "value": 2824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "c26a55d0-7aa0-4977-bdd2-33aff46b0173", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2ec647d-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772212516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212516, "uuid": "7c7b2aeb-1daa-4b59-9940-ad2021a6d1a4", "comment": "Malware payload (Mirai)", "value": "4bd6ab28aeb4529c5ec6d14f8d40b5f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212516, "uuid": "82d882f7-9a9f-4b31-a2f1-abd9b7c49b63", "comment": "Malware payload (Mirai)", "value": "8d620f7df9e03f97adac874b1c911c762dbc6e2b246647d0e76ba6d853abee6b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "27f80c36-39cc-4334-be12-804d616b9198", "value": "T1ECF22903127D6517D4E8A63902F39757F2DA7A9CA014871FBE3A0ECBBA613D01F6A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "42d30863-e444-4b12-87f9-fee402be8a68", "value": "768:fyQIH1RjyptP7ehBxnGImJ34TC5tuHajtyBsYPD:fyQIH1RjyptP7e/lG31yBf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212516, "uuid": "b1cb94b6-49d2-4967-ae4f-46dcab7099a0", "value": 34648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "06ded068-b819-4285-b8a7-63dd22cdf79d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2eca9ab-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772212516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212516, "uuid": "4fd36f29-4d9c-49ba-b0df-1849e83c5c90", "comment": "Malware payload (Mirai)", "value": "87eff6cf1ea798628591d932c82b43cd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212516, "uuid": "d2b535b8-c9ca-4cef-9b7d-8ed1fde9427e", "comment": "Malware payload (Mirai)", "value": "f8e5a8b4b35e54573ff8a1bb47f68bb52d4fe8fec5566e3c8b63c61926ac65f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "b32e9ac3-30b7-4183-81e8-e989692eacdf", "value": "T18703F12ACCF487E7F80E00B31E9FF65562B0E42E0924CD527544719F1D81BF97698E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "3a8d4aeb-86b7-4b13-9232-688ddcf55c54", "value": "768:lS7z8GNgU0Vy3oRX1XVyjWSfFDgAu6jDbmbe2GGnbcuyD7UHQRj3:lwz8OcX/SfFDgiX4Jnouy8Hyz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212516, "uuid": "f47ceae2-1f04-4b47-ab1f-86bfd85e3cc4", "value": 39260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "ec626286-2bbb-4bf3-b72c-24869e049bd1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2ed1924-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772212516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212516, "uuid": "35515c4f-ed29-4c79-a27f-d819efc8114a", "comment": "Malware payload (Mirai)", "value": "8051f4d29c0ad38d5c72f63a82573b0f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212516, "uuid": "bfc2a19d-3f00-4ffd-af29-4879a37321cb", "comment": "Malware payload (Mirai)", "value": "207b68228cfa2f053b0933489d2f315e993faddfc02f3152bc84482ac95328a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "88d2b410-d49e-4a1c-9178-37e57523fd8f", "value": "T16633E15C81062869E028547ABBADCFB0AF330A666F17AD0D5A00D64658FE9F478D33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "fbea623a-ea59-4add-bc10-7dcfb90165bf", "value": "768:+e+q02O2A4ESiCfFzRSSBhYCFxl71vwGBT8EKjs8x0CcUH0AUHxCBJgGlzDpbuRG:+V2O2A4ViCfFFqCFP7aG0joUUAUoVJu4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212516, "uuid": "a702d15f-df85-4870-8c17-ed52efb642c1", "value": 52864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212516, "uuid": "e5f20332-dd28-48f6-b374-c0028d231a0c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2ffa95d-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772212517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "051763ca-9490-41d2-9b40-6a67d10152ba", "comment": "Malware payload (Mirai)", "value": "3fa94b0db728d48b1b1b1ce94bc53267", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "56e5b6ad-6c5e-4685-ad49-e3bf4c8d68ee", "comment": "Malware payload (Mirai)", "value": "19c08dd3eaf63191b519d02a409cbdd788d29e28bfaa12403e979a64e8ce723b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212517, "uuid": "a4cc558e-1bc1-4100-968d-560befa326b0", "value": "T160B3ADEFF34B1591C8628BF013C39BDE2E2722129F6B85E73C0E567A18751DB491A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212517, "uuid": "6ebe401f-2774-452e-9509-c52554be833b", "value": "1536:LLOwW5OIMbLQT/vl9NMJJ6m3WXfeoiWR9g//LW9:uw/IMbszd9cJ6c2eoiU9g/q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212517, "uuid": "631cd8d6-62bd-4629-89db-48e849cdb960", "value": 107840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212517, "uuid": "82068d77-b6ce-4626-ac2b-35bb97ac1ff5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2ffaa6d-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772212517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "cc4ec8f6-3301-4aa6-8e31-ff5a6045380a", "comment": "Malware payload (Mirai)", "value": "734a26e3cef6eee0d32c97917c37672b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "e37280d3-ad92-45c3-a601-7dc87778ef9c", "comment": "Malware payload (Mirai)", "value": "ed9a6caad952675001c179795deaeabe1b09fcad8007bf40c4dca55a8f1b181a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212517, "uuid": "110be9e0-b9ff-4b90-aaaa-2eebafb49aad", "value": "T1B6330238F5657C558DAC5820EFA806496C7B1EED5BE6B0B60E0851AC38D500A2FA9F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212517, "uuid": "6864c198-6205-493a-9c81-f224165f9eec", "value": "1536:wSsS+awMidEUps33JMzcWiZc+0dYDx7IzPdeInfqR5L94:kvMidvGnYdyc+028Vjf25L+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212517, "uuid": "eedd5a45-bcc2-434d-8e6b-5a5e17c29e93", "value": 53668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212517, "uuid": "7782548c-64b3-4d33-b472-091e81711c0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3019396-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772212517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "0408fd0e-7b1a-4f56-a4f7-97a0691dfe5f", "comment": "Malware payload (Mirai)", "value": "a9301144cd3c15c64f21a0b5977f79cc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "46b7af58-ca83-4e66-8888-73f4e55e6fb2", "comment": "Malware payload (Mirai)", "value": "6ec0a51a4c201b09742ccc2ed5553224f025312c58aca3933cf12e6d79a0d2cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212517, "uuid": "086ccb6e-3c49-47c9-8238-2e781f838ab9", "value": "T1AEB36B63CC792F98D219D174B1B48FB92B53A92192871FBE5567C3B48403D9CF90A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212517, "uuid": "e2bef3cd-c0e6-4134-b021-8cd635a547eb", "value": "1536:QaX881Y9egayTxxR8CO9pVubTWcb/VBcUpKL6myqcn8h89:QwY9efyTvR8ZpVsTWcLsxLU8u9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212517, "uuid": "ab57da74-d6ee-437b-bc7d-84ab6a4acfdb", "value": 114884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212517, "uuid": "1cb93b96-6b25-4ba0-a997-27f8b1273c79", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e309ea22-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772212517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "408967c2-ab57-4a6e-b52b-14750878437e", "comment": "Malware payload (Mirai)", "value": "6a6bc241cc9ea589d708d3d918a7b9f7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "f159317e-0ee3-45c1-902b-b0d19004e561", "comment": "Malware payload (Mirai)", "value": "7e96fc03c336798dfc6e38e9305d6dc0c5cd4c290e15222a500f3343c98d2793", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212517, "uuid": "e3754aaf-af1b-48fe-b753-44bf73ddd37a", "value": "T1C8E329C7F800DEBDF80AD37648634909B630BB9255921A377317796BEC3A0E54867E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212517, "uuid": "3e7d5776-df5b-4f68-a019-abd6ccfe8778", "value": "3072:R5qm2+EA+yexgvCAabFcqVZjbiLLAnXMjLVgyiq7hggBs:2m2+E9gvC3FcnLQqRgyiwgWs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212517, "uuid": "3e9bc119-5878-48f8-b2a7-6821db3162c0", "value": 150368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212517, "uuid": "c6d87ab9-768a-4cca-bd10-7202b640659a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e30b4066-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772212517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "1327f6be-04ac-4f29-bcc4-0a8e2fd72e55", "comment": "Malware payload (Mirai)", "value": "235cfffa45823774a1821ecaff15e6cc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "15677c27-29c2-45d7-bb3a-961c99a0a114", "comment": "Malware payload (Mirai)", "value": "7a1ae8f00bb1519d27ffee0a507d6b4e720c2e88ca40398697c617cb352308f3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212517, "uuid": "c7c91850-3cfe-4b75-ba4d-2975e6bd36e7", "value": "T163230185B9136C30C422EC75A91F428A12AF4BB4F17637885578464DFE6B52F10BCE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212517, "uuid": "a092d581-52f1-49cf-adfe-4f12caf62633", "value": "768:3LdIP4zIiN/SA3cXIdKbiz41x64h3iTowq6EktlDqTcseCXiLkZ/EeUNkKWNs3U/:7WYPN/5c4del15hSTx/xXMbeKKDkK/zU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212517, "uuid": "ab49fc4f-883a-4465-ae9e-6cebc59f3678", "value": 48380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212517, "uuid": "e9a359a3-c546-4cb9-98fb-f1105422a1b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9f50583-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772212528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212528, "uuid": "7e992c53-a8d9-410c-8a61-8d577e52c749", "comment": "Malware payload (Mirai)", "value": "83f690e3b20cc3c3b8b903c01fee2cc2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212528, "uuid": "02d9080e-433a-4fd9-bbe6-023e7170335b", "comment": "Malware payload (Mirai)", "value": "7bab8e5cdbce8177859b9c96ae6cc419498d7314b2431466adb3a08878920231", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212528, "uuid": "f4436a8a-8732-4cde-9a85-649c5fd56dfc", "value": "T1B833E1EEF94E64C1C7EF0A3A519525E09710ADD223A50BEA77628CC593AC81F7D024", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212528, "uuid": "aeba48cd-de51-4cbd-a032-7d0a57db260e", "value": "1536:ibayoZXFsbejmq8Cq0TX3iUUDpGkbHPjgNBdr/D:ibWHsbeiqL3iU8GkbjgrdrL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212528, "uuid": "7f2e9f63-19b4-471f-91f1-e38aaee49e39", "value": 53708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212528, "uuid": "a41ae51e-c3d5-4709-8de3-b6b0a67f4580", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9f7800f-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772212528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212528, "uuid": "ced2831a-2d6e-4ae7-8e70-9bf640c1cd60", "comment": "Malware payload (Mirai)", "value": "6d2eeeb0de989524108822d8afa68a50", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212528, "uuid": "64d8e758-b225-4ea1-b559-b28a36dba058", "comment": "Malware payload (Mirai)", "value": "79638aca353d9120c9ebc9ead40a3a54e918d31b4a7a1121401c9304f9854bf1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212528, "uuid": "fcba9586-ee1f-4e26-a89e-413de72af669", "value": "T18433F191327B65B9D02754336C06B104DE3FB96B2743471F217AB23EA2EEA45BA703", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212528, "uuid": "b0751c86-b3e8-47a6-b15f-8d35d24d744f", "value": "768:TlQEuWOnV81fYvDy+DXznUyfBXNPxsBPen4yw/gPZqubiZahGA5M1gt4fgUmhsaZ:i5HlvDfbBXNGPzBAZqV0GQcg2dOvs4X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212528, "uuid": "eec6957c-416e-4a1f-b744-b5837c240e07", "value": 51324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212528, "uuid": "39963c31-efda-41b8-8f4e-bb6faa06195f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9fe9089-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772212528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212528, "uuid": "a5a6ac23-6f00-4aeb-a718-366de2a83ed6", "comment": "Malware payload (Mirai)", "value": "7ec3b82a74cb1c2111ecc3447fab1328", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212528, "uuid": "e591ec83-7ff9-4aa4-85f9-0162f8ea70e3", "comment": "Malware payload (Mirai)", "value": "40691214338b33bd46c9c480372b8ed71b00bf1227cfb8b63a9ec21808bb0902", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212528, "uuid": "4019de46-9d4c-42c1-8cee-c66e5292a9bf", "value": "T1E843029EC2146ED34FB4467E2AB14547F910A87D81CFFF3664804B866AA7188AB363", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212528, "uuid": "7c1f6866-2365-4550-9734-53deeb296424", "value": "1536:Y0lj115MBmXjkYY1C+OE0oX/9LEGD0YLbte6LhA4TYO:Ysj11rYk+10ov9LEh0bV9AEt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212528, "uuid": "09588cba-5951-4179-882e-095675ccda7f", "value": 60576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212528, "uuid": "98ebb5b2-86b1-47bd-963b-87c93fc65c24", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea02432f-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772212528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212528, "uuid": "5081a568-023e-4333-9a05-1ccf8c3f468b", "comment": "Malware payload (Mirai)", "value": "b8ad2fde5569a91d0662be246bf09139", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212528, "uuid": "0cb11893-4d8f-47a6-a83f-425d49a0bb5b", "comment": "Malware payload (Mirai)", "value": "4a0a518021d5dc31d6cf7c5297dcfe301769d5385045ed9939a99d473e71c259", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212528, "uuid": "97dcb8a6-7f04-4fb7-90fc-7b279d75329a", "value": "T15123F174CA0A7AB6EA7E8C354D5292E163FA1EEF33D688D367611E835343C50530DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212528, "uuid": "0d635401-6c78-4dc0-8a84-03e8561f6bce", "value": "768:wPMGs44aRcWZJPR9UK2jGlMeEhG4p6niYcI4P6Og9C0A/qUuavHjau4jhlv4uVch:wPRCCLR9hl5Es4p6nbT4QC0A/qUuavHp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212528, "uuid": "500e4cdb-9db1-44bc-be24-01c9a666dd83", "value": 48140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212528, "uuid": "08064581-d930-4007-82e5-d95ff702d26b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55a5253c-1400-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772212709, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212709, "uuid": "419e2a94-ac55-436a-b045-1895fd9a0f9f", "comment": "Malware payload", "value": "af698bedf30cc8f41854d3ac8ce0d9c7", "object_relation": "md5", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212709, "uuid": "8fb3c457-b085-4944-a473-c4bb6c5fca02", "comment": "Malware payload", "value": "8daf8d869ed9ee5c573e9eb2e94cf7f6ba4dd7db635ac5047b2e67d1920fcf8b", "object_relation": "sha256", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212709, "uuid": "214189d3-6d74-41e7-99f8-6710e20ee6ac", "value": "T11E863393DBB5B6DCE671F4BB64339FE8A255F48FC04970609885BFC0B90D758A0913", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212709, "uuid": "d000c02d-fb19-4f6a-b722-4246bf80220c", "value": "196608:d7LadD4o5k040es7jzI7IXkCafxkY0AKHjhEFb03:d6NJk0wkHI7OkLiJOFw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212709, "uuid": "cd57eafb-3f7a-4de2-8a23-aeef720aeebd", "value": 8046918, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212709, "uuid": "9ef81ec0-8fb2-480c-897e-e4b14150ec56", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba33b571-1400-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772212878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212878, "uuid": "e33eebca-32d9-409d-9b7d-9f78e482bf98", "comment": "Malware payload", "value": "6b6fee2c5e2bdbff3d56362c72f5b2ac", "object_relation": "md5", "Tag": [ { "name": "BABADEDA", "colour": "#c25d29", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212878, "uuid": "64752142-51a4-48ab-95a7-585d55b26c6a", "comment": "Malware payload", "value": "4b16baf674e02084875303e4ae72066d7b6431340efe58a37b7840eb36b6a026", "object_relation": "sha256", "Tag": [ { "name": "BABADEDA", "colour": "#c25d29", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212878, "uuid": "22b1aec5-4b88-4066-b863-866c336b5ee6", "value": "T181D533DCF0ADBCEAF0E25033A80BCDD508857D1965BB4BD769B31ECD17A900A31364", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212878, "uuid": "a9bad9c1-191a-4209-b5c2-1802d0888106", "value": "a50e815adb2cfe3e58d388c791946db8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212878, "uuid": "29dadf82-b35b-4a8c-b601-9eed134c7082", "value": "49152:RImZHN4WVRUW0NCtUnDjl2KGSYfqZcx9O0+TmUydov1tp3U5QkNmRY3mWjYFJGUY:RImZHN4WTJ0NCt6lafqyxU7TmIvbpEZZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772212878, "uuid": "c2c5766c-96bd-40ce-a4c6-0128179bf5cf", "value": 2753024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212878, "uuid": "ca410dbd-22d5-4189-b772-3cb2ce639efc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "297188a2-1401-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772213064, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213064, "uuid": "ca9d24c3-a7f9-4881-9b5a-89f5116a6cf9", "comment": "Malware payload (Mirai)", "value": "a33af7289f28b71559d31b4df3501f47", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213064, "uuid": "190a1dab-589b-4ea7-87ad-b07c2eff8051", "comment": "Malware payload (Mirai)", "value": "2807ea5cc6216798f5f2f9e3261297981ac44ca0fd964f9a9c242ac4e13cccd9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213064, "uuid": "7dce12bc-5951-4d45-95a2-e39c3bb13815", "value": "T14DE31A45F8505B23C6D612BBFB5E428D372A17E8D3EF720399216F25378686B0E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213064, "uuid": "b3556b0a-5065-4317-8996-d33ec0c3c68b", "value": "3072:3ITEs7uvApUlWnF46r/b9l5n5CYp7G7Wz:3ITyvq66F46Tb9Hn5zNVz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772213064, "uuid": "34bccb0f-54ae-4c49-8026-31a460997cec", "value": 146208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213064, "uuid": "0b461fe2-3026-4be3-873b-216725af6c54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be696b7b-1284-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772213115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213115, "uuid": "91ea8f89-e370-4f3e-8348-06530a13bc45", "comment": "Malware payload (Mirai)", "value": "d0a94aa4a1a8089d0629912eff2d83fa", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213115, "uuid": "57c88617-c0f4-42d7-a82b-68969e072ff0", "comment": "Malware payload (Mirai)", "value": "fb7508c09f4c3f55dfba8f57de6e1cd3686de6babd75954fd9c43265a76e96a1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213115, "uuid": "be6d043d-eee9-49aa-adb4-91b18b6da851", "value": "T178637DC9E283D8F6FC1705706036E73BAE71E0AA211CE686C778D5B1FC86941A117A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213115, "uuid": "9e0c40f9-71f8-49fa-a57b-562f2ab346d2", "value": "1536:pnUQJZdRlDAXO6QyQwOaOAeTxpx97qJ7RvsuIr5bhh8l:pnUQJ7RlUXTQpwOaOA+xpn72+uWkl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772213115, "uuid": "f6045289-4298-4dd0-958a-1835edc7dd1d", "value": 70736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213115, "uuid": "9c7499a8-ee04-4c5a-9cba-a602044b05f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4538d3d-1281-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772213117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213117, "uuid": "bb2ac8d4-f68a-4618-89e4-218a454d08c8", "comment": "Malware payload (Mirai)", "value": "6c21086b3ce157d1265f2256ebcac73d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213117, "uuid": "aa52897f-99e1-440c-bb9b-b68678f62747", "comment": "Malware payload (Mirai)", "value": "594a5a7ca7627522f05dbddbaffc28983a3de9663778f5dadb57fb4572b270af", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213117, "uuid": "e3062b89-7a99-4214-bd6e-fdf5df4ee0d7", "value": "T104011E8D2BE5B1879A2C8E18F26B825C794086C870700D55F23AB87568ED2107CE4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213117, "uuid": "cc5ec520-e948-4890-86b5-d244966c0eda", "value": "12:3J3NLqQHjQbNIl5zAQI0LKjQvOsQjCQN/QuSEQntaKAQhiAQrfAn:3J3NLBuNI7nKq4rtYtBReA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772213117, "uuid": "d015116c-1d78-49c4-8d2a-cc6485fc5826", "value": 696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213117, "uuid": "04f9c0dc-8a50-43fb-8af7-ea2a66f053b6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c876e3e-128a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772213117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213117, "uuid": "381aa43c-fc77-48b2-9369-96e5f214f0e8", "comment": "Malware payload (Mirai)", "value": "f326b5185f1671a67f4de9d9e7738b92", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213117, "uuid": "607ccab9-0e58-43cf-8100-c926963c7e98", "comment": "Malware payload (Mirai)", "value": "23b4ab355a485cb7f626f5e1f18bd7582887e43cd51d1cb4899b39933956dfc4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213117, "uuid": "ef06870a-62d1-4b1c-8f80-028ebc9519d7", "value": "T14B41C4CA27D16435ACB69973F3BA0614358098C914F06E445AFD78F854ACD24BDD4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213117, "uuid": "d66dde24-0fd6-49e1-88be-7c630c085bae", "value": "24:vryd/sd/sg/szld/s7ZM/sXG/sHDD/s9IHZ/sJ/s7h/so/s+/sbyeH:vGGGnRG7tXREWHK62PJF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772213117, "uuid": "20115fa4-f9bf-48cc-87bb-db72ae94df3a", "value": 1976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213117, "uuid": "32897d7d-7b2c-42e0-b355-c4f9eba52dcc", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56860b51-127f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772213117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213117, "uuid": "f5a5dd14-c080-45a7-bdba-5e2d97d16ce2", "comment": "Malware payload (Mirai)", "value": "aa80ace0f93aa6fc602bb52611a49776", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213117, "uuid": "46f9d3ae-05a8-44ef-b788-ae54dbddf91b", "comment": "Malware payload (Mirai)", "value": "4b0912013a4f081a3b6e3146df2f55734330aeb645bf585a9490b0057c2804b1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213117, "uuid": "427cf075-7cac-4d4f-9e91-ce5526614e0a", "value": "T1D30184CF2AD4A155885C8D50B16B4A2879488FD430700FCD565DB4B679ECA34F9E5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213117, "uuid": "e66c4a68-a57c-4a43-8667-e70be56ed86e", "value": "12:8LqUkjUqNIl5zAUX0LKjUmOsUKCUU/U9SEUQtaKAU+iAUafAy:8L7kgqNI75CKgmiKDU89EQtBl+aE9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772213117, "uuid": "a79c257a-9bba-43dd-a18e-84997fcad4df", "value": 786, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213117, "uuid": "22e87d82-136b-46d9-9f13-c44b5ac56311", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4fb93091-127e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772213117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213117, "uuid": "27dc226c-1507-4342-a17c-93891b57b087", "comment": "Malware payload (Mirai)", "value": "6208475dd21568c8d6e98a26730208d7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213117, "uuid": "4e28c8f3-bc00-4443-811c-71ddb2caaf34", "comment": "Malware payload (Mirai)", "value": "2422d1cefd84f93d49e1f2285358f5779519d8e6e795f9b760a1bf8b7de2493c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213117, "uuid": "5ee5f529-0523-403c-b658-b32d18f855f5", "value": "T1C601E1CF2BA1F1458A2CAE14F26B0A547949D7C830700F59AB5A787678ED6107CF4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213117, "uuid": "41b39d3b-0533-4197-a152-3fd84465fd7a", "value": "12:GLqvjjNIl5zAQ0LKjnOsLCl/2SEPtaKApiAzfAn:GLqPNI7yKjpG+/tBSdA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772213117, "uuid": "31ea1f14-c2f2-48a3-9077-b624758c5857", "value": 696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213117, "uuid": "f4011c41-987b-41a4-be42-ab3f16ac6981", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bc65973-1401-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772213229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213229, "uuid": "4cb988ab-a419-40b7-9c35-b890530f774f", "comment": "Malware payload", "value": "fb9d43b909537f0bb847b4bd2c62e83a", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213229, "uuid": "6411e4c2-ed84-4097-8da1-6b070e83cbf0", "comment": "Malware payload", "value": "7052ac81af4832fa4ea5cfdbb19b02cb8fa3317802cae29cdc7454d9a722f5b8", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213229, "uuid": "b7feffea-1ed5-4298-85b2-00aca00db89e", "value": "T12F5423CE20DD4163CE2FB481BE824B362A5BD301D6D8D22E127F7EEA06475465C9C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213229, "uuid": "9c70d696-1bea-478d-b2f0-ec71a2477cdf", "value": "6144:Sia5Ps6rdgL9PskCd7O8AUq2cm2VPFjgD2nsSRsz8ux:S/1hp7OtUjcHlgD2nHGAux", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772213229, "uuid": "3b993cea-386d-4600-a13e-eadf3077c83a", "value": 282129, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213229, "uuid": "c1ef8bce-e0f3-4209-b921-b62b2a583e02", "value": "application/pdf", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64eff4bf-1402-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772213594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213594, "uuid": "5906d2b9-45d0-4562-9f7d-0dfc92626291", "comment": "Malware payload", "value": "8a042a29c1e79029d5f7ffbcf1d2f818", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213594, "uuid": "98a40aff-0b1e-4444-8231-60695f166df6", "comment": "Malware payload", "value": "bf8704229a81d26a3845dbbb987e1c0f8d97b462067ab4a2bac457808d7acab1", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213594, "uuid": "03756485-9d0b-4f4b-92f2-e0a944f08ba2", "value": "T159E04FDE30606A63D18CAD0464B6B841A0E3C9801B941E1E5DD90CEAC8CAB10770BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213594, "uuid": "4c5933ea-e8e4-45af-a26e-af75ac0b9f5c", "value": "6:LMFd6NHTG8/aMFdk8a6++c/VBiMFdEHTrgMFd9kbTR:od6xGARd6PHVDdkrHdOTR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772213594, "uuid": "c3182196-ba33-4b93-ab51-2c15be75b9cd", "value": 300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213594, "uuid": "fe127985-64d0-4c6a-9cfd-70e9fe70d8a9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "673cc1ed-1402-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772213597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213597, "uuid": "70603ed7-2329-431d-9c19-eead5ade100e", "comment": "Malware payload", "value": "5c8982f64dc3fde82bd9ed5324f6443b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213597, "uuid": "a554bebd-42b1-4e88-bd1d-1067245e3e52", "comment": "Malware payload", "value": "efebff3e20438ccc7f1a487c07321c56468440abf49f665dd29386d58dddd81b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213597, "uuid": "4f764cf8-4f8b-4e03-9654-388742b50e45", "value": "T10BB36B13B4C190FDC8D6D2744BDFA227E972F15A2238B26E27E16F263E5DE112B1D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213597, "uuid": "005e202e-6abb-458b-85ec-5663a54a1033", "value": "3072:OYXQiQyoO8sEJKFBOfPGJpbiUHfO+q5ssDqvcuDiwtHoHsEkJo20NoxOkxx9IxxR:OYQiQPs5BEPSpbiUH2+q5bFuDiw5ov2c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772213597, "uuid": "01ef044b-87fb-42ae-8d00-17ed688d1d32", "value": 109096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213597, "uuid": "832a2ec5-4b0f-4e73-bb55-6486396ba10d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdf9e58b-1408-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772216347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216347, "uuid": "2320fef1-f361-44a4-914e-f0be082e6cb4", "comment": "Malware payload", "value": "1c22c08d93e78bc2d8f0c4b41588bf24", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216347, "uuid": "defb6800-6216-4023-b690-11205777b999", "comment": "Malware payload", "value": "b762960fc663410913e4ae91015a65fe450af57d2ca50a5b5c521010621f0b7d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216347, "uuid": "8a866ffb-2111-45e5-a731-297b5de63e36", "value": "T1E6B24C2386B57F27C4D0377B11C3036594FAAF5925240B1F2F461C8E5EA93912B3AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216347, "uuid": "affc2730-de38-40f9-9293-0b8ccf9ac07b", "value": "384:k8Ns9j5z2Io2aa73kNQc4Lej9WW4PfHQKjR+U6mH0:B+9jZ2Inaa7UNyb1smU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772216347, "uuid": "8cefe915-1f71-4197-bf7a-4e15919a20a3", "value": 24768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216347, "uuid": "401deb95-3d83-4b19-8865-b0689a9cc339", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdfa9036-1408-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772216347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216347, "uuid": "4bdc8d1d-30c1-4b68-8f75-8e52c4ef79b8", "comment": "Malware payload (Mirai)", "value": "130f063af145c3c0b32db863884f5188", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216347, "uuid": "7d63ecc0-136a-4281-863c-ec9b582139d4", "comment": "Malware payload (Mirai)", "value": "9598bcacbc8600e4f479d54d5352cff9b6006282ebc6444b60f2f9155e6724a8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216347, "uuid": "c83ca158-9aa5-4897-9842-0d1a899f6fb3", "value": "T14C93F882BB43CFF3D95314F041F75A398A31FC2A4836CA89EB65BDD6CA165D062163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216347, "uuid": "ca0ad0c4-37ef-49c5-b6c8-19ebb25b2488", "value": "1536:rEhyTSecX82w2kW7Cvm+XstfV0xT+PJ79:rEgTSecXx5Ovm+cRx7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772216347, "uuid": "2e5cf8ba-6955-409e-a510-ed1ed040698a", "value": 97668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216347, "uuid": "5035581c-09ef-455c-a5f4-55b8c4b48c50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce06cc74-1408-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772216347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216347, "uuid": "58c4880b-05f5-4f7d-95da-69925885cce6", "comment": "Malware payload", "value": "45cf075537717e1d4a80b40648179d03", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216347, "uuid": "8e090ca2-ccc3-46e3-9ace-9df6884b7618", "comment": "Malware payload", "value": "1dd57e1fd7f21f74a341b427f8056d43975a1d0114d6a602fa85f37cafcb9df9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216347, "uuid": "5a5fb4e8-ec75-45a8-a556-fab40e39d8fb", "value": "T1B6E329077AC2C9FFC4D7D1F44BEB95358932F82A1835715A67D0BE921F49EE02A1C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216347, "uuid": "3ba39364-aeec-4840-8153-08eca2ff0d91", "value": "3072:Gaee/X6w0e1vrrv1l2gXJxkbeMkPoZjILu4FZ+q:3oGlg9V47", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772216347, "uuid": "86e3458e-6679-4770-b5b4-f1f2ebe6845d", "value": 144520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216347, "uuid": "0a423d64-54f9-44ff-a2ed-e2e28188d803", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce09d327-1408-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772216347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216347, "uuid": "6fb65c33-51d0-4f81-9117-36d17dd3eede", "comment": "Malware payload (Mirai)", "value": "8e5c5b1b33e1ac273101714f5ab1d86e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216347, "uuid": "6bace96d-6098-49a0-b691-60a9cde8edaf", "comment": "Malware payload (Mirai)", "value": "1b7dda490d43cfc9186373b7ab449477642b5e6e57188a62b2bcb292106dc6ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216347, "uuid": "65f6c777-14ef-46ee-b7d7-526c3c700759", "value": "T11704A81A6F238F6FF269827047F34E30975976DA16E1D684E2ACD5501F202CE641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216347, "uuid": "8b23fe5d-fe37-4e63-a316-e4258226d201", "value": "3072:6NdQopCfRnE9XxQ8diQSvQAD4ear0gx7cz:6nAMhdJA+r0qcz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772216347, "uuid": "be611bc4-c7ed-4659-a9d3-fb177206e9fc", "value": 178488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216347, "uuid": "62190a55-499b-465e-84d4-1efb7a5f3ba9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cea5c969-1408-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772216348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216348, "uuid": "dd227227-3359-4e07-8b94-cf0d5a30aa08", "comment": "Malware payload", "value": "35eae4f161f82c6fc4885b94c17b76b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216348, "uuid": "1220f9e2-9afc-4be4-9e3c-9100ba99e59f", "comment": "Malware payload", "value": "933ca108b552bdc59597c591b03f710b3b6f3be612c48ff74d4ef4b18f09d762", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216348, "uuid": "2d05e595-1f6d-449b-9db6-33918c12b5a8", "value": "T11AB3F646A9429F01D49731FAFB8F425433536FB8E3F971019A24AF6123C6ADB0FB65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216348, "uuid": "5610cc15-88ff-400b-8a03-dc0ccfae1a7e", "value": "3072:uS7JGA9f1OARN2adwC3G8xWlGHdOXDmji:dH9fECN2adwC3GKzHQX6ji", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772216348, "uuid": "4c1c7ff3-8635-4775-a374-52baa16ed112", "value": 110820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216348, "uuid": "d1718991-9ebb-4257-9f74-485967573409", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4fcbc3f-1408-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772216359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "f9a37335-ea90-496f-b444-3fdfd277baff", "comment": "Malware payload (Mirai)", "value": "a731c38c7cc0d661d23e42adc1ae854c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "fe7320de-84e9-47cf-86b6-def7d55fad65", "comment": "Malware payload (Mirai)", "value": "db395bc5a0fb8c46f3bc7135def9d3550b705800f507efc471a67bb40bc6ba96", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "ca18ad44-98b4-4e55-905e-628a62b1236e", "value": "T117632985E753D4F1D987197002E7FB398A34FE620124DE5AEB94FFE2AF3168170462", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "07a3ad07-574a-498d-af3c-535bbb06fcc9", "value": "1536:xsRUQ16e9QTW6z5T61lq/4JogUJj8XU131AcxT9q/srG:2IKfeGsgmKAoE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772216359, "uuid": "9a86877f-e554-49ba-92c9-b16c270cee7b", "value": 70776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "b729ae91-6f05-471f-9065-1cd2bae6a63b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d500147b-1408-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772216359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "98c255aa-5e9b-48b9-b883-9bf25f6d641e", "comment": "Malware payload (Mirai)", "value": "f099245e9c79d96acfd94242eba8b76a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "239691e4-4468-4a50-9a3f-165e2dc52bcc", "comment": "Malware payload (Mirai)", "value": "aeab3bd18290ddcdf68924c4478216c55e5a967616ae2e1d07f7d90f48c27176", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "fe2e7138-1054-457a-908d-6092312a16db", "value": "T1C0E3FA06B9419F12D1C221B9FF9E415937136F78D3EE72029D24AFA0378A8FB0E7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "becd003d-932c-4521-bfe8-86f4ad499e76", "value": "3072:uCIU+T3GAvXmgvNLLa3upQGj6CpL0BYMs6YXzmQy:uCI9VvXvvNvapfCpLws6YXyQy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772216359, "uuid": "74b09833-9d2f-464d-a42b-abcae107dcb4", "value": 147840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "40eac692-5086-4dab-bb72-d0faea51c292", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d500ba68-1408-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772216359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "5779737b-0826-48a1-a8cc-bb8a6c662ea5", "comment": "Malware payload", "value": "b82ea1ec0de4dfe6b791d4ae1b38bad3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "94bd9c85-d545-4c48-a7dc-320ce5db5044", "comment": "Malware payload", "value": "409077118a6d2e2654c98d38cd456dc2246ab230d350e54bf1fd5058e892c90c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "0bf30e01-876d-4ef0-9684-bba647a61fed", "value": "T15704E80AAF520FBBC86FDD3302E50A1539CCA81716B93B757234E924F64A58B49D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "11984219-e15d-4a1e-af0d-c471286068c6", "value": "3072:NWNTxSiLGuyTIOpeqync03ivPsa2e/H5H91s6UGwqMi:NWNEi85PMeR9PUfqZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772216359, "uuid": "b2ef4767-c9e9-41de-b25a-f5ec09ed8cd5", "value": 182584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "d865677e-7839-4346-af36-3dde49222d6e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5039818-1408-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772216359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "7f8cf5f3-836e-4824-acb4-c7b43587da07", "comment": "Malware payload (Mirai)", "value": "eb54445232e39955548324767e2ea064", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "a39ac59b-4015-4be4-b742-74692f360327", "comment": "Malware payload (Mirai)", "value": "18885ca7604a0bc3cda7b203e17e20634712bf9b3e57fb48036936aa16e7ae92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "216e85bd-34a3-47b9-8635-1d61081d5e42", "value": "T153C31663DE26AF4AC117A4F462F24E781B52FD6649470FFAA476EAE44103CCDB1053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "cadfd0df-4870-4cef-ad07-11254272a450", "value": "1536:+yYjVUvV1VI8ALlC8KFukc7gfLUSzzHRIWymciBqCQGm1+e:OjVQ1lALluFkWUSvxIWrciB9W1+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772216359, "uuid": "7ef4e5a3-d3ef-4294-a931-d58a8c9976ab", "value": 122592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "fc4a04b1-9189-4fc5-b395-d5227c86ae18", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d504f012-1408-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772216359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "199f646c-febb-454a-8163-cc0b29dd3b7c", "comment": "Malware payload", "value": "ca0f461a5b362662fea4809fb6380f74", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "d963b380-1aa8-4400-beba-876db343729c", "comment": "Malware payload", "value": "0eea871c96429d90bc721090d2f4ffa7faf91d1dc49dfd5b91f70e4c2bf0c41e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "08a1deeb-c5fe-4c38-b140-24c37bdae06c", "value": "T15DD30746BD418F13C5C321F7FBDE42983A1A6F6DD6EA31029925BFA037864D60E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "312c6a8d-6452-435a-838d-f3075525e855", "value": "1536:VmbY43nzRGmdrbAIM24V5TDsTydchMo8O+MHqJRcxxR92lwSwywJzUND45LK5P/T:cnz0urb94L42dcm+yCXEDV+S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772216359, "uuid": "0f1f1223-2dbe-41a8-8305-8cf6f5ca1d56", "value": 138912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "b05ba4d8-d9c3-4933-a65c-822a6277351f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d505933f-1408-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772216359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "634f0cfd-1a76-4203-ba6c-9a8ae3e869e0", "comment": "Malware payload", "value": "8a709616e3437ff61bd287764e97f211", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "7ff105d2-8b9d-4dca-865d-063db73e99f3", "comment": "Malware payload", "value": "99ea1573ed7120104bd746eaac7e9aade7d36980b3855881cf8f05a4688c865f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "db492138-00fa-4c62-9131-42e43c04732a", "value": "T1BE93F886BB43CFF3E95315F112F75B354A32FC3A4C26DA81E324BCE59A525C0A6163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "929df4b9-a115-4466-8d0c-198386e28d5e", "value": "1536:6NeeWfIpE1A1Mt8lmqMqdvq8jGyQ73eqzL9jjmWSDV0G:YeEI8lmq/NpjGx7Oq3gvi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772216359, "uuid": "acab488a-ba0a-479e-8d08-f44261a1a025", "value": 96356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "531b9319-884d-4c11-aace-f51d9bf5f034", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d505bad3-1408-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772216359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "374b6cb8-3948-4abf-9c51-8e14d2547304", "comment": "Malware payload (Mirai)", "value": "546bb71c44f39be88120fc51c2bea69f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "8c7eb052-b6b5-43d5-8f7c-5819bc6fe7b8", "comment": "Malware payload (Mirai)", "value": "f35f6012c18b9fef2425e35672ffd38a732de32318f10b976171373a26a24ad3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "2292e84b-6f40-4d2a-8b6b-68c3474ba884", "value": "T16FE3F783F901DFB7F40AE37648A30816B530FBA60C524A76726779AAED391D51423F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "7f6b78b6-548a-4959-9af6-16d36730d81e", "value": "3072:2uhqohDGhiVKMWGyv9tlIoLk+WP7t78OiKVjjbiBLyGMJrNt:23ov5yvrlIUktZ8OKLyGut", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772216359, "uuid": "5b3d46bb-ce14-4e97-8575-f68d091585bf", "value": 156992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "db3d7643-c07d-4c47-81a8-abdcbc81ddde", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5068ce3-1408-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772216359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "46609939-52c7-471d-a4df-eb8f0106e56d", "comment": "Malware payload", "value": "d8adc5237e42493aa4de250f46ff85db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "0f777575-4752-439d-89d7-9a0578aa1de7", "comment": "Malware payload", "value": "aec67a04828f1ac418f35a83ffa7d9fda2627e0190d81156c7943cd658463ccc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "57d5d538-b07a-4b35-9b2b-93e8b27a1d87", "value": "T144D307026B0D0E03E1532DF4277B1BE1835BAD5228E9E680B51AFEC99771DF25506E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "d77f133b-d6a5-44f9-a8f0-c8e3b65f1002", "value": "1536:bHD3cbBLpf8d46xjwCuYQQqCHk4NK43MDZrPI9i4vAjsmjLB/kHBoqF6C4q:bHDMJhcfxsRjQqkNK4sZrBNjc4q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772216359, "uuid": "94c583d1-230a-4623-a43c-aaadc0dddd77", "value": 139060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "f9583983-c297-496e-a161-356d222ed251", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d50a190b-1408-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772216359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "de1ce967-38c9-4c61-b84c-43120892eaf0", "comment": "Malware payload", "value": "0e50ff847e3a07f3fd8b627559b1ad12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "a86e34b3-da57-4ec0-b204-4fad7f907bf1", "comment": "Malware payload", "value": "6033db20715a79d587e26a206141255f49fb7e16a898e5c8637a7fcea6b75f40", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "6b623d7a-0a0b-4ad7-a6d8-bfc5563dbbad", "value": "T1E8D30706770D4E03D1633DF02B7B2BE0839EFD9628B5E680752EBEC982719B21545E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "3c16e84d-8a81-41ce-a728-b459513e5966", "value": "1536:Dj6bu73D3B0xDgzPwWwKpgMDgJxSCFY6vAPYdmQBT6D9PUqt/BXUK:Dj6i3B0xsbKvM0JDYjPTXUK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772216359, "uuid": "a57d9795-9758-4f6f-a544-a1542030bf59", "value": 139060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "33ca4ec1-e06a-4568-9039-1f4341f48b7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d50b8d98-1408-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772216359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "788b1f5b-2d1f-41b4-80e1-270dc7759289", "comment": "Malware payload", "value": "3c85f80fb96a8fdea93732d98bba7fb2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "4646a166-59bd-404b-95b8-3692bafdd15b", "comment": "Malware payload", "value": "e05b416af3eb1f3ae61816555a3361e36df6340bd50660fae17ecd44927197fb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "156270c3-6864-45e2-85e4-e1ede8ca3611", "value": "T1C4D3E846BD418F17C5C321F7FBDE42983A1A6B6DD6FB3102A925BFA037864D60E362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "0f9aff40-c644-400e-a347-70274287c432", "value": "1536:TCJT8p3RpTTAfkX4VVIcT4ACShPOsfOCG0wemwS+uPlWQwyw8AH8W25w3ihISwyS:yYtbTTr4ccPCShmeDmkkXwyS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772216359, "uuid": "4cf829b0-2a0c-448f-8c77-aff575850f66", "value": 134816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216359, "uuid": "39bcf107-62b8-4faa-89f0-107186c53c98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5277b83-68b5-11ec-9b74-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1772218820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772218820, "uuid": "be59f374-3989-4da1-95f1-499e0a3cfbb1", "comment": "Malware payload", "value": "05127008ddc73ccf64c067fbf04d56f2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "fat1", "colour": "#edd8dd", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "lip124", "colour": "#BBCFE5", "exportable": true, "hide_tag": false }, { "name": "Neconyd", "colour": "#f3f32e", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "rob136", "colour": "#5765b6", "exportable": true, "hide_tag": false }, { "name": "SilentBuilder", "colour": "#708a1e", "exportable": true, "hide_tag": false }, { "name": "tr02", "colour": "#e32a4b", "exportable": true, "hide_tag": false }, { "name": "Trickbot", "colour": "#334db4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772218820, "uuid": "8cbb018b-4953-43e3-b4c5-b1724bda7992", "comment": "Malware payload", "value": "f914b9eca1b06fac49b04ddc2c9e24e2832f75f84f97fbc7595e2f9ceaeb5645", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "fat1", "colour": "#edd8dd", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "lip124", "colour": "#BBCFE5", "exportable": true, "hide_tag": false }, { "name": "Neconyd", "colour": "#f3f32e", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "rob136", "colour": "#5765b6", "exportable": true, "hide_tag": false }, { "name": "SilentBuilder", "colour": "#708a1e", "exportable": true, "hide_tag": false }, { "name": "tr02", "colour": "#e32a4b", "exportable": true, "hide_tag": false }, { "name": "Trickbot", "colour": "#334db4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772218820, "uuid": "e5ba3418-28e2-4fb2-a365-77bfe0a5a558", "value": "T1F841B5DAE322A9D9C6B334FA365294C55E53225B8E75CF087E21C07C0089AB496D0F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772218820, "uuid": "fa69ec7a-feab-4881-9153-c637274a7dce", "value": "48:qbUT8PA3RAGvm+SkUpE+lkGekbt0RNEtaq4F0ZnYcowWPa:qwwPcm+xokGekbtCwa33a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772218820, "uuid": "b96067dc-e4be-4fe1-9961-c077eaf65e40", "value": 2367, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772218820, "uuid": "ed132710-b9f3-4a8b-9503-3c865f246614", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bee377a2-140e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772218898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772218898, "uuid": "e9f7526e-6e02-4f5b-8fae-f78a91cfba9f", "comment": "Malware payload", "value": "cd1e5aa0a24bc3b4a2257e537a4c4a38", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772218898, "uuid": "ec069240-9095-4f18-beb1-e551f2a3725b", "comment": "Malware payload", "value": "9030fe7c8963fd95312613e8ddc06efe1b617b282a10f1c0aeaa382553f8f9b2", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772218898, "uuid": "ad9d1bda-8ccc-45b2-b43c-44192b9ef2f6", "value": "T1D7583349C0B12A0968B9F9B3DD137C3DCF38AD31A3F59852BC061813ABD9AD5F5788", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772218898, "uuid": "0892ee27-878f-4668-a5fe-4bbede632e28", "value": "3145728:rpJNCHiADYIluoPNNyDvZdh+etW6zTTi1WE+Vkk:rpJNC3NNyDvtd1nToWrd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772218898, "uuid": "b612be3d-cf8f-4333-8d7b-6e682d3fade5", "value": 132613924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772218898, "uuid": "adfeb485-46a5-45ad-adca-79710298552b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e8e64b8-140f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772219166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219166, "uuid": "745fbba8-bea3-410b-a3da-c8cb9eddb3e9", "comment": "Malware payload", "value": "8f5563a845b9192afe44b19675e5ce6c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219166, "uuid": "201fa2b0-4cd6-4f62-b8b8-ba8bb9986bda", "comment": "Malware payload", "value": "9adec595172aae298862c6fdc24623c107012a131a2f2949fc5d884a4e335ccd", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772219166, "uuid": "6605be96-4bc4-45ba-8590-16c562de9d75", "value": "T1F2C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772219166, "uuid": "cee4d803-9d05-4e6a-b472-44e6e65d0054", "value": "12288:r+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byNH9I1P0QKw6FEt:r+QqldA/TSO713u7xnNH9IaQKHE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772219166, "uuid": "4d7839e9-8626-40d8-a05c-5a9522afab16", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772219166, "uuid": "54fb40b0-fb45-4dd8-a071-561d3c9b5081", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6c287f9-140f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772219288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219288, "uuid": "d3309466-c0c9-4c35-936f-96b613af93a5", "comment": "Malware payload", "value": "1384a1a81146dbae998106e15c19592e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219288, "uuid": "e0123a7c-feaf-41ae-a019-5ebd1aaf1f14", "comment": "Malware payload", "value": "24c93bef16e7dc9e3dd6896ee5b6cb2a254b6b6f6f18fa5376cb683929191b97", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772219288, "uuid": "cc7c1bbc-c490-49de-b207-72d5fd13739f", "value": "T14BB4231AF4D078CFD68ACDA394292C785F6C96C9CD126B7247C4EE9312442F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772219288, "uuid": "801721b3-26bc-414e-bbaf-c13de3166d19", "value": "12288:RTibgSMFBOBSlqrcKu7FxPbzJTVBU+8JM9hAC8Z3bVOBRkbKQDiUbpKW:YcSMFYOKkxpTKJM9mCw3bVOMWAPbpd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772219288, "uuid": "4d7d5043-0a7f-465c-aa9c-61c5a604310c", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772219288, "uuid": "0032903d-866d-4a29-97f5-bc58ebbc203e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efa724ad-140f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772219410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219410, "uuid": "0fda9d6e-fcfb-4f33-8232-6856fe7b0dff", "comment": "Malware payload", "value": "2069f6d4bc6bc2552ef29badb098bf3d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219410, "uuid": "33b06290-3bbf-4490-914a-7ad8b37a856e", "comment": "Malware payload", "value": "ea2e81b5ad1318e5dd8c121e71827b4261120ef7231c3a4c8b9b81b610ae2747", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772219410, "uuid": "5188783f-739e-44c7-8926-05b54fecc8bb", "value": "T1F2C4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772219410, "uuid": "34d0d8ee-5878-4f52-ad22-8a9e6596cd38", "value": "12288:FMU+0xq75aS9iYIp6cP/G2Bku8RtNvC28c5/VTUPkYy+:R+J71vI/GHYc5/pe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772219410, "uuid": "d415f4c5-73fc-430e-8825-867aab50741c", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772219410, "uuid": "e4466ce8-274d-4cb3-8db5-2669431f3652", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "351691e5-1410-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772219526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219526, "uuid": "69fab8bb-33a3-44fa-aeae-7bbd225e5cd2", "comment": "Malware payload", "value": "32323b9550442e4fc0fff417227e3edf", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219526, "uuid": "4590e88e-17f8-4ec8-ad24-1d874c95f7fb", "comment": "Malware payload", "value": "e3b6665b33a400c5620b34a650242f62c474f76add7c188ad188abceb252aff8", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772219526, "uuid": "179f3094-0872-4cc1-9c8a-bcd041d8a8ea", "value": "T128C4231DA0547B51F64B6A78B323CDB09B2AD03FD219C388A0840B399B5BF5769CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772219526, "uuid": "d51ed0c2-041e-45a1-a34f-ed3d29a9a23c", "value": "12288:uMU+0xq75aS9iYIp6cP/G2Bku6zXLhHXP427bY:e+J71vI/GzXFftHY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772219526, "uuid": "eada979e-d49c-408e-b880-381c42c246dc", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772219526, "uuid": "7c0ea9df-e861-4593-8461-c02f70539b07", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2838f469-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772220120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772220120, "uuid": "44c2b262-2b5e-429c-9183-93832f4f4132", "comment": "Malware payload", "value": "3943d932f5293d40b7d543b136f2cf77", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772220120, "uuid": "2c1e4ee1-9227-402d-b94a-c5049b12518a", "comment": "Malware payload", "value": "7c6018c4e34889888bc00804bbd67ac102bcf3e11f605f1eecabcaaa84ba30ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772220120, "uuid": "009a9353-0279-48e3-bc6f-76f767f637f5", "value": "F653124623AA2A72853149F1E7FDFF89F24A3D588FF66C157C103928B97135D1CC4919", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772220120, "uuid": "de498172-6c10-4b3f-ab86-c4c2664d77bf", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PL:yYI0ARqw1qAEv7UIFM8oJorFquyjg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772220120, "uuid": "361d82e6-dfad-4312-9043-25af9344ca64", "value": 60660, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c6e3f5-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772220389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772220389, "uuid": "ac3876e7-6764-4d59-b63b-127c75879604", "comment": "Malware payload", "value": "3b973286b5d06e8920aa3578a4941be1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772220389, "uuid": "ce2db5a2-77f2-4333-acd5-7528b6e690ea", "comment": "Malware payload", "value": "d4b125064e284d4586ccbe058f214c34ae4a973a3f276f7db1a1b1da0e9f97b6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772220389, "uuid": "91f32c8d-afca-4503-9a20-3e2ed1d32d67", "value": "9A33024523A62EB6C57548F1A3F8FF89B14A3EA49FF55C0A7C207658A43236C28C4C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772220389, "uuid": "1039324b-5c4b-4b70-950c-248febb2080c", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EO:yYI0ARqw1qAEv7UIFM8oJorFquj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772220389, "uuid": "f5e0683c-4e23-42fc-8f3d-361088ea44d1", "value": 53576, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97260a33-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1772222544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222544, "uuid": "b4e9c12a-41b0-438d-82cd-80ab4cab90ca", "comment": "Malware payload (Hajime)", "value": "b8ed2cb3e9fedec5b164ce84ad5a08d0", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "rdgn", "colour": "#cb07b3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222544, "uuid": "4c7822f9-fe3c-4606-a1ba-a12ef5722e4c", "comment": "Malware payload (Hajime)", "value": "d5601202dff3017db238145ff21857415f663031aca9b3d534bec8991b12179a", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "rdgn", "colour": "#cb07b3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222544, "uuid": "40cf93ae-816c-4ef3-bdcd-dec7bfda429c", "value": "468312CFA4598B66EC7ACDF809DB59044D46621E738B75EF530CD59C2038B862C8E92F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222544, "uuid": "0928bcac-2166-4841-b500-8d15b058eed2", "value": "1536:m3LqE6rUQWzVQR7iAGEcUT5PIi7pLqBNs4LOjcwf4nB6XuzGNy+iSc7tNUZM:mOE6PWo1T5bz4LVMXuzVNScWM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772222544, "uuid": "91a8a868-0214-4018-879d-8e65198285cc", "value": 85128, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1772222545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222545, "uuid": "79362564-b5ee-48dc-a4c0-0ddf2c6e570c", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222545, "uuid": "f642a5be-cb3d-4043-8bd1-593354a28953", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222545, "uuid": "e96f4f52-5186-4873-9119-dd1b0b891098", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222545, "uuid": "6b0d10c5-65d8-4d03-b968-06308e75c5b1", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772222545, "uuid": "f7e9195a-ac8b-4c78-8e20-5322011dc8de", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29b61246-141c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772224661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772224661, "uuid": "e85ad680-0cff-4657-90a3-fe6887f59d37", "comment": "Malware payload", "value": "6391a0a07cd7fe24d26159303e9913ef", "object_relation": "md5", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772224661, "uuid": "59367eba-4606-4acc-b266-f15a5260ecb8", "comment": "Malware payload", "value": "dd16432c830384c1a26ef606f85c4d113297c2b5119796780868d762a7a93ce1", "object_relation": "sha256", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772224661, "uuid": "23b4752c-959f-44bc-9c69-85db19a14d3e", "value": "T15F92EE6345F6CE0D3F1CEB46A8B99B34EEA72842F350B9E79DCD50CAD85A9D5010B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772224661, "uuid": "b07df0dc-2774-4b4e-a64c-c5f477ed1f8e", "value": "96:0Fsqu16dwVnxdBMfqIKnMVuxy/HUJL1a0E6z/NZ4peyZfxjpGYOfSwoSiabwdyxR:IlPLLLOK+wYxQm7T8RCSYFfTAQpKHa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772224661, "uuid": "8a222bca-17b7-4820-97c3-963eca54e3fd", "value": 20225, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772224661, "uuid": "1754f0ea-b223-466d-a1c6-96a3ca773150", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772150893, "uuid": "68493bdb-1370-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.125.5.13:44604/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772150954, "uuid": "8d009b07-1370-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.112.2:48818/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772151015, "uuid": "b0ed8c47-1370-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.112.2:48818/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772152148, "uuid": "543a60fc-1373-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.43.215:55341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772152447, "uuid": "0682a12c-1374-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.237.39:41258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772152748, "uuid": "ba2f9b5c-1374-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.8.108:49886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772152994, "uuid": "4cf80bcd-1375-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.21.233:32890/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772153174, "uuid": "b7dc23dc-1375-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.197.41:38808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772153587, "uuid": "adfae9ee-1376-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8484046844/CErzHEi.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "QatarRAT", "colour": "#9bf9c2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772153713, "uuid": "f929e0e7-1376-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.8.108:49886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772154316, "uuid": "60c7375f-1378-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.21.233:32890/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772154433, "uuid": "a6ad92ca-1378-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.67.111:44465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772154907, "uuid": "c102d675-1379-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/y4CEENE/cracked-save-to-jira-work-management-extension/refs/heads/main/squashy/jira-work-cracked-to-management-extension-save-1.9-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772154909, "uuid": "c1ee560f-1379-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/y4CEENE/cracked-save-to-jira-work-management-extension/raw/refs/heads/main/squashy/jira-work-cracked-to-management-extension-save-1.9-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155026, "uuid": "07be1b5c-137a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Caeserondijo/cracked-enhancer-for-figma-extension/raw/refs/heads/main/amidofluorid/figma_cracked_enhancer_extension_for_1.7-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155026, "uuid": "07c182c3-137a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Caeserondijo/cracked-enhancer-for-figma-extension/main/amidofluorid/figma_cracked_enhancer_extension_for_1.7-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155335, "uuid": "c050da76-137a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.240.71:43012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772155817, "uuid": "df6733fa-137b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.45.249:55805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772156055, "uuid": "6d32cfa0-137c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.67.111:44465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772156653, "uuid": "d1b146e5-137d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.148.178:54562/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157134, "uuid": "f07126f3-137e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.11.85:38853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157137, "uuid": "f1fd6501-137e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.234.109.107:52419/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157379, "uuid": "82b51ce2-137f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.45.249:55805/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157427, "uuid": "9ec73df5-137f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://id8654.cfd/Loader.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772157551, "uuid": "e8e7a2b5-137f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.240.71:43012/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772158268, "uuid": "941ee0e7-1381-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.141.48:56278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772158813, "uuid": "d967597d-1382-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.141.48:56278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772158876, "uuid": "feae9eee-1382-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.11.85:38853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772158877, "uuid": "ff0e61e6-1382-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.23.216:40581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772160488, "uuid": "bf54179a-1386-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.23:52576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772160492, "uuid": "c1d62da1-1386-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.214.112:50724/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772160609, "uuid": "07c954bd-1387-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.204.205:41334/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772161093, "uuid": "284cfd38-1388-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.214.112:50724/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772161876, "uuid": "fb1f9252-1389-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.76.186:39381/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772162054, "uuid": "64a68f34-138a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.147.8:42881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772162289, "uuid": "f1429f06-138a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.204.205:41334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772162422, "uuid": "4044820d-138b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.213.222:55081/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772162483, "uuid": "645fbc46-138b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.203.235:55171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772162527, "uuid": "7eca2457-138b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.117.56:56305/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772163134, "uuid": "e8e58803-138c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.16.146:45035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772163429, "uuid": "989104c3-138d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.224.85:52873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772163554, "uuid": "e32546f6-138d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.188.244:53773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772163736, "uuid": "4f98042d-138e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.203.235:55171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772163788, "uuid": "6e4ad2e6-138e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.140.98:49937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772163972, "uuid": "dc6d37fc-138e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.213.222:55081/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772164636, "uuid": "6815b4ef-1390-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.254.67:45325/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772164994, "uuid": "3d1586cf-1391-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.224.85:52873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772165651, "uuid": "c51ff2f3-1392-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.214.56.173:43003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772165828, "uuid": "2eaee94e-1393-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.254.67:45325/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772166196, "uuid": "0998b109-1394-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.171.213:48653/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772166788, "uuid": "6a539217-1395-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.185:46705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772167214, "uuid": "6852630e-1396-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.214.56.173:43003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772168293, "uuid": "ebb6847d-1398-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.171.213:48653/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772168534, "uuid": "7b0ad8f8-1399-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.185:46705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772168595, "uuid": "9fde0c56-1399-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.22.91:51175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772168646, "uuid": "be4fe69c-1399-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.14.119:47192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772168830, "uuid": "2bff65ba-139a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.182.193:64973/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772169149, "uuid": "e9cc3f58-139a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.56.220:33887/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772169427, "uuid": "8fadf584-139b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.21:52766/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772169494, "uuid": "b74e2992-139b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.234.109.107:52419/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772169669, "uuid": "1f9054f4-139c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.21:52766/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772169789, "uuid": "67165f66-139c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.191.29:41387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772169968, "uuid": "d2438638-139c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8079848160/emlOLoh.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772170032, "uuid": "f84947fd-139c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.129:43198/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772170148, "uuid": "3d798299-139d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.22.91:51175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772170516, "uuid": "18a361ff-139e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.164.203:41975/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772170634, "uuid": "5ec365c5-139e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.2.44:45872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772170635, "uuid": "5fb25731-139e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.202.188:56213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772170873, "uuid": "ed4317cd-139e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.226:45503/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772171418, "uuid": "32947759-13a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.135.186:56806/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772171468, "uuid": "5011f610-13a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.129:43198/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772171536, "uuid": "788a0abb-13a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.135.186:56806/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772171595, "uuid": "9bc9ef5d-13a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.191.29:41387/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772171716, "uuid": "e3cc7f33-13a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.250.45:35758/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772171835, "uuid": "2b1f21d6-13a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.220.21:38367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772171836, "uuid": "2b988b40-13a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.252.234:53367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772172067, "uuid": "b5550baa-13a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.2.44:45872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772172189, "uuid": "fdfbed4f-13a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.164.203:41975/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772172190, "uuid": "fe490d87-13a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.250.45:35758/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772172617, "uuid": "fcad7ddb-13a2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.226:45503/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772173515, "uuid": "14420670-13a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.129.38:51093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772173696, "uuid": "800b04bd-13a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.143.53:36095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772173754, "uuid": "a2e3ca5a-13a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.129.38:51093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772173934, "uuid": "0def44b7-13a6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.74.94:44412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772174287, "uuid": "e03b2d1b-13a6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.238.43:44155/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772175131, "uuid": "d7b9356a-13a8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.74.94:44412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772175318, "uuid": "470df19a-13a9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.153.117:50113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772175434, "uuid": "8c21e74a-13a9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.216.233:55256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772175553, "uuid": "d32d8da2-13a9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.238.43:44155/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772176153, "uuid": "38b65594-13ab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.150.75:43749/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772176266, "uuid": "7c232d02-13ab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://modsfire.com/8X5I6AKEVTwc7Xh", "Tag": [ { "name": "pw=2026", "colour": "#69d547", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772176267, "uuid": "7c557117-13ab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file/6ind14y7lapujvd/Aurora.rar/file", "Tag": [ { "name": "pw=Aurora", "colour": "#4eb2f7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772176267, "uuid": "7ca52ffc-13ab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.169.75.221/SOSTENER.bat", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772176268, "uuid": "7d19c073-13ab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.147.179.88:52712/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772176269, "uuid": "7d99cbe3-13ab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.48.204:35613/Mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772176281, "uuid": "84a3b479-13ab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.169.75.221/SOSTENER.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772176281, "uuid": "84d4ed67-13ab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.169.75.221/a.exe", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772176281, "uuid": "84d6f8a8-13ab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://186.169.75.221/SOSTENER.js", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772176281, "uuid": "84fd81cf-13ab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.24/d/roberto83278", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GDriveVerify", "colour": "#61d8bd", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "NewContract", "colour": "#407d41", "exportable": true, "hide_tag": false }, { "name": "Odyssey", "colour": "#84c493", "exportable": true, "hide_tag": false }, { "name": "UnknownUse", "colour": "#b65676", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772176509, "uuid": "0d095cdc-13ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.153.117:50113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772177536, "uuid": "7118b11c-13ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.224.204:41657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772177657, "uuid": "b93266aa-13ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.224.204:41657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772177777, "uuid": "00de8664-13af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.158.191:51507/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772177893, "uuid": "45e02b52-13af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.204.43:34609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178080, "uuid": "b5615e0c-13af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.179.123:41199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178143, "uuid": "dab2f5e0-13af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.66:59337/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178555, "uuid": "d0579ce4-13b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.204.43:34609/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178675, "uuid": "17a82cc7-13b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.93.16:51402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178850, "uuid": "806b3c64-13b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://loader-400.pages.dev/RANKUP/FREE/FreeFortniteCleaner.zip", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "pw-123", "colour": "#ec515f", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178851, "uuid": "8076667d-13b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://loader-400.pages.dev/RANKUP/FREE/FreeTempSpoofer.zip", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "pw-123", "colour": "#ec515f", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178851, "uuid": "80875e93-13b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://loader-400.pages.dev/RANKUP/FREE/FreeFortniteCheat.zip", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "pw-123", "colour": "#ec515f", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178851, "uuid": "80c71db3-13b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://wpgbf1zg-5500.euw.devtunnels.ms/rankup/freeclean/RankupServicecleaner.exe", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178851, "uuid": "80d72f6e-13b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://wpgbf1zg-5500.euw.devtunnels.ms/rankup/freetemp/RankupServiceFreeTemp.exe", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178854, "uuid": "8246230f-13b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://wpgbf1zg-5500.euw.devtunnels.ms/free.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772178909, "uuid": "a32465e6-13b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.182.193:5642/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772179345, "uuid": "a7129e12-13b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.198.65:39858/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772179628, "uuid": "4fbcddf5-13b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.244.128:47483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772179758, "uuid": "9d8ab2d5-13b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.28.204:33505/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772180061, "uuid": "51e29451-13b4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.179.123:41199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772180240, "uuid": "bcc011b1-13b4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.158.191:51507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772180419, "uuid": "275ebb81-13b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.88.34:43641/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772180592, "uuid": "8e6a030c-13b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.115.78:36829/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772180592, "uuid": "8e756fee-13b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.225.173:43284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772180781, "uuid": "ff60dedf-13b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.88.34:43641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772180845, "uuid": "2541653a-13b6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.19.21:58158/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772181020, "uuid": "8d9c286b-13b6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.225.173:43284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772181138, "uuid": "d402b2bf-13b6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.234.170:60130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772181261, "uuid": "1d62d9d8-13b7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.244.128:47483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772181330, "uuid": "468e9aad-13b7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.224.215:37988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772182577, "uuid": "2da7f2b0-13ba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.16:57395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772182688, "uuid": "6fcd11c2-13ba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.172.138:48329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772182875, "uuid": "df6afb63-13ba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.138.32:50565/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772183357, "uuid": "fe62894b-13bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.163:55841/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772183484, "uuid": "4a204dde-13bc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.0.211:44086/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772183527, "uuid": "641ca973-13bc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.65.130:53688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772183899, "uuid": "41c193ae-13bd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.222.170:47343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772184261, "uuid": "197f9e11-13be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.27.117:57730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772184429, "uuid": "7d86fe38-13be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://l3jvnuw2.smartcanvas.digital/?=check&&actmn=QuwIZyBsWUGgLPBu", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772184487, "uuid": "9fd8bdf0-13be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.255.247:50669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772184608, "uuid": "e7f888c3-13be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/znrril/cracked-save-to-basecamp-extension/main/larker/extension_cracked_save_basecamp_to_1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772184610, "uuid": "e97075d0-13be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/znrril/cracked-save-to-basecamp-extension/raw/refs/heads/main/larker/extension_cracked_save_basecamp_to_1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772184613, "uuid": "eaf54464-13be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.121.43:37811/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772184669, "uuid": "0cad745e-13bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.222.170:47343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772184728, "uuid": "2f87bfb0-13bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/GaBrieLPaRRa-Dev/cracked-save-to-podio-extension/raw/refs/heads/main/coronate/cracked_to_extension_podio_save_1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772184743, "uuid": "386c6032-13bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/GaBrieLPaRRa-Dev/cracked-save-to-podio-extension/refs/heads/main/coronate/cracked_to_extension_podio_save_1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772184788, "uuid": "533b2596-13bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.138.32:50565/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772184966, "uuid": "bdcaf79f-13bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Hatimad/cracked-enhancer-for-zoom-extension/refs/heads/main/cadetcy/enhancer-for-extension-zoom-cracked-2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772184967, "uuid": "bde6ab53-13bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Hatimad/cracked-enhancer-for-zoom-extension/raw/refs/heads/main/cadetcy/enhancer-for-extension-zoom-cracked-2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185036, "uuid": "e78ceb95-13bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.163:55841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185038, "uuid": "e8448116-13bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.45.252:39759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185097, "uuid": "0be6ad9c-13c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.149.199:49377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185215, "uuid": "523172c2-13c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.195.73:46891/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185277, "uuid": "771bcc92-13c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.252.100.78:54656/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185327, "uuid": "94cae341-13c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sameeronwheels/cracked-save-to-milanote-extension/main/nonnucleated/to-extension-save-cracked-milanote-revalidate.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185327, "uuid": "94d9ba3f-13c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sameeronwheels/cracked-save-to-milanote-extension/raw/refs/heads/main/nonnucleated/to-extension-save-cracked-milanote-revalidate.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185387, "uuid": "b8a91ef2-13c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DARKPHATOM/cracked-awesome-autocomplete-for-git-hub-extension/raw/refs/heads/main/elegit/cracked_autocomplete_for_git_extension_awesome_hub_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185447, "uuid": "dc08a37e-13c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/DARKPHATOM/cracked-awesome-autocomplete-for-git-hub-extension/refs/heads/main/elegit/cracked_autocomplete_for_git_extension_awesome_hub_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185575, "uuid": "28d02dc7-13c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.149.199:49377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185689, "uuid": "6c6d3096-13c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.27.117:57730/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185763, "uuid": "9871c5f8-13c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.144.34:54153/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185879, "uuid": "ddfede16-13c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.65.130:53688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185930, "uuid": "fbf08781-13c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/MaybeDesxie7/cracked-webpage-annotator-extension/raw/refs/heads/main/decrepitation/cracked-annotator-webpage-extension-2.1-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185941, "uuid": "02b1460e-13c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/MaybeDesxie7/cracked-webpage-annotator-extension/refs/heads/main/decrepitation/cracked-annotator-webpage-extension-2.1-beta.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772185987, "uuid": "1e41b18e-13c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.144.34:54153/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772186117, "uuid": "6b609e05-13c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.204.206:45093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772186168, "uuid": "89d5a116-13c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/teskkkkk/cracked-todoist-for-chrome/refs/heads/main/fieldworker/cracked-chrome-for-todoist-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772186181, "uuid": "91e6ad40-13c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/teskkkkk/cracked-todoist-for-chrome/raw/refs/heads/main/fieldworker/cracked-chrome-for-todoist-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772186227, "uuid": "ad29e410-13c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jyng2002/cracked-enhancer-for-trello-extension/refs/heads/main/hangworthy/cracked_trello_enhancer_for_extension_v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772186231, "uuid": "af9b02ab-13c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jyng2002/cracked-enhancer-for-trello-extension/raw/refs/heads/main/hangworthy/cracked_trello_enhancer_for_extension_v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772186287, "uuid": "d11865f7-13c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/clieez/Cracked-Price-History-Tracker-Spend-Lens-Buyhatke/refs/heads/main/ustorious/Buyhatke_Spend_Price_History_Tracker_Lens_Cracked_1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772186287, "uuid": "d12f0c2d-13c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/clieez/Cracked-Price-History-Tracker-Spend-Lens-Buyhatke/raw/refs/heads/main/ustorious/Buyhatke_Spend_Price_History_Tracker_Lens_Cracked_1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772186720, "uuid": "d2d77c2f-13c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.24.11:41426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772186720, "uuid": "d309e8cf-13c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.85.117:43660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772187070, "uuid": "a3642a9c-13c4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/FomaNory/Roblox-Script-Executor/releases/download/Release/Executor.rar", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772187198, "uuid": "f01c80bd-13c4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.83.70:34670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772187377, "uuid": "5a907fb8-13c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.56.197:58927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772187439, "uuid": "7fd47898-13c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.195.73:46891/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772187669, "uuid": "089737e8-13c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.156.145:57286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772187787, "uuid": "4f0057be-13c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jasoncraigberry/mockd/refs/heads/main/tests/e2e/Software-3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772187909, "uuid": "97d4f951-13c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/GungSatt/Gunfight-Arena/refs/heads/main/image/Gunfight_Arena_1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772187971, "uuid": "bcb69c26-13c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Matsuzaka-U/Facial-Unification/raw/refs/heads/main/Content/Facial_Unification_v2.6-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772188093, "uuid": "058bcff7-13c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.31.201.20:43647/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772188155, "uuid": "2a2be41d-13c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.36:38855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772188269, "uuid": "6e8fcefa-13c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Sahil-Khan-Dev/mod/refs/heads/main/log-files/1.log", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772188336, "uuid": "9677ca6b-13c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.220.116.254:56661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772188448, "uuid": "d934fe4d-13c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.31.201.20:43647/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772188517, "uuid": "0255c50e-13c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.85.117:43660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772188698, "uuid": "6dcf45b5-13c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.14.119:47192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772188698, "uuid": "6dcf4720-13c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.56.197:58927/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772188700, "uuid": "6f182e56-13c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.83.70:34670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772188808, "uuid": "af783729-13c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.68:57531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772189234, "uuid": "ada05769-13c9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.0.136.205:47645/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772189296, "uuid": "d24c61fd-13c9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.156.145:57286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772189469, "uuid": "39aa5cfd-13ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.36:38855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772190130, "uuid": "c3c25d15-13cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.220.116.254:56661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772190738, "uuid": "2e39f711-13cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.0.136.205:47645/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772190788, "uuid": "4bb1e944-13cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.68:57531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772190918, "uuid": "99449bce-13cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.253.143:60376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772191032, "uuid": "dd03ab88-13cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.26.52:47355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772191823, "uuid": "b45a08ae-13cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.149.143:59459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772192058, "uuid": "40e02e4c-13d0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.143.135:41351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772192169, "uuid": "830960ed-13d0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.253.143:60376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772192228, "uuid": "a60b4b21-13d0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.26.52:47355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772192295, "uuid": "ce229e23-13d0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.103.93:35066/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772192826, "uuid": "0a7a5af0-13d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://2azr2jei.coreforge.digital/?=check&&actmn=LacBCiCFwzBsDApE", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772192838, "uuid": "11cfc72f-13d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.133.222.87:49352/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772192887, "uuid": "2ee3ae8b-13d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.133.222.87:49352/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772192889, "uuid": "300a77d0-13d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.192.82:49130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772193077, "uuid": "9ff53311-13d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.149.143:59459/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772193437, "uuid": "76645fb1-13d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.192.82:49130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772193931, "uuid": "9d15320f-13d4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.143.135:41351/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772194158, "uuid": "2498967b-13d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.190.72:38765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772194279, "uuid": "6c40ad3e-13d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.165.143:33748/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772194389, "uuid": "add21cb3-13d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.29.32:44418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772194633, "uuid": "3f40428e-13d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.232.179:58652/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772194834, "uuid": "b7101670-13d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.8.42:50314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772195119, "uuid": "6120da5c-13d7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.66.149:51752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772195718, "uuid": "c64c901f-13d8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.190.72:38765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772196013, "uuid": "75fea26b-13d9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.226.133:40969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772196013, "uuid": "7621f7d9-13d9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.66.149:51752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772196079, "uuid": "9d6525f6-13d9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.189.30.64:53231/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772196318, "uuid": "2b9d8471-13da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.232.179:58652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772196427, "uuid": "6d206835-13da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.77.64:45518/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772197661, "uuid": "4c272246-13dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.151.154:53267/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772197938, "uuid": "f154ca83-13dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.93.16:51402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772198055, "uuid": "374b24b9-13de-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.151.154:53267/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772198171, "uuid": "7c90d7e8-13de-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:34750/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772198485, "uuid": "37a1d80e-13df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.54.37:50398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772198541, "uuid": "5922fbd9-13df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:34750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772198606, "uuid": "7f5e9220-13df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.54.37:50398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772198660, "uuid": "9fd50ab8-13df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.15.43:52276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772198726, "uuid": "c75711ae-13df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.134.22.152:43207/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199139, "uuid": "bd6ed753-13e0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.226.53:39328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199492, "uuid": "8fc239e1-13e1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.174:57561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199496, "uuid": "925905f3-13e1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.109.190.99:38175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199848, "uuid": "63b4c578-13e2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gaos1opo.dataspark.digital/?=check&&actmn=qtzxxtXjaZzjZveQ", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772199925, "uuid": "91d9c711-13e2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.182.230:52632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200150, "uuid": "17c742bb-13e3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.134.127:50808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200341, "uuid": "89b48210-13e3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.97.87:37710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200523, "uuid": "f67d814e-13e3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.97.87:37710/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200525, "uuid": "f7919301-13e3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.56.186:45376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200648, "uuid": "4093b3a4-13e4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.58:49410/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772200880, "uuid": "cb3dceca-13e4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.205.203:52643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201240, "uuid": "a15e86fa-13e5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.174:57561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201302, "uuid": "c67996ce-13e5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.226.53:39328/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201481, "uuid": "3112d32c-13e6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.202.73:49390/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201600, "uuid": "7832c1e1-13e6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.13.59:58525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772201662, "uuid": "9d1b73d4-13e6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.16.190:57232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772202558, "uuid": "b349ce3a-13e8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.202.73:49390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772202796, "uuid": "411cb5b3-13e9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.58:49410/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772202970, "uuid": "a8f928ce-13e9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.29.46.146:26181/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203044, "uuid": "d4cd3fb0-13e9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.16.190:57232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203515, "uuid": "ed62e237-13ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.37.155:57540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203574, "uuid": "10bca914-13eb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.134.127:50808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203700, "uuid": "5ba4ed7d-13eb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.81.171:51403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203752, "uuid": "7a992494-13eb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.140.250:60151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203935, "uuid": "e7b7e9f1-13eb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.117.113:33129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772203997, "uuid": "0cb24041-13ec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.29.32:44418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204480, "uuid": "2cc6fad1-13ed-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.81.171:51403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204537, "uuid": "4ee2e1ac-13ed-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.37.155:57540/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204595, "uuid": "7116e7e6-13ed-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.117.113:33129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204779, "uuid": "df2ccb9c-13ed-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.80.46:46282/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204898, "uuid": "2618cea6-13ee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.145.165:53181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772204901, "uuid": "27e4b2c4-13ee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.36.206:37077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772205067, "uuid": "8af1cbf4-13ee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7290860719/bLcXzlH.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772205195, "uuid": "d7445073-13ee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.1.188:51714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772205553, "uuid": "ac325454-13ef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.77.69:55486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772205795, "uuid": "3ca40ee1-13f0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.32.228:56341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772206634, "uuid": "30b12619-13f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.80.46:46282/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772206759, "uuid": "7b53198b-13f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.64:55335/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207114, "uuid": "4ecb9d8b-13f3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.1.188:51714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207361, "uuid": "e23c0813-13f3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.79.168:50982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207424, "uuid": "07c76d15-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.99.160:59221/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207727, "uuid": "bbe07739-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://172.86.116.191/SSA-Statement.pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207728, "uuid": "bc8c227a-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.92.217/SSA-E-Statementpdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207728, "uuid": "bcda1518-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.115.244/SSA-Statement.pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207728, "uuid": "bce0b2ff-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.92.199/SSA_Statement_pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207728, "uuid": "bce2cdf5-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://216.126.239.98/SSA_STATEMENT_PDFAB.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207731, "uuid": "be56169a-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.239.98/SSA_STATEMENT_PDFAB.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207731, "uuid": "be628b15-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.224.107.246/SSA_Statement.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207736, "uuid": "c13f97aa-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.92.169/SSA_Statement_pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207737, "uuid": "c24fd864-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.92.169/SSA_Statement_pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207741, "uuid": "c4c5bd01-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.115.244/SSA-Statement.pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207742, "uuid": "c4e205cc-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.91.24/SSA-STATEMENT-PDFADMIN.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207742, "uuid": "c4f8204d-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.94.254/SSA_STATEMENT_PDF.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207742, "uuid": "c50518b5-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.92.187/SSA_Statement_pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207744, "uuid": "c6145adb-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.91.24/SSA-STATEMENT-PDFADMIN.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207744, "uuid": "c61596f1-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.92.213/SSA_Statement.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207746, "uuid": "c737e86d-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.101.164/SSA_E-STATEMENT_ADMIN.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207746, "uuid": "c746b234-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.94.254/SSA_STATEMENT_PDF.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207748, "uuid": "c86ee577-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.92.199/SSA_Statement_pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207748, "uuid": "c8a28ad5-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.92.187/SSA_Statement_pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207749, "uuid": "c96aa941-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.114.22/SSA_Statement_pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207750, "uuid": "c9a2dd78-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.116.191/SSA-Statement.pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207751, "uuid": "ca3335fb-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.105.45/SSA_Statement_pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207751, "uuid": "ca44fde0-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.114.22/SSA_Statement_pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207757, "uuid": "ce1d6c81-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.92.213/SSA_Statement.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207757, "uuid": "ce31eb24-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.101.164/SSA_E-STATEMENT_ADMIN.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207759, "uuid": "cf0b4c02-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.92.217/SSA-E-Statementpdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207781, "uuid": "dc90b018-13f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.108.207/SSA%20ADMIN_STATEMENT.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207893, "uuid": "1f0926da-13f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.92.176/SSA%20ADMIN_STATEMENT.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207898, "uuid": "2202718d-13f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.92.176/SSA%20ADMIN_STATEMENT.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772207898, "uuid": "222e3914-13f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.207/SSA%20ADMIN_STATEMENT.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208379, "uuid": "40fea8e4-13f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.96.63/Ststement_File.scr", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208380, "uuid": "412da6d8-13f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.96.63/Ststement_File.scr", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208486, "uuid": "80ad319a-13f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.64:55335/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208555, "uuid": "a9deac4b-13f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://amaranthinerose.com/Ststement_File.scr", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208578, "uuid": "b786bbe6-13f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://larrycornies.com/1099-Statement.pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208682, "uuid": "f538c6e7-13f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://paper0post.com/SSA_STATEMENT_PDF.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208682, "uuid": "f53a56a5-13f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bnet-api.playm8ru.win/SSA_Statement.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208682, "uuid": "f53c3747-13f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://worcesteronline.com/SSA-Statement.pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208682, "uuid": "f53e8e52-13f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://stau4.com/SSA-Statement.pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208682, "uuid": "f57de0ab-13f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gettpose2far.com/SSA_STATEMENT_PDF.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208684, "uuid": "f6b29d91-13f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://gettpose2far.com/SSA_STATEMENT_PDF.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208684, "uuid": "f6bb137b-13f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bnet.playm8ru.win/SSA_Statement.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208686, "uuid": "f788cc58-13f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://mvirdi.com/SSA_Statement.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208688, "uuid": "f9342244-13f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://paper0post.com/SSA_STATEMENT_PDF.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208707, "uuid": "0445259b-13f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ssdocinfo.info/SSA-Statement.pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208711, "uuid": "066cb983-13f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://fkwy66.com/SSA1099-Statement.pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208717, "uuid": "0a64829b-13f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bunq.appswifthub.com/SSA_Statement_pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208717, "uuid": "0a8aa528-13f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://conscomms.com/SSA-Statement.pdf.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208718, "uuid": "0af863a3-13f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://babakbaru.icu/SSA%20ADMIN_STATEMENT.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208745, "uuid": "1b196ae0-13f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.79.168:50982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208907, "uuid": "7baac4e3-13f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://hsk-new.com/XdFWQSP/gate.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "7d131c83-13f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://igw.myfirewall.org/NOTEPAD.exe", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "7d13f731-13f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bmh-global.myfirewall.org/POWERPOINT.exe", "Tag": [ { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "7d289564-13f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bmh-global.myfirewall.org/QUOTATION.jar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "7d2da95c-13f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://igw.myfirewall.org/EXCEL.exe", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "7d4d5e74-13f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bmh-global.myfirewall.org/WORDS.exe", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772208910, "uuid": "7d85b008-13f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://igw.myfirewall.org/OUTLOOK.exe", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209275, "uuid": "5698ca96-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.204.223:51875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209387, "uuid": "99dc9a85-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://api.aloparatoriuz.com/LokwiUHhajhWnbX", "Tag": [ { "name": " amos", "colour": "#a898f7", "exportable": true, "hide_tag": false }, { "name": " ClickFix", "colour": "#d91408", "exportable": true, "hide_tag": false }, { "name": " macos", "colour": "#670059", "exportable": true, "hide_tag": false }, { "name": "malware_download", "colour": "#da731f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209388, "uuid": "9a08ee6e-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lun.marvek.live/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209390, "uuid": "9b2e363a-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.204.212:41627/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209391, "uuid": "9bc1c1f5-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.204.212:41627/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209391, "uuid": "9bef4a02-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.245:5001/bins.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209391, "uuid": "9c2194ac-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.245:5001/i386", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209393, "uuid": "9d1f38f2-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.245:5001/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209394, "uuid": "9ddeab32-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.251.21.71:11507/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209396, "uuid": "9f0274a6-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.245:5001/bot.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209396, "uuid": "9f02df5b-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.245:5001/armv7l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209396, "uuid": "9f13f966-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ua-gov.info/soft/security/updateV3.23.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209396, "uuid": "9f24c5e0-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.245:5001/android_arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209396, "uuid": "9f3b37a3-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.245:5001/x866", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209397, "uuid": "9f8c236b-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://citra567daftar.com/apps/bojek567_1.1.5.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209397, "uuid": "9f9b0d88-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.245:5001/arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209397, "uuid": "9f9fa23b-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.245:5001/amd64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209397, "uuid": "9fc7e64c-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.245:5001/mipsle", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209398, "uuid": "a0606772-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://s138ku.tech/aplikasi/Summer138.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209400, "uuid": "a165c0b1-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.143.167.16:52080/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209401, "uuid": "a1a8d5da-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.74.35:56819/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209401, "uuid": "a1bd3ee4-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.245:5001/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209401, "uuid": "a1c265f9-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.74.35:56819/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209401, "uuid": "a1c7a75f-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.143.167.16:52080/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209401, "uuid": "a1d28b17-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.245:5001/arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209401, "uuid": "a1e266e8-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.245:5001/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209401, "uuid": "a2000ba6-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.245:5001/android_arm64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209401, "uuid": "a2138b8a-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://t-privateuz.sbs/TikTok18.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209402, "uuid": "a261dcd6-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://stradisamplix.com/api/data/receive", "Tag": [ { "name": " amos", "colour": "#a898f7", "exportable": true, "hide_tag": false }, { "name": " ClickFix", "colour": "#d91408", "exportable": true, "hide_tag": false }, { "name": " macos", "colour": "#670059", "exportable": true, "hide_tag": false }, { "name": "malware_download", "colour": "#da731f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209402, "uuid": "a2853d41-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://peebsjellywoodencrafts.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209408, "uuid": "a5df4b07-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.128.168:41564/Mozi.a", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209408, "uuid": "a60b8c5e-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://mulia88.site/apk/android.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209414, "uuid": "a98b5990-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://file-eu-par-2.gofile.io/download/direct/ab9c8e74-ea91-4f76-b055-30fe4a28c656/REVISED%20PROPOSAL.exe", "Tag": [ { "name": "DattoRMM", "colour": "#167832", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209416, "uuid": "ab10213c-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://accdyn.com/api//builds/9fb2ee90-f18c-4206-91ea-333a467c6863.msi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209424, "uuid": "afebcbf8-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/spExecuter.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209438, "uuid": "b8064e63-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://nolimitslot777.games/aplikasi/Nolimit777.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772209439, "uuid": "b87ce490-13f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-eu-par-1.gofile.io/download/direct/a591db72-4046-4119-b1e3-6b5250e9684d/SafePal-installer.exe", "Tag": [ { "name": "TrustConnect", "colour": "#EFEA3F", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772210289, "uuid": "b3606728-13fa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.106.146.245:5001/arm64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772210291, "uuid": "b422a21e-13fa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.9.197:35305/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772210299, "uuid": "b91b0372-13fa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://meetmeupgooupglemeet.info/GoodgleMeetup/Windows/download.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772210427, "uuid": "0550331d-13fb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.9.197:35305/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772210779, "uuid": "d7352c89-13fb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.204.223:51875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772210840, "uuid": "fbd3a1fc-13fb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.226.133:40969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211135, "uuid": "ab99ea34-13fc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://sbstorage.cfd/Chrome.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Loda", "colour": "#58eac9", "exportable": true, "hide_tag": false }, { "name": "LodaRAT", "colour": "#9499f9", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211198, "uuid": "d14a916c-13fc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.92.19:51879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211262, "uuid": "f726b924-13fc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.0.37:52175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211798, "uuid": "36c80063-13fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.0.37:52175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772211994, "uuid": "ab629b82-13fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.233.171:59928/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212158, "uuid": "0d43da6d-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.40.61:33933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "e3286ce1-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "e3390a29-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "e33a2228-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "e33d4f9f-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "e34cc820-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "e34cc818-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "e34cdc10-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "e34d6d49-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "e34d881a-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212517, "uuid": "e34d8912-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212519, "uuid": "e47682e6-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212524, "uuid": "e7a8ac36-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.13.237.121:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212528, "uuid": "ea01ed00-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212528, "uuid": "ea01f027-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212528, "uuid": "ea072ece-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212528, "uuid": "ea0a9765-13ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212763, "uuid": "75e5c65d-1400-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.89.9:41025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212868, "uuid": "b49dea17-1400-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://sunchernical.com/2026/blessed/SECURED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212869, "uuid": "b4ee8865-1400-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://umxtxhub.za.com/OGR%20SECURE/SECURED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212927, "uuid": "d7512921-1400-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://archive.org/download/0225-r/0225R.png", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212929, "uuid": "d8b898e2-1400-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://excellence02.rf.gd/arquivo_20260227020225.txt", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212989, "uuid": "fc5ebcd1-1400-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.182.193:24121/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212989, "uuid": "fc87de53-1400-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://archive.org/download/optimized_msi_20260226_1507/optimized_MSI.png", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212990, "uuid": "fcf145cc-1400-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://yaso.su/raw/UpxC8OJX", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212991, "uuid": "fd987265-1400-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastefy.app/sLC7Jpkp/raw", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772212991, "uuid": "fdf3a290-1400-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://fil.ydns.eu/wkijh/FnIeaoI.txt", "Tag": [ { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213058, "uuid": "25f5c08d-1401-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.92.19:51879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213109, "uuid": "44033af3-1401-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://eyasinarafat.com/wp-admin/js/opkarig.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213116, "uuid": "47fd697d-1401-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/debug.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213117, "uuid": "48dc232a-1401-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/jack5tr.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213117, "uuid": "48dc2b7f-1401-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/abc1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213117, "uuid": "48ded55c-1401-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/abc3.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213117, "uuid": "48df3ddc-1401-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.44/abc2.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213181, "uuid": "6efdfe24-1401-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://uploads.otzo.com/1D/a5c1D.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213230, "uuid": "8c5206ce-1401-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.kotojuki.com/upload/upl/aIh2Q8_tdPWA9w6hskn5/539869.pdf", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213240, "uuid": "921872f1-1401-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://one-graup.com/LAH.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213300, "uuid": "b5ecfc69-1401-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.56.186:45376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213479, "uuid": "207b49ee-1402-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.40.61:33933/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213480, "uuid": "2125a188-1402-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://api.files.link/v1/p/6eb195dd-ee4b-48a8-8166-346fc97280d7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213594, "uuid": "64fe614a-1402-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.69/cnpilot.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213598, "uuid": "67490e72-1402-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.69/amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213781, "uuid": "d4cd4db1-1402-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.233.171:59928/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772213829, "uuid": "f14f211e-1402-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.239.177:41435/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772214673, "uuid": "e8727fd6-1404-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/mipsle", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772214674, "uuid": "e89f48b1-1404-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772214735, "uuid": "0d17917d-1405-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772214912, "uuid": "769ba940-1405-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/bot.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772214914, "uuid": "77c87e62-1405-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/bot_x86.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772215038, "uuid": "c1cedb64-1405-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.103.47:45045/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772215039, "uuid": "c293ada9-1405-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.192.201:40838/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772215400, "uuid": "99d4a05f-1406-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.178.119:57580/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772215627, "uuid": "20f2041f-1407-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.228.109.209:54558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772215998, "uuid": "fde05432-1407-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.122.234:40013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216110, "uuid": "411b214b-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.255.31:50396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216225, "uuid": "8568df9b-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.182.193:32275/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216347, "uuid": "ce09db19-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/kirk.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216347, "uuid": "ce09df47-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/kirk.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216347, "uuid": "ce0e4ada-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/kirk.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216347, "uuid": "ce0f804b-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/kirk.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216348, "uuid": "ceafc83f-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/kirk.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "d508b8cf-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/kirk.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "d5092e94-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/kirk.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "d5093def-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/kirk.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "d50adcea-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/kirk.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "d50d4ad0-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/kirk.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "d50d4b4b-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/kirk.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "d50d4fa5-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/kirk.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "d50d6f56-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/kirk.powerpc-440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "d510e5b8-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/kirk.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216359, "uuid": "d514e502-1408-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/kirk.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772216953, "uuid": "37955110-140a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.60.27:54243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772217200, "uuid": "cabd1c1b-140a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.178.119:57580/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772217247, "uuid": "e698bfe1-140a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://4sontfzx.quantumloop.digital/?=check&&actmn=vspoFTvpBCFfsGMz", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772217379, "uuid": "3510eeb6-140b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.207.73:55443/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772217439, "uuid": "58f981b1-140b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.202.188:56213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772217560, "uuid": "a14e9459-140b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.179.121:37074/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772217561, "uuid": "a163cf11-140b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.201.15:46464/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772217609, "uuid": "be5921e5-140b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.81.157:42693/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772217923, "uuid": "7951ded6-140c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:56050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772217978, "uuid": "9a4dfed5-140c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:56050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772217979, "uuid": "9ac1e0c7-140c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.175.110:36057/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772218028, "uuid": "b7df9ecc-140c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.207.73:55443/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772218218, "uuid": "29013ab1-140d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.215:44345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772218226, "uuid": "2dfbaa01-140d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.117.225:49492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772218276, "uuid": "4c11d742-140d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.228.48:47053/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772218400, "uuid": "95c74d40-140d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.55:48881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772218627, "uuid": "1ced4d03-140e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://5w2x7glx.pixelpeak.digital/?=check&&actmn=ADUOUQvjCIDAlbbB", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772218697, "uuid": "46c276b9-140e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.60.27:54243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772218899, "uuid": "befb9d60-140e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/silentsiltntxa/silent-core/releases/download/27-02-2026/Silent_Utility_v4.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219166, "uuid": "5e9f148f-140f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Dinonuggys-a1/Luna/refs/heads/main/assets/Software_fargoing.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219167, "uuid": "5eee994d-140f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Dinonuggys-a1/Luna/raw/refs/heads/main/assets/Software_fargoing.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219179, "uuid": "6618960c-140f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.179.121:37074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219288, "uuid": "a6d0e139-140f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/shafhyfox/99-Nights-in-The-Forest-Script/raw/refs/heads/main/Scripts/Script_Nights_The_in_Forest_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219300, "uuid": "ae62a8ea-140f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/shafhyfox/99-Nights-in-The-Forest-Script/main/Scripts/Script_Nights_The_in_Forest_2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219410, "uuid": "efb575c2-140f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/hydrangeapaniculatabokchoi171/Basic-Injecting-code-to-roblox-process/raw/refs/heads/main/Guarrau/roblox_code_Basic_to_process_Injecting_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219410, "uuid": "efb93c65-140f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/hydrangeapaniculatabokchoi171/Basic-Injecting-code-to-roblox-process/main/Guarrau/roblox_code_Basic_to_process_Injecting_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219526, "uuid": "352516fa-1410-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sinkable-catawba849/VapeV4ForRoblox/raw/refs/heads/main/guis/For-Vape-Roblox-avoidable.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219526, "uuid": "3527d434-1410-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sinkable-catawba849/VapeV4ForRoblox/main/guis/For-Vape-Roblox-avoidable.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219537, "uuid": "3b79a24d-1410-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.215:44345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219593, "uuid": "5cf574f7-1410-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.6.112:52395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219836, "uuid": "edf9c7ba-1410-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.24.236:57581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219959, "uuid": "3734d830-1411-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/rd898/package/raw/refs/heads/main/json/1.json", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219961, "uuid": "387045c4-1411-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/rd898/package/refs/heads/main/json/1.json", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772219967, "uuid": "3bbc627a-1411-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.30.130:52296/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772220331, "uuid": "14f84469-1412-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.232.31:33705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772221282, "uuid": "4bb24eff-1414-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.253:45658/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772221527, "uuid": "dd71bec7-1414-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.14.185:58438/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772221944, "uuid": "d61ddcdd-1415-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.132.183.123:38722/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222054, "uuid": "17a9b36f-1416-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.195.183:37185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222214, "uuid": "77267893-1416-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.28.20:43711/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222348, "uuid": "c6e3498f-1416-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nbas1ss/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222350, "uuid": "c8710fa0-1416-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nbas1ss/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222539, "uuid": "38844f6d-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.120.108.86:7883/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222539, "uuid": "38fda48c-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.1.154:8084/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222543, "uuid": "3b783122-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.86.246.233:38185/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222544, "uuid": "3b85f3b9-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.124.33.133/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222544, "uuid": "3bb24798-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.117.6.227:3713/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222544, "uuid": "3bda43e9-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.124.40.3/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222544, "uuid": "3be89594-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.151.243/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222544, "uuid": "3bf202c8-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.33.152.43:48475/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222544, "uuid": "3bf33b5f-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.23.70.129:40762/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222544, "uuid": "3bfd7833-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.213.30.36:13651/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222545, "uuid": "3c3f2c4b-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://137.175.205.63:1476/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222545, "uuid": "3c5f653d-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.122.144.196:54476/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222545, "uuid": "3c8df938-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.142.77.163:8026/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222546, "uuid": "3cf4679e-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.235.194.253/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222546, "uuid": "3cf6864a-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.159.171:86/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222546, "uuid": "3d011070-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.159.171:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222547, "uuid": "3db0828b-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.72.234:86/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222548, "uuid": "3e6576bd-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.72.234:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222549, "uuid": "3ee76591-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.165.6.38:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222550, "uuid": "3f3cbfe1-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.168.249.76:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222550, "uuid": "3fa7a66e-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.209.193.86:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222563, "uuid": "46f9e5f9-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.90.199:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222609, "uuid": "628a83bc-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.35.186:57752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222646, "uuid": "78974702-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jorgeZdark/valorant_servers/refs/heads/main/Phlegethontal/valorant-servers-3.3-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222647, "uuid": "7928b93e-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.180.152.34:8888/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222647, "uuid": "7935a2c5-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jorgeZdark/valorant_servers/raw/refs/heads/main/Phlegethontal/valorant-servers-3.3-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222648, "uuid": "7986c300-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://86.106.143.213/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222648, "uuid": "79a38ac9-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.110.40.60:8443/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222660, "uuid": "80f8ebec-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.138.112.209:1112/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222660, "uuid": "81176280-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.43.58.124:4444/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222660, "uuid": "81275e1c-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.180.152.140:8888/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222661, "uuid": "816a1249-1417-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.232.3:39972/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222948, "uuid": "2ccba670-1418-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/classyshivy/suno-api-private/refs/heads/main/src/app/docs/private-api-suno-hypopteral.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772222960, "uuid": "3384b9f4-1418-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/classyshivy/suno-api-private/raw/refs/heads/main/src/app/docs/private-api-suno-hypopteral.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223007, "uuid": "4fa747f3-1418-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/abloe666/opensrc/main/src/Software_3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223008, "uuid": "50187f80-1418-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/abloe666/opensrc/raw/refs/heads/main/src/Software_3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223127, "uuid": "97475fc3-1418-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sherinshamr/neon-yard-shop/refs/heads/master/src/core/models/yard-shop-neon-2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223143, "uuid": "a0b605ef-1418-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sherinshamr/neon-yard-shop/raw/refs/heads/master/src/core/models/yard-shop-neon-2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223187, "uuid": "bb1c0c00-1418-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Paradox251/Lynx/refs/heads/main/counterreprisal/Software-1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223189, "uuid": "bc427fa5-1418-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Paradox251/Lynx/raw/refs/heads/main/counterreprisal/Software-1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223426, "uuid": "49aa053a-1419-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/farhangalih14/nixda-vm-perm/main/Framework/ext/freetype/include/freetype/config/nixda_vm_perm_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223427, "uuid": "4a2329c9-1419-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/farhangalih14/nixda-vm-perm/raw/refs/heads/main/Framework/ext/freetype/include/freetype/config/nixda_vm_perm_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223487, "uuid": "6dc57626-1419-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Rakkibronze/Eon-Launcher/refs/heads/master/FortniteLauncher/Source/UI/Pages/ServerStatus/Eon_Launcher_eruct.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223487, "uuid": "6ddb6359-1419-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Rakkibronze/Eon-Launcher/raw/refs/heads/master/FortniteLauncher/Source/UI/Pages/ServerStatus/Eon_Launcher_eruct.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223547, "uuid": "91e9ea4b-1419-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/TheCursedOn1/Open-Aimbot/main/leed/Open_Aimbot_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223559, "uuid": "989f55f2-1419-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.165.143:33748/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223559, "uuid": "98fc52b7-1419-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/TheCursedOn1/Open-Aimbot/raw/refs/heads/main/leed/Open_Aimbot_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223608, "uuid": "b5f7c8dd-1419-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/MB389347/Fortnite-Chaos/refs/heads/main/interlaminar/Fortnite_Chaos_v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223622, "uuid": "be134ee2-1419-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/MB389347/Fortnite-Chaos/raw/refs/heads/main/interlaminar/Fortnite_Chaos_v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223625, "uuid": "c037fd37-1419-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.14.185:58438/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223626, "uuid": "c0bdac05-1419-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.172.59:49503/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223678, "uuid": "dffb51f4-1419-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.222.98:36106/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223789, "uuid": "221ac539-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.52/8UsA.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "223eef71-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.52/bins/mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "22415d14-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.52/bins/spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "2268e464-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "226e640c-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "226e7354-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "226e93e6-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "226eb70f-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "226ebb18-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "226ebde6-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "226ecab2-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "226ecfb9-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "226ed7d0-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "226f24a4-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "226f8fcd-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "22704c65-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223790, "uuid": "227053b6-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223800, "uuid": "28622b2b-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772223863, "uuid": "4dd0f54c-141a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.117.56:56305/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772224342, "uuid": "6b7976d3-141b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.112.129:52039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772224465, "uuid": "b4818b77-141b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.222.98:36106/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772224523, "uuid": "d735e555-141b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.242.236:59958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772224706, "uuid": "44b3c063-141c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.50:35118/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772224761, "uuid": "6559f8c3-141c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.99.253:45658/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772224940, "uuid": "cfee147b-141c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.28.20:43711/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772225120, "uuid": "3b29d476-141d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:57805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772225468, "uuid": "0a73f587-141e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/FachrulRafli/Fortnite-Chaos/refs/heads/main/fady/Fortnite_Chaos_v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772225468, "uuid": "0aa16fd6-141e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/FachrulRafli/Fortnite-Chaos/raw/refs/heads/main/fady/Fortnite_Chaos_v2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772225587, "uuid": "51c2db15-141e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Masbe2117/utility-for-fortnite-crosshair-helper/raw/refs/heads/main/mesomorphy/crosshair-utility-fortnite-for-helper-v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772225601, "uuid": "59bc5edc-141e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Masbe2117/utility-for-fortnite-crosshair-helper/main/mesomorphy/crosshair-utility-fortnite-for-helper-v2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772225719, "uuid": "a0552d3c-141e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.83.77:55385/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772225831, "uuid": "e2c4df0a-141e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.112.129:52039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772226198, "uuid": "bd803147-141f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.132.183.123:38722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772226217, "uuid": "c9251bde-141f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.21.241:47571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772226373, "uuid": "260824e4-1420-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.242.236:59958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772226440, "uuid": "4dd37747-1420-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.124:59533/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772226609, "uuid": "b27d6683-1420-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/kenshigenesis-jpg/utility-for-fortnite-peek-script/refs/heads/main/histometabasis/for-utility-script-peek-fortnite-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772226609, "uuid": "b2b52286-1420-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/kenshigenesis-jpg/utility-for-fortnite-peek-script/raw/refs/heads/main/histometabasis/for-utility-script-peek-fortnite-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772226666, "uuid": "d49212e1-1420-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/SYS123232/helper-for-fortnite-xp-bot/main/heteropod/for_bot_xp_helper_fortnite_2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772226670, "uuid": "d6f87daa-1420-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/SYS123232/helper-for-fortnite-xp-bot/raw/refs/heads/main/heteropod/for_bot_xp_helper_fortnite_2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772226677, "uuid": "dafdb943-1420-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.50:35118/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772226729, "uuid": "fa12699c-1420-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Vitor-gf/cs2/main/2010/sharp/stripper/cs-3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772226732, "uuid": "fc49071c-1420-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Vitor-gf/cs2/raw/refs/heads/main/2010/sharp/stripper/cs-3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772226916, "uuid": "69b2f304-1421-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.25.44:45432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772227358, "uuid": "7116af34-1422-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.198.65:39858/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772227510, "uuid": "cbf7bbf5-1422-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/elfkamikadze38o1ez/fortnite-private-panel-2026/releases/download/new/FPP-Setup-6.4.2-x64.rar", "Tag": [ { "name": "pw-9923", "colour": "#93f70a", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772227812, "uuid": "7fac4bd2-1423-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.120.17:60232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772228119, "uuid": "36aa91d1-1424-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.25.44:45432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772228297, "uuid": "a11e32a6-1424-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.142.50:53936/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772228954, "uuid": "28bc4b8c-1426-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.97.125:60898/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772229068, "uuid": "6c9fa55f-1426-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.243.133:46353/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772229311, "uuid": "fd473915-1426-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.120.17:60232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772229737, "uuid": "faf76d36-1427-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.223.166:38312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772229786, "uuid": "1825acff-1428-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/caiomoraes22/repositorio/refs/heads/main/project/1024.c", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772229788, "uuid": "198c9889-1428-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/caiomoraes22/repositorio/raw/refs/heads/main/project/1024.c", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772229910, "uuid": "62065a37-1428-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.205.171:43120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772229914, "uuid": "64b26482-1428-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.153.45:59709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772230053, "uuid": "b74e8279-1428-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.195.117:53851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772230098, "uuid": "d254de3d-1428-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.90.172:46346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772230267, "uuid": "372d8ea9-1429-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/GOLDENUNICON/triplesec/refs/heads/main/src/Modules/Software-1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772230283, "uuid": "40b6fd89-1429-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/GOLDENUNICON/triplesec/raw/refs/heads/main/src/Modules/Software-1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772230519, "uuid": "cd0add3f-1429-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.215.129:34001/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772230626, "uuid": "0d46c869-142a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/akmal101011/Vouch/raw/refs/heads/main/internal/logging/Software_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772230637, "uuid": "135b9ba6-142a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.169.196:59816/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772230640, "uuid": "154128db-142a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/akmal101011/Vouch/main/internal/logging/Software_2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772230746, "uuid": "544d6e8c-142a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/dip123in/ROBLOX-MACRO-V3.0.0/main/Language/ROBLO-MACR-1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772230746, "uuid": "545c65a3-142a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/dip123in/ROBLOX-MACRO-V3.0.0/raw/refs/heads/main/Language/ROBLO-MACR-1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772230868, "uuid": "9d1c7694-142a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/hamzaifan789/ROBLOX-MACRO-V3.0.0/refs/heads/main/Language/ROBLO_MACR_v3.3-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772230870, "uuid": "9eb302cd-142a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/hamzaifan789/ROBLOX-MACRO-V3.0.0/raw/refs/heads/main/Language/ROBLO_MACR_v3.3-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772230926, "uuid": "bff8e615-142a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/franklainkoloko/Roblox-multi-tool/raw/refs/heads/main/data/Roblox_multi_tool_v2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772230929, "uuid": "c19da7cd-142a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/franklainkoloko/Roblox-multi-tool/main/data/Roblox_multi_tool_v2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772231046, "uuid": "079665f3-142b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/tahahosseini8/untaken/main/acidoproteolytic/Software-v2.0-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772231047, "uuid": "07b4bd92-142b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/tahahosseini8/untaken/raw/refs/heads/main/acidoproteolytic/Software-v2.0-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772231055, "uuid": "0cda8485-142b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.104.38:47694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772231108, "uuid": "2c45c96c-142b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/hamigua8964/Luna/main/Executor/Resources/Software-v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772231108, "uuid": "2c682719-142b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/hamigua8964/Luna/raw/refs/heads/main/Executor/Resources/Software-v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772231165, "uuid": "4e4e032b-142b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/abdullah7cv/Axios-with-proxies/refs/heads/main/opalish/proxies-Axios-with-2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772231286, "uuid": "9650b10d-142b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Sammy18032100/QuantDinger/refs/heads/main/quantdinger_vue/src/mock/services/Dinger_Quant_v2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772231286, "uuid": "96753a64-142b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Sammy18032100/QuantDinger/raw/refs/heads/main/quantdinger_vue/src/mock/services/Dinger_Quant_v2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772231296, "uuid": "9c7df917-142b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.205.171:43120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772231838, "uuid": "dfb47c49-142c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.195.117:53851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772231972, "uuid": "2f5931b1-142d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.51.202:48383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772232138, "uuid": "9274fbaf-142d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.215.129:34001/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772232194, "uuid": "b36a5fd2-142d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.104.38:47694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772232425, "uuid": "3d827453-142e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/NusaibaTworat2005/AlyaBot-MD/raw/refs/heads/main/commands/utils/MD-Alya-Bot-v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772232425, "uuid": "3d9460ed-142e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/NusaibaTworat2005/AlyaBot-MD/main/commands/utils/MD-Alya-Bot-v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772232500, "uuid": "69b9bdf4-142e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.103.153:50879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772232786, "uuid": "148ac446-142f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ltaycn301/Roblox-Zenith/raw/refs/heads/master/Gurneyite/Zenith-Roblox-v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772232786, "uuid": "14b8d836-142f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ltaycn301/Roblox-Zenith/refs/heads/master/Gurneyite/Zenith-Roblox-v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772232846, "uuid": "37fa238c-142f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Andreamana25/Roblox-Delta/master/sparch/Delta_Roblox_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772232847, "uuid": "39152995-142f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Andreamana25/Roblox-Delta/raw/refs/heads/master/sparch/Delta_Roblox_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772232853, "uuid": "3c77336d-142f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.142.50:53936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772232854, "uuid": "3d0763af-142f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.237.2:41578/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772233027, "uuid": "a42e2dd1-142f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gnchdcvq.webweave.digital/?=check&&actmn=NjuHxFSyvBQJPyck", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772233453, "uuid": "a1dd2e75-1430-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.125.250:46218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772233513, "uuid": "c60e7fa1-1430-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.119.181:52470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772233568, "uuid": "e66fda4e-1430-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.90.172:46346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772233762, "uuid": "5a129f81-1431-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.53.185:60565/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772234117, "uuid": "2de67566-1432-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.94.24:42485/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772234227, "uuid": "6fb005cb-1432-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.237.2:41578/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772234656, "uuid": "6f44ffbe-1433-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.125.250:46218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772234839, "uuid": "dc290fc4-1433-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.103.153:50879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772235019, "uuid": "47655f26-1434-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.119.181:52470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772235068, "uuid": "64cc6fc8-1434-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.43.137.105:57979/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772235433, "uuid": "3e744184-1435-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.239.111:46036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772235744, "uuid": "f76207a9-1435-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.139.254:41764/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236148, "uuid": "e82c181f-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23/Phix/bin.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "ea91b2ea-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23/Phix/bin.arc", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "eabbc8f1-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23/Phix/bin.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "ead61446-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23.ptr.pfcloud.network/Phix/bin.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "ead89d95-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23/Phix/bin.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "eaf4cb00-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23/Phix/bin.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "eaf5e101-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23.ptr.pfcloud.network/Phix/bin.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "eafa7fcd-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23/Phix/bin.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "eafbac40-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23/Phix/bin.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "eb00861e-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23.ptr.pfcloud.network/0x83911d24Fx.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "eb04f3a2-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23/Phix/bin.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "eb083050-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23.ptr.pfcloud.network/Phix/bin.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "eb083c6c-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23.ptr.pfcloud.network/Phix/bin.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "eb088a19-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23.ptr.pfcloud.network/Phix/bin.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "eb114c16-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23.ptr.pfcloud.network/Phix/bin.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "eb11e893-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23.ptr.pfcloud.network/Phix/bin.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "eb12a206-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23/Phix/bin.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "eb144025-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23/Phix/bin.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236152, "uuid": "eb144b85-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23/Phix/bin.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236153, "uuid": "eb1ba038-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23/Phix/bin.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236153, "uuid": "eb203186-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23.ptr.pfcloud.network/Phix/bin.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236153, "uuid": "eb207adf-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23.ptr.pfcloud.network/Phix/bin.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236154, "uuid": "ebeedba0-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23.ptr.pfcloud.network/Phix/bin.arc", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236154, "uuid": "ec1356b4-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23.ptr.pfcloud.network/Phix/bin.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236154, "uuid": "ec17f30f-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.81.157:42693/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236155, "uuid": "ec527036-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.139.254:41764/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236155, "uuid": "ec7d97cb-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23.ptr.pfcloud.network/Phix/bin.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236159, "uuid": "eedb0913-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23/0x83911d24Fx.sh", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236162, "uuid": "f0aeb19a-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23.ptr.pfcloud.network/Phix/bin.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236165, "uuid": "f2b37a20-1436-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.23/Phix/bin.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236280, "uuid": "37341607-1437-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.43.137.105:57979/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209385, "uuid": "98aa2766-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.143.167.16", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772160485, "uuid": "bd992b64-1386-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.65.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200625, "uuid": "33182784-13e4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.111.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772218206, "uuid": "2217c458-140d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.117.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772210286, "uuid": "b1654670-13fa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.9.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772183344, "uuid": "f70e6944-13bb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.235.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772221925, "uuid": "cb0ce4d5-1415-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.132.183.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222165, "uuid": "5a19b2db-1416-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.28.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772217545, "uuid": "98125981-140b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.201.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222525, "uuid": "307de35a-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.165.6.38", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222525, "uuid": "30831cd1-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.168.249.76", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201585, "uuid": "6f6ed428-13e6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.13.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772192045, "uuid": "38dd1276-13d0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.143.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209385, "uuid": "989d25b4-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.204.212", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204884, "uuid": "1db19f4c-13ee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.145.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157123, "uuid": "ea0aa9d3-137e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.11.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772182865, "uuid": "d98c3ae0-13ba-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.138.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772185745, "uuid": "8da225f2-13c1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.144.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772191025, "uuid": "d8cd2055-13cd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.26.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216945, "uuid": "32585b21-140a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.60.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772223606, "uuid": "b4faffd9-1419-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.172.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772215025, "uuid": "b9fef998-1405-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.192.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772175425, "uuid": "86e19559-13a9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.216.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772216106, "uuid": "3e672838-1408-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.255.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772176265, "uuid": "7b9fcc21-13ab-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.48.204", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772220306, "uuid": "05b50660-1412-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.232.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200325, "uuid": "80679342-13e3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.97.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772158865, "uuid": "f7e1f78e-1382-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.23.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772194384, "uuid": "ab67d1fa-13d5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.29.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772233745, "uuid": "4fee95a0-1431-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.53.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199905, "uuid": "860a0d4d-13e2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.182.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772228944, "uuid": "2294ff2c-1426-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.97.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772197627, "uuid": "37e22e0a-13dd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.151.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772182685, "uuid": "6dfc4385-13ba-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.172.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772194807, "uuid": "a7279397-13d6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.8.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772175307, "uuid": "4012baae-13a9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.153.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772204884, "uuid": "1db19258-13ee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.36.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772180825, "uuid": "19505bec-13b6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.19.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772226185, "uuid": "b5dbedb1-141f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.21.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772191807, "uuid": "aacfc03f-13cf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.149.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155805, "uuid": "d86c63a3-137b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.45.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772190907, "uuid": "92c0b97f-13cd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.187.253.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222525, "uuid": "3085bb54-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.213.30.36", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222525, "uuid": "307e0c9a-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.159.171", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222525, "uuid": "307bcb51-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.72.234", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772183465, "uuid": "3efe0883-13bc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.0.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772230025, "uuid": "a6b20ea4-1428-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.195.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222644, "uuid": "77ab3f74-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.43.58.124", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772178066, "uuid": "acb6d194-13af-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.179.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772155325, "uuid": "ba2ba5b6-137a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.240.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772181125, "uuid": "cbef97a3-13b6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.234.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772224684, "uuid": "3781758b-141c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.131.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772192824, "uuid": "09329bd4-13d2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.133.222.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772169125, "uuid": "db673025-139a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.56.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772158265, "uuid": "9243413f-1381-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.141.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222525, "uuid": "307df282-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.209.193.86", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157123, "uuid": "ea0abc94-137e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.234.109.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772233445, "uuid": "9d058e70-1430-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.125.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772162524, "uuid": "7d286a52-138b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.117.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198707, "uuid": "bb9cb84d-13df-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.134.22.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772168825, "uuid": "2899c32b-139a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.234.182.193", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772215985, "uuid": "f63c9025-1407-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.122.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772187185, "uuid": "e866b403-13c4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.83.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772229724, "uuid": "f37445c3-1427-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.223.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772218265, "uuid": "452c09ac-140d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.228.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772173924, "uuid": "080ed828-13a6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.74.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772154424, "uuid": "a142cd12-1378-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.67.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772192885, "uuid": "2dafdbf5-13d2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.192.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772171824, "uuid": "247e6934-13a1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.252.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772152745, "uuid": "b84a8481-1374-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.8.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772170624, "uuid": "5903570a-139e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.2.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222525, "uuid": "307c9311-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "137.175.205.63", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207707, "uuid": "b005a13f-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.101.164", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207707, "uuid": "b004ba70-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.105.45", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207766, "uuid": "d3463dc7-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.108.207", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207707, "uuid": "b0044a42-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.114.22", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207707, "uuid": "b0045f59-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.115.244", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207707, "uuid": "b0041a67-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.91.24", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207707, "uuid": "b004f213-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.92.169", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207885, "uuid": "1a186e06-13f5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.92.176", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207707, "uuid": "b0052b4f-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.92.187", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207707, "uuid": "b004f850-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.92.199", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207707, "uuid": "b005bf9e-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.92.213", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207707, "uuid": "b0042e7f-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.92.217", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207707, "uuid": "b0053d26-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.94.254", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207707, "uuid": "b0056e78-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.96.63", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222525, "uuid": "307dc2c7-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.235.194.253", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207707, "uuid": "b004525f-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.86.116.191", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772228285, "uuid": "99a359a9-1424-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.142.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772229906, "uuid": "5f9e7306-1428-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.153.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772235065, "uuid": "6324abd9-1434-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.43.137.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199485, "uuid": "8b4b1d8a-13e1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.109.190.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212145, "uuid": "0559ef1c-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.40.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222585, "uuid": "548407d7-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.35.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772233506, "uuid": "c1e59ac3-1430-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.119.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772169785, "uuid": "64f7214e-139c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.191.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772187365, "uuid": "5388e9a3-13c5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.56.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772234105, "uuid": "26c6f83f-1432-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.94.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772194265, "uuid": "642a276a-13d5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.165.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772185025, "uuid": "e0c31765-13bf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.45.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772166186, "uuid": "03a85397-1394-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.171.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772163425, "uuid": "964734f4-138d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.224.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772173684, "uuid": "79140a1a-13a5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.143.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772232844, "uuid": "371a09de-142f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.237.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772174284, "uuid": "de91f1e5-13a6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.238.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772177886, "uuid": "41519cc1-13af-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.204.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772203684, "uuid": "528cc1b6-13eb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.81.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772150944, "uuid": "871364f1-1370-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.112.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772170506, "uuid": "12bc5112-139e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.164.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772200506, "uuid": "ec344981-13e3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.56.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772188085, "uuid": "008ae2e3-13c7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.31.201.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222525, "uuid": "30802871-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "211.33.152.43", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207707, "uuid": "b004ac29-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "212.224.107.246", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "redir-302", "colour": "#484AEC", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207707, "uuid": "b0044cd3-13f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.126.239.98", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772217965, "uuid": "92930a3a-140c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.175.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222045, "uuid": "12389be1-1416-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.195.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772170624, "uuid": "5903200c-139e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.202.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212745, "uuid": "6b1d5c20-1400-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.89.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772179625, "uuid": "4dd71d1a-13b3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.244.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198465, "uuid": "2bdd3da4-13df-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.54.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222644, "uuid": "77aade82-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.13.232.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772168585, "uuid": "9a0198af-1399-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.22.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772224506, "uuid": "cd38055a-141b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.242.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772235724, "uuid": "ebf8c4c5-1435-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.139.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772187665, "uuid": "06443398-13c6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.156.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772162406, "uuid": "36b0e9bb-138b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.213.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772186706, "uuid": "cabe9516-13c3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.85.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772221507, "uuid": "d19e7814-1414-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.14.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201466, "uuid": "28204040-13e6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.202.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772192824, "uuid": "094609cf-13d2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "2azr2jei.coreforge.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222644, "uuid": "77aa95e7-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.180.152.140", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222644, "uuid": "77aa664d-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.180.152.34", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772194145, "uuid": "1cbe580e-13d5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.190.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772205185, "uuid": "d132db1f-13ee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.176.1.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772185086, "uuid": "04e487d2-13c0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.149.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772198646, "uuid": "97aad535-13df-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.15.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772160606, "uuid": "05bcd531-1387-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.204.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207346, "uuid": "d8e799a3-13f3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.79.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772229906, "uuid": "5f9e4c26-1428-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.205.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772194625, "uuid": "3a882f83-13d6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.232.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772171824, "uuid": "247e655f-13a1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.220.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772160485, "uuid": "bd992fec-1386-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.214.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772215384, "uuid": "9059d9e4-1406-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.178.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772217606, "uuid": "bc8591d4-140b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.81.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772224325, "uuid": "615cefba-141b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.112.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209385, "uuid": "98afb73e-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.242.128.168", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772232485, "uuid": "611e6f5d-142e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.103.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772183524, "uuid": "62560816-13bc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.65.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772201645, "uuid": "92bf6f02-13e6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.16.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772179325, "uuid": "9b375628-13b2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.198.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212506, "uuid": "dcbd030a-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.13.237.121", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772236143, "uuid": "e58cf689-1436-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.135.194.23", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772236143, "uuid": "e5a4be54-1436-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.135.194.23.ptr.pfcloud.network" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212506, "uuid": "dcbac260-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.207.211", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222525, "uuid": "308430e1-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.124.33.133", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222525, "uuid": "30856f1d-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.124.40.3", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772217245, "uuid": "e53752fd-140a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "4sontfzx.quantumloop.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772195108, "uuid": "5aa6aa10-13d7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.66.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222644, "uuid": "77aa691c-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.110.40.60", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772207406, "uuid": "fce16fe4-13f3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.99.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222525, "uuid": "30849997-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.90.199", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772230505, "uuid": "c51eedb1-1429-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.215.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772217545, "uuid": "981241d1-140b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.179.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772171705, "uuid": "dd6156fd-13a0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.250.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772218625, "uuid": "1bbe439d-140e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "5w2x7glx.pixelpeak.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772177765, "uuid": "f98505b7-13ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.158.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772171406, "uuid": "2b32ddc2-13a0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.135.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213825, "uuid": "eea08289-1402-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.239.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772202965, "uuid": "a5c7b3db-13e9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.29.46.146", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772176265, "uuid": "7ba0d2f8-13ab-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.90.185.24", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GDriveVerify", "colour": "#61d8bd", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "NewContract", "colour": "#407d41", "exportable": true, "hide_tag": false }, { "name": "Odyssey", "colour": "#84c493", "exportable": true, "hide_tag": false }, { "name": "UnknownUse", "colour": "#b65676", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222644, "uuid": "77aa4599-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "8.138.112.209", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772223785, "uuid": "1f3b9aa5-141a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.223.44.153", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222525, "uuid": "307e3dfc-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.151.243", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772215624, "uuid": "1f3df392-1407-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.228.109.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772222644, "uuid": "77ab1997-1417-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "86.106.143.213", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209385, "uuid": "98926c27-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.106.146.245", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772188325, "uuid": "8fa8d668-13c7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.220.116.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209386, "uuid": "98db0a6b-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "accdyn.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208546, "uuid": "a4153325-13f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "amaranthinerose.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209386, "uuid": "98bd1900-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "api.aloparatoriuz.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208666, "uuid": "eba096cd-13f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "babakbaru.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208666, "uuid": "eba3d790-13f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bnet-api.playm8ru.win" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208668, "uuid": "ecdb10ba-13f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bnet.playm8ru.win" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208666, "uuid": "ebafb74d-13f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bunq.appswifthub.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209386, "uuid": "98d9b058-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "citra567daftar.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209388, "uuid": "99fd13c8-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-eu-par-1.gofile.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208666, "uuid": "eba0f98a-13f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "conscomms.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212926, "uuid": "d6cd31ef-1400-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "excellence02.rf.gd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213106, "uuid": "4230dc9b-1401-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "eyasinarafat.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212988, "uuid": "fc2a44c4-1400-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fil.ydns.eu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208666, "uuid": "eba4a2c3-13f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fkwy66.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772199845, "uuid": "6265c7d6-13e2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "gaos1opo.dataspark.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208666, "uuid": "ebc1ea55-13f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "gettpose2far.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772233025, "uuid": "a2dd4d49-142f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "gnchdcvq.webweave.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208907, "uuid": "7b58c315-13f7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hsk-new.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772157425, "uuid": "9df58db7-137f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "id8654.cfd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772184426, "uuid": "7b9fb0da-13be-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "l3jvnuw2.smartcanvas.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208546, "uuid": "a4136b29-13f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "larrycornies.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772178848, "uuid": "7ebf606c-13b1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "loader-400.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209386, "uuid": "990e2117-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lun.marvek.live" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209386, "uuid": "98c77fec-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "meetmeupgooupglemeet.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772176266, "uuid": "7ba80dc4-13ab-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "modsfire.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209386, "uuid": "98db2387-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "mulia88.site" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208666, "uuid": "eb9fe8fb-13f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "mvirdi.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209386, "uuid": "98dd7129-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "nolimitslot777.games" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208666, "uuid": "eb9e36a3-13f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "paper0post.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209386, "uuid": "98e3631a-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "peebsjellywoodencrafts.screenconnect.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209386, "uuid": "98cd0a82-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "s138ku.tech" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772211128, "uuid": "a711516d-13fc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "sbstorage.cfd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208666, "uuid": "eba403f5-13f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ssdocinfo.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208666, "uuid": "eb9ee0eb-13f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "stau4.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209386, "uuid": "98b4e294-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "stradisamplix.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212866, "uuid": "b3151c43-1400-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "sunchernical.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209386, "uuid": "98c2d5d2-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "t-privateuz.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772209386, "uuid": "98df7936-13f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ua-gov.info" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772212866, "uuid": "b341376d-1400-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "umxtxhub.za.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213165, "uuid": "6593604c-1401-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "uploads.otzo.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772208666, "uuid": "eba0792f-13f6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "worcesteronline.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772178846, "uuid": "7d9162c9-13b1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "wpgbf1zg-5500.euw.devtunnels.ms" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772213226, "uuid": "899a1187-1401-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.kotojuki.com" } ] } }