{ "Event": { "published": true, "date": "2026-02-23", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-23", "timestamp": 1771892119, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "e9ba46f6-d89e-47ee-a986-25d962ce7aac", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1771804936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771804936, "uuid": "a772f4a7-f52b-4b94-b5c0-abac65d08f1a", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771804936, "uuid": "19612b12-1c6d-462b-96ac-e2a3f7c6241a", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771804936, "uuid": "a3cee274-7436-4c1f-ab41-2bf17d77aec3", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771804936, "uuid": "6baca540-55d0-4776-a9ac-52e097d7c230", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771804936, "uuid": "2c6508bc-e802-41e2-a232-906cd61d0ef3", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24c33aae-0f02-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771806148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771806148, "uuid": "234d665f-73a1-4530-ae3f-1de144f17c50", "comment": "Malware payload", "value": "0b9761e74b727c347df9a4c41bf9d958", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771806148, "uuid": "0508d548-6e22-4193-be3d-c0ebd692d026", "comment": "Malware payload", "value": "854e92d967c6d8e8a51797e43663301dbfb81d2c559a70eab495726af8d66eeb", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771806148, "uuid": "5bdbe767-a4c9-4ec4-b4f2-be035cb0a75d", "value": "T19A31498FAC97602047A3E029567BD0247876901B36498488B66EC161AF642F9D2E3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771806148, "uuid": "42a9af5d-1375-4c67-88c6-55e1e5a6a45d", "value": "24:rOQRW8dX5htHqyiqMYTR97oMT8XgSefD2WDs1V0rq2Rn:dZHrPPffZdDY6n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771806148, "uuid": "61fa77aa-9e6d-498a-b397-32f6fc89867e", "value": 1811, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771806148, "uuid": "11d0db48-0fdc-4779-a2c5-406b6ba61894", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771806370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771806370, "uuid": "24efd066-19fe-4b58-8c09-43a0bd3fdef6", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771806370, "uuid": "b72982c7-6080-4364-b1ae-7a11478cc732", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771806370, "uuid": "7a9e0a6e-7ca1-4365-bd0a-6c4d87608c16", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771806370, "uuid": "e4f6fd6c-e9a5-4692-b636-eca787f9e024", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771806370, "uuid": "a1886ceb-3be4-4f0a-9c99-4d9ac70b6a5a", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60e5dea2-1053-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771808571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771808571, "uuid": "df324d4d-3952-4137-8bb1-11cee3c3b488", "comment": "Malware payload (Mirai)", "value": "6bc6ff5bc5781ac0e05b90135a5d8979", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771808571, "uuid": "ba8e8f30-1765-4df6-b9f5-dc8caf59c369", "comment": "Malware payload (Mirai)", "value": "cbe6d5952e69eb67539aea020e117bc3303c48e7fbdaa2ba348e6927836b8b35", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808571, "uuid": "6c26b288-0d4e-48f0-ba71-036040938d5c", "value": "T163157C99E787E0F2F56300F1025EDBF61934A12A5013FAF6FF46266374327A16F162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808571, "uuid": "ff76a419-59b5-4748-ba83-12a3a661189c", "value": "12288:jnMHe5HWW0hdwhc9Yw6aGZZyLqp/egNKUCdl5Dl9KvZ/Pyt/4xc6FlYsLu:bMHeRWRhdwhvoGfyq/eggtD5DYZ00x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771808571, "uuid": "1239820c-ab85-49c9-aab6-b1c043df5041", "value": 923288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808571, "uuid": "8b9f0564-d1c2-414d-b194-e4b8f8dc94c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c032dbaa-1053-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771808731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771808731, "uuid": "2e4e222e-e81f-40f8-9e63-98259fbc404d", "comment": "Malware payload (Mirai)", "value": "f21c643bea00165d20bf2e588b712383", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771808731, "uuid": "b3c829d6-96f2-4528-a9b8-d800f9675eac", "comment": "Malware payload (Mirai)", "value": "a68b3b51fe242ae35741a819cce1222485501446202ac4adf7445c4243b292c1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808731, "uuid": "4a277ddd-0f50-4a47-adc7-6240db4ff6d0", "value": "T119E3985A7E228F6EF269877047F78E30A75877DA26E1D580E16CE5401F202CD641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808731, "uuid": "966ff73e-72e7-419b-bbc4-8c27820483e0", "value": "3072:PEfzxaksvLFklnNSTZQa087Qwo2BbKaGNTXJw1UB:PEfdnsDFk9NyZQ6f5B8iCB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771808731, "uuid": "1b593a3b-3810-48b2-92a5-c5006e83f70f", "value": 145620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808731, "uuid": "bc9707d9-b345-459f-9901-1edc8fd9a8cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5def612-1053-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771808821, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771808821, "uuid": "4a25dfa2-95d9-45ac-9b5b-00ae1ced3f7c", "comment": "Malware payload (Mirai)", "value": "c4477fac81ee6e98631aa0b28a1fc35d", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771808821, "uuid": "115ea8d3-de57-4ca7-85c9-312d0c53241c", "comment": "Malware payload (Mirai)", "value": "577501bc8e4dd6ce74fe4496624a3c568457e210c724d01cb87eb874cceac511", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808821, "uuid": "16635ea9-6252-499d-a6ba-34932e7c00f7", "value": "T1CF33F1AE96E68FC5E4756131980E27438928B3A707C4C897F5CC31B68B7B7611B1C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808821, "uuid": "44f7b9be-6710-4565-8ccd-3d1576a8e695", "value": "1536:K81XwgDknGmc/9uUADvvtasqb2Mfo4JOdEJnouy84:j1hknGmc4Ri2Uo4EEZout4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771808821, "uuid": "7750d2fc-8385-4734-9607-f3fa51e99851", "value": 52748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808821, "uuid": "f6c9d82b-63bf-43bf-b5ae-cb6afa25f820", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f64e56b9-1053-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771808822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771808822, "uuid": "bc6ad3e7-291a-40bf-9f6a-04e09de7fb1f", "comment": "Malware payload (Mirai)", "value": "f61e60ea527a2e3f82703396d9633f2a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771808822, "uuid": "d2e36b43-1ca7-4db9-af83-2e32cb91ffb3", "comment": "Malware payload (Mirai)", "value": "07a96be99fcefc792a2e6b1794f69131bb141eac893c68d5391cba38cb72f81d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808822, "uuid": "e33d05d5-1cc2-4481-8275-80006a404ef3", "value": "T189B33902B71D0F43D1632CF02B7B1BE19799FEA119F4A580712EFAC992759F62146E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808822, "uuid": "70471a69-cb58-4d53-b2b3-e0759d94f7eb", "value": "1536:vgMMoU4uBuf24G/KVxDpMaCOPJ+BqrlgjS/N+rH/KUlv0B+4ctzB2fOnp50UH:vh8qRHNJ+BkaG0Rlvo+NJzH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771808822, "uuid": "d0789212-dc9c-4675-b76a-2e603baf0e84", "value": 117208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808822, "uuid": "011c96ec-df61-4cb9-a56a-382dd8a37fdd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d951cd7-1054-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771808915, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771808915, "uuid": "c6cb04cb-3a65-44de-b902-ef0aa7acc9c6", "comment": "Malware payload (Mirai)", "value": "6999ffe6cd79c6ff4f6a9ec37cc3cee7", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771808915, "uuid": "6b1c3876-8071-4e6a-a624-bdd44df4d39c", "comment": "Malware payload (Mirai)", "value": "cfa536d5a3c4a4cb1b96e87fc3403befdb5984db09ee667397c2fdb722b330d5", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808915, "uuid": "3bb9418d-dc36-40d1-9d45-0371d39c0612", "value": "T19AE47D9CFE4E3C42E2D7E3789E4D87E1B22771E0D32391A37982434CD5CA9D98BA15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808915, "uuid": "c6b0eb44-d59a-4862-b5a7-be7a749a74a6", "value": "12288:/0k69XypvaaqMZeghH3FUa/ubu83LfWg//Wnde0UT97YRw5dWMTM1tW:d6kvaaJXFUa/uqALe8Ugi7eMH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771808915, "uuid": "591c4604-f096-4bfc-8794-cc74b2a8af3c", "value": 697648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808915, "uuid": "f256915c-17d3-4e44-b4f6-c7b5008757df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ad40f8e-1054-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771809071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809071, "uuid": "fa801314-92eb-41a4-b855-f3e851dd5b0a", "comment": "Malware payload (Mirai)", "value": "c9da4cd73435e75dd10a51f67b7b27fc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809071, "uuid": "a8100bd8-eb79-4d10-856a-21c999fd7c1d", "comment": "Malware payload (Mirai)", "value": "2324520c5f3566092f94fe356fa2a360cb031a0ed3c94cdb5d24cbd0c3bafa72", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809071, "uuid": "7f99c9e9-72c9-4c43-b48f-99a4bead0301", "value": "T136143C537B324FA0D365C5720BB78B295DEB12821FE258D1936CCA107A207A9285FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809071, "uuid": "fb4d4be5-1227-4d0d-9b3e-77b3852b3358", "value": "3072:tETEHXdLyis7gs1bzHkoztzRDbodBCHVJg+4p5N:mTkXYis7gK7koFRDUmHY+I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771809071, "uuid": "3dcd9331-7715-430c-bdf2-506d37b92294", "value": 196968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809071, "uuid": "aa3c5c46-e116-4cdd-876f-dd7b48e7af9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38e19862-1055-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771809363, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809363, "uuid": "73d074b7-8de3-48ef-9065-34de391dd9fe", "comment": "Malware payload (Mirai)", "value": "78c64488211edacb0721afb26faabf77", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809363, "uuid": "71b313db-b800-4b96-9feb-fa0e6abfc5ad", "comment": "Malware payload (Mirai)", "value": "7864a09abcab245e45852b357fb5a9de32ea8332404ef8218f3a6bc502ec9f01", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809363, "uuid": "e7b54dcc-562e-40c8-932d-8d8848265c9a", "value": "T11CB164C9229306B43DFADC2371AA8854B5C8B185EEC58F18E0DCF4FA658DF0979416", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809363, "uuid": "1eec0ed5-e523-4908-87f0-746436ebe0ee", "value": "96:IKhEcfEnsTE1OXAjXA5w4magIEsmakMSmkc:dn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771809363, "uuid": "1ea336e1-52b0-4ad5-aa40-e2cd1a738d83", "value": 5122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809363, "uuid": "f475716e-a129-4c5a-8035-e9e8c714a7cb", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a311905b-1055-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771809541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809541, "uuid": "e9fd3760-82f6-4695-b101-a40ddad5117e", "comment": "Malware payload (Mirai)", "value": "ae37c7417a4366040611172c2eee9fd6", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809541, "uuid": "e7be063e-dfb3-48c3-8675-0532ae9de412", "comment": "Malware payload (Mirai)", "value": "2e9baf2b45b19b15a0192b9436f9d44ff04d9d4029ff9b2f77e766e528d0ca7d", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809541, "uuid": "0976bc47-3ba8-44e6-b48c-3498440e7c33", "value": "T141D30756B9919B11D4C321FAFBAE414933136FB8E3FA3101DD206FA4238A99B0F775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809541, "uuid": "1f25e6f5-49d3-466d-8ad8-1fb34ad38009", "value": "3072:cVWVVDDEpiiDlhL7xDIaAsqOL+atbFi9CkO1/8DIFO:c+VDDhGlhLlIaAsqOL+aZFiROJ8kFO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771809541, "uuid": "b477be77-911a-4e91-9a8c-98bc32a9b44a", "value": 137820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809541, "uuid": "19e36a8d-a6a1-4e36-a3af-fca6a7a35abd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c32746ea-1055-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771809595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809595, "uuid": "b1611fea-c192-4528-bd4e-4e5f2f82e783", "comment": "Malware payload", "value": "030487bace0964cf0465e5b26acef1b4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809595, "uuid": "b41ed021-371a-4352-8e27-7a4b1d5bad4d", "comment": "Malware payload", "value": "ede7636d66554d867fa36fbd4a318620d605ebf6b82ee5c1a9cdeb06be91b393", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809595, "uuid": "764122f3-2ee7-443d-b427-994690008b16", "value": "T1FC022538058B282A1635C14C7FE79AACEBEE4097524B4E9C3D0F69077FB7511A4936", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809595, "uuid": "ff0481ff-34ff-4905-a014-8370db990e60", "value": "96:6upIz+Ha2eu0aNYP82ODae59AOmv4n+k2MDoX7bS8WB:6k60An/XWB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771809595, "uuid": "05aa9030-f83f-4f29-9bcb-bd39e716e8f6", "value": 8232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809595, "uuid": "69911551-44b9-4b87-85ba-3fb4666fab89", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c3a7840-1046-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771809856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809856, "uuid": "2316ec69-b8d4-4534-9c4e-fb30976a8449", "comment": "Malware payload (Mirai)", "value": "36038f4effbafe97912f38bd5a1d34ae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809856, "uuid": "53dd5673-f98c-4596-83ce-78233a94f51f", "comment": "Malware payload (Mirai)", "value": "a0ff3ef26171e3ed9f61df9a94e3da176f09f0c09bab3fa28d3fe03373463a8d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809856, "uuid": "5c385e58-bc19-40e6-b676-ec92bef8d7ef", "value": "T18D156C5BB2B374BDC057C43443ABDAB2A935B42902226E7B65C4D7303E17E701B1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809856, "uuid": "852a993a-7b15-4628-a329-9feccd07456c", "value": "12288:ZyPboByW/Gc4sd0D/YkBy+KEBrTvJkvEZWtcJOLh5axjK4iNEE0bdzuF9rbJy1q+:OSt4sLkBy+zpRksZWtcOLh5z3EVc8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771809856, "uuid": "b100d5fc-93a6-414a-bae8-4b2e0bcd5bc6", "value": 890600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809856, "uuid": "9dc148f6-401f-41cd-93b3-610a3b9ff261", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1771809860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809860, "uuid": "569c38d9-3b2c-4f45-9a8d-d7c17bccaa5b", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809860, "uuid": "0a80ab0f-11fb-4b9b-93d7-bcc892128eba", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809860, "uuid": "a4acfd4f-3bf2-4f9d-aaf7-ce9a30064f70", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809860, "uuid": "10e123bb-bc2f-4a52-80d9-ee9da7284615", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771809860, "uuid": "de96e69c-d4e0-4ff4-8e7d-0e0e023279ab", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a698c31a-1056-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771809977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809977, "uuid": "f75b8beb-8b71-47ac-b872-b4693d3e8a26", "comment": "Malware payload (Mirai)", "value": "1be6ba887081ecd7362f366485830812", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809977, "uuid": "03898f66-a93e-46a4-a235-3d6f5f565a2d", "comment": "Malware payload (Mirai)", "value": "9cb596697a338b325be23c87900e62f5ca1accd0ba395dfab1be1f28e93ca373", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809977, "uuid": "2a50527b-c50b-4031-8315-d8218d8dc15d", "value": "T163E3F706BB610FB7ECABDD3702E90B1128CCB95725B93B7A7534E854B60A1CB49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809977, "uuid": "e4db3b67-12b5-4d71-b881-d65e24b1ec2d", "value": "1536:UFnHp2H3LOYfwp5futyBrYJ3xDK0SnkkGte3oak3Z2PGozgEziJNjZOBWjrTq1HN:+y/fwpVuwJYlYNkkG++ozYNjyWm2swX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771809977, "uuid": "9f521f9c-f601-46e6-b546-3bf3fe68aa53", "value": 149476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809977, "uuid": "21f99f2b-76bc-47eb-ba62-8bcf87430888", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f925471b-1056-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1771810115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810115, "uuid": "c0a140f8-1a2e-4005-b3ff-54d053a96a8d", "comment": "Malware payload (Vidar)", "value": "322e2643c3666cef9a4be48cbd137878", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810115, "uuid": "fd90f5c9-bbf2-4436-99c9-8440a8770a34", "comment": "Malware payload (Vidar)", "value": "42d627f41930ad606097033377b865e008adc35d4751150ad935b4ea3dcd4622", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810115, "uuid": "9ed699fd-ddb6-4787-88b8-5abfc64eb36d", "value": "T16C2412C78CD88D16DA955A71C8D2AF0B3EB03F045F12D34E6B3BE9D5A7114429AB33", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810115, "uuid": "a8ba7c77-cb1c-4c7f-8e94-3107aa60f82c", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810115, "uuid": "45a18e75-516e-4501-b58a-fffdb412c55b", "value": "3072:9C9D+4qePloCfc5pbhQTuEo2CG527ZLlhai26tS2iRZD01EynzC/yWyZZP:9h43SCUHbhTw527jxBy01EyzC6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771810115, "uuid": "9d4b7379-39b5-49c1-bab9-819617006f50", "value": 217088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810115, "uuid": "9f1a4aba-6e48-4757-a681-db6ab87bbbba", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "869b88f3-1057-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771810353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810353, "uuid": "1b06e067-416a-4577-967c-0580bebd1187", "comment": "Malware payload (Mirai)", "value": "67862e4cb6acc2bd973b068e6f877713", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810353, "uuid": "200bbbb4-6eae-4655-9bca-7e78096e41c0", "comment": "Malware payload (Mirai)", "value": "4b91a7dd04a68370ec07dac933441ac86f0003eff55838ab15943a9448b1fd91", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810353, "uuid": "2b77110d-4fb0-4767-9913-17dae3da3858", "value": "T168044A07B5C18CFCC49AD6744BAEA63AE975F09E123CB16B27C0AF231E4DE204E1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810353, "uuid": "4e95ae16-bcdb-4ece-8b62-fc64174ab29d", "value": "3072:y84T4Q5/RNB/9puv9rOVN6lb7DUgPu6G7HSq5pUiguzdrIKELDwbZnJEAn:qT4Q5JNB/9pulruPsG71KigQ4wRJEA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771810353, "uuid": "8e89e39c-3f43-4a4a-85f4-748d8d777aff", "value": 174232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810353, "uuid": "896b8f7f-333b-4667-9c80-e6c85bb5a44f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c087886e-1057-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771810450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810450, "uuid": "6cb549ed-b089-4935-8aa5-f94bb28f6755", "comment": "Malware payload (Mirai)", "value": "43a7869704de6c5825d9ac11c7dd31aa", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810450, "uuid": "f24c129d-74ac-4f17-8b9f-9dcefa8ecf01", "comment": "Malware payload (Mirai)", "value": "aeb903a50752a52de52b78849ac9cd45a23e721e33c00bf190933177f7bcb5b2", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810450, "uuid": "00f4ed40-d74c-462d-a5be-83dd362a6d4e", "value": "T143C31916B992DB11D1C315BAFB9E514933136FB8E3EE3202DD206FA067864DB0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810450, "uuid": "fb50800c-127d-45fc-9eb2-edc21332dcd1", "value": "3072:YVJVaNgdzirE6Xa6r/3dzpaAkvN2CaNPGymyQ:YVaNgcrxX1rvd1aFcCaNmy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771810450, "uuid": "4111c93f-590d-4c59-8256-56a0453f2b7c", "value": 120792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810450, "uuid": "021ffc5e-50a8-4f20-a0fc-74be03dac4da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed489bf8-1057-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771810525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810525, "uuid": "a69a05e1-bb26-445b-814d-5e4976cfd7e3", "comment": "Malware payload", "value": "1366cb0b6d553a7578fd6fdb244f4c7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810525, "uuid": "32d1e7cd-5641-4180-bd41-7a91664719b6", "comment": "Malware payload", "value": "7af1d062af94fb2a6974f298df657760ec53c833cb255b6c34cc115b6ac2668c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810525, "uuid": "1af5980e-cb0a-4b1b-9bc9-c2d9c6f110f0", "value": "T1FCA3E91916670890F1EEDDC00D85B8BA1A1377B3A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810525, "uuid": "baffd135-fb98-4def-ad9f-349952e06d6d", "value": "1536:v4Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqAl:wgVBH3mPm+sqk+HAw0F5KijXxl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771810525, "uuid": "e67addbc-1940-46a4-a2f1-39ac2f85bfd2", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810525, "uuid": "17b9b7b8-4893-433a-9c9a-c80d983eb5a0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f29ed7ca-1057-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771810534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810534, "uuid": "60402c42-9c3d-451d-93f0-fa74683736b7", "comment": "Malware payload (Mirai)", "value": "63abea2e238e5fbc62efaaca3c1e6235", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810534, "uuid": "7c0f7c72-fd4a-4ed7-94e7-fb3e1c2ef245", "comment": "Malware payload (Mirai)", "value": "08733e9ad76233bde5c63adfa861aaca62d542c1eac4cb2bb02d2fd78a9baa13", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810534, "uuid": "511d71fb-f8d7-4391-922b-451e83afa4f3", "value": "T18D53F1D6624A664EFCA384F396D953E87F774E23F6810C0429ACD2CBC4265E1B4C9B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810534, "uuid": "0a0feee6-c546-421c-9a47-7a8f188cd527", "value": "1536:ivsNVnBECay3WAH8ByWyW1bCQ0QfA5qR2tQydlbmSVSs:iUHnB1H8BJy60/KCVj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771810534, "uuid": "9701fe08-d338-45cf-932b-5c13317a5dd4", "value": 65284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810534, "uuid": "00891bff-cbee-4c50-a036-fe1a90eccc67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f8dad34-1058-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771810582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810582, "uuid": "64eeeb06-fd41-483b-9b16-426d31be51a9", "comment": "Malware payload (Mirai)", "value": "6b6e457dc195a08cfe9ef759b072a414", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810582, "uuid": "242f8206-8ce8-432d-88ea-4854f7672a48", "comment": "Malware payload (Mirai)", "value": "6dad85b41766565cbca069f8ef55f2140081e10e9ac2ab5f992977d88afc20c8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810582, "uuid": "1e0470fd-6114-4df3-8d17-0035effb1022", "value": "T1FE63022EEB47A785DF68DC7ED0AD02142E4C6489161E0E1DE3B14DC8CB21EC9F85D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810582, "uuid": "e34f0d27-bf92-4a5a-bfdc-6e32d5c0238a", "value": "1536:xNQXvfpiDy8Mu25Di3SqRJF74nHNjx7ibzaU97TCs0jpF0KrR7dI0+LH:xeX3txu2xgXN0ntjx7eznDAF/NIj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771810582, "uuid": "bbcd70ac-1fbd-437e-9ba9-be3a5f4ab743", "value": 67780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810582, "uuid": "c468d4ac-3bf1-4411-a3d4-13fea7b5f566", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d74b642-1058-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771810740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810740, "uuid": "cb1ea66e-965f-4230-b609-bb1b6594e2de", "comment": "Malware payload", "value": "e601ba89671650853aebd8672f76c349", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810740, "uuid": "f8754314-be52-4352-aa05-388450a5ba71", "comment": "Malware payload", "value": "6d2a2b7aec1b254517caedde19a1212beceac9d5452139bbce304fe2aa637d2a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810740, "uuid": "e6ccb93f-d5e8-43e1-9ff5-65b7cd4d092d", "value": "T1A2E32755ED819F05D5D526BAFB4E828933231BBCE3EE7112DE205B2123CA95F0F3A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810740, "uuid": "6d224923-a5c7-40b2-b5c1-1d649d0e708d", "value": "3072:Fd0z7aSsJ+NX7euZfa56YIBtDhVJDfx0lfGId9rxVKOiqVQ:+NsoNre0fa5hIBtDhVJTx0lTdVxVKOiB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771810740, "uuid": "8880d6cd-58ba-4397-929e-909966f60436", "value": 145244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810740, "uuid": "411d6c0b-bf3c-459e-8ca8-b2ae0225759f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81b93b00-1058-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771810774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810774, "uuid": "a0887e82-15ef-47ab-9482-cf8983cf5f6f", "comment": "Malware payload", "value": "3639be03d01eb4f77d53ec4a8ec51ab8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810774, "uuid": "1cf9815f-561c-4532-9eb3-66806d305148", "comment": "Malware payload", "value": "b4477057f20db219f30c617920d55553e8718e6a5e43907a9ccba9850c1c90be", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810774, "uuid": "8e7fd57c-10d2-422e-9443-14bac4562111", "value": "T1FA8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810774, "uuid": "133d3534-27ff-40e2-95c3-595f33bc61bd", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnGWaQVN/:XEKltp9txAX/yr2pbGWxVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771810774, "uuid": "4a57e659-dbbf-45c1-a698-bebf86058364", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810774, "uuid": "761400f7-4f9d-4014-8f63-1cc7e34d59a3", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4c49d2b-1058-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771810913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810913, "uuid": "6f058064-c363-4966-aa79-af9b86040174", "comment": "Malware payload (Mirai)", "value": "e6041611ed244151ef67b4ef695d0e25", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810913, "uuid": "52ed6789-c60d-4c55-acdc-ffb624aa43e6", "comment": "Malware payload (Mirai)", "value": "755f52b63ade446f8a08f46192ee7fcb1110dc67e11ad6e238e0738075aee96b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810913, "uuid": "024186d0-7d72-4670-b33b-2fc71b5ef390", "value": "T1F7243B46AA404F13C0D727BAFA9F42453333A7A4D3E7B30695186FB43B8779A4E536", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810913, "uuid": "5e3b0d96-6e2e-43e0-89b3-dce1e1b88328", "value": "6144:pdhcq++3mYHVaHtRCwnnjuh9wRM2/0p6M/RkIz62:tV+xYHVaHtRCwnnw1pD/SIF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771810913, "uuid": "eba63b06-d1fe-491a-ab5d-657445d15b64", "value": 222419, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771810913, "uuid": "9a3c5d95-af5b-45c0-a116-859fdbe97daa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b3953d1-1022-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771811513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771811513, "uuid": "acd18581-5f90-48cb-9f4e-552e77a12e13", "comment": "Malware payload", "value": "733b1f1b6c37585e89cae4f0cb14c38a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771811513, "uuid": "69c682ec-0227-42f4-81d2-69b23b986cb9", "comment": "Malware payload", "value": "87525c2726e884becd96d5a6ee0c8c2e66e382d4ab0f6dfb896e9ea0bbffe834", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771811513, "uuid": "cddf9bd0-c836-4468-811f-28da38f694d1", "value": "T11FC3D6DDB2E27025439324A5157F410AE27B2E553C4B8290D17EE9D4AC7CE8E817BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771811513, "uuid": "e4bca5de-cdbe-4614-946c-11c45cdaef58", "value": "1536:5wxqb5bdwL+pvFz9FSUsqLonQNYgetcVPkx2cnYteolbFr3rd6TcWmuZUfFi8AiE:5md+bz1VP9ftrdruZ5QZ3fav8rA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771811513, "uuid": "0d941204-9d1a-4f09-bcdc-70bda89140f0", "value": 121004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771811513, "uuid": "edb6028f-fd9d-47fc-bc6b-b1fb98ccfdbd", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c590304-105b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771811892, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771811892, "uuid": "13b04628-3489-4231-9e7f-a98fbc9f4fd4", "comment": "Malware payload (Mirai)", "value": "75fe2ae7dc6198329fe15f241cd9dc3e", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771811892, "uuid": "5bbd2c90-d173-4617-9e0a-1e6e6a594b63", "comment": "Malware payload (Mirai)", "value": "b665f8f26acde42f8428d6a5816f9e1b4152b6563ed7fda4167613f7fc4ac004", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771811892, "uuid": "0e036795-6500-4776-a3ea-a2595ebe80f5", "value": "T170B31A52BD528F13C5C321F7FBAE42483B126B7CD6EA3142ED257FA127468EA0E275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771811892, "uuid": "fcfaecf9-90df-49d5-874f-43d500a4a387", "value": "1536:9B7KNh8/kZZ06JEDU6kxSCvxI9JAGvkAdfbdsuPJWIUG3cwbOTyn4+OvU6lmsb5K:P7f/kZ6LJCvxmPkApBlPJWIdcyp0tS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771811892, "uuid": "df6724ec-0421-4cfb-9bf9-460a2b9cddbf", "value": 113012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771811892, "uuid": "dcf649a5-d474-4373-8df2-e1709ee8b7a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e62e3f5-105b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771812111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771812111, "uuid": "b596beb9-59c3-4db7-b0c8-a3cac5e3504d", "comment": "Malware payload (Mirai)", "value": "da2503b6436da78a3572b1733f53f543", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771812111, "uuid": "16bfbcfb-8284-42c2-bbf5-6c52f9b4477e", "comment": "Malware payload (Mirai)", "value": "af2e2edf7378ff5933612c57644c2ae43f84cb955485928ed55ed90a61917f1c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812111, "uuid": "d889f906-ab8f-469f-9566-49df246b31df", "value": "T1594302283E955F75C561167A364843C1F3075D9CE18C54E60486C9B1F6E378AB236F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812111, "uuid": "ee00be7c-7f6b-4b80-b301-41afb9eefd00", "value": "1536:gRyAJDDzCiptS2MxxF/fpK3VYunHEzPFnN6g8W4ZBDr/iadpTRXT8Z:B4aipt+1k3KWUNnog8WudTpT8Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771812111, "uuid": "a55d96a0-6cb4-4247-b311-5c4762fbc91d", "value": 59724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812111, "uuid": "52f2754c-0a9e-40f8-9a2b-6da8bf973c0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef985a3c-105b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771812247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771812247, "uuid": "1b174d53-6321-4ad6-8fa5-42255c529c87", "comment": "Malware payload (Mirai)", "value": "0db0e3dfa93d869bf2d8213a48f07554", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771812247, "uuid": "5377bfde-f89d-45be-8b53-899cf3c4ea07", "comment": "Malware payload (Mirai)", "value": "4a6c854cb930d8441189bc4cbd923793af18533983360227e8062cf37069d3fb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812247, "uuid": "a016fad1-b359-43a8-8565-2eeebc352bf9", "value": "T10343F110098141B76BEE94F4CA1442898BDF4BFD24AE75BA97688C8DDAF792337750", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812247, "uuid": "52432c82-cda1-4827-b311-d24d7951b9cf", "value": "1536:SweVVoW/j7a+BsMEd/IJhwsyMeM5ksbBhqiZ:SwqoW/wMEohwj6ksbbqM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771812247, "uuid": "828279ea-ce0e-4647-a734-902304e0cb17", "value": 58904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812247, "uuid": "31d9696f-eb59-4f89-8a23-80678b67f26e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4dbe068-1046-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771812277, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771812277, "uuid": "6bfa8dd1-4e76-4519-84a3-2496433923db", "comment": "Malware payload (Mirai)", "value": "5c096ceffd7a736172ad21f85a6db149", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771812277, "uuid": "ab047a93-1095-4c50-bc17-2a447583f1a5", "comment": "Malware payload (Mirai)", "value": "a46687efa74df0095dcbb90678faa411e505b27b4436011dcb1a882fd2f136f1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812277, "uuid": "b45344d0-10d2-4d8f-a09e-161887abffb1", "value": "T199145B47EEC90EDFC45BCDB086AE836B2AEB559B8CD1F1F4543CCC0C755928A46936", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812277, "uuid": "58203dee-c2b1-44c2-89e2-c4a7f5be34a5", "value": "3072:zRVcgKhwoaDkmE6JJ+EUhNWmKINuz5zxu4LIW73DMfzLialfmsN+CDq:j3oL6CszPIW73wfzdlN+CDq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771812277, "uuid": "f937a703-05ed-48b9-a2e5-be436f43cefb", "value": 196972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812277, "uuid": "6b612890-5914-497c-af8a-eb0da026b91e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "463332c1-103b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771812413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771812413, "uuid": "038212b4-5f49-41e1-bb71-6f7320372d4b", "comment": "Malware payload (Mirai)", "value": "ca552ed18a6330f632313f78d6c0d9f5", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771812413, "uuid": "6e2f7fd0-7b0f-46b8-8cba-c7893dc48360", "comment": "Malware payload (Mirai)", "value": "6b11cd77e0b3490f55b87792e6aebaf0389914d9927e5ccb16d76f58ad26538d", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812413, "uuid": "5150d541-3ca7-47c8-aa9c-2b7227654518", "value": "T1DBB31A42BE529F13C5C261F6B7AF42483B126B7CD6EA3142ED247FA1274B4DA0E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812413, "uuid": "1c618e3b-2e9d-42f0-a588-8219436d4dbb", "value": "3072:QcPaT9sVLvyo6bV97BwEtsZDcd/4d1+xWS:JaT9sVLq3R7wEtsBcd/c1AWS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771812413, "uuid": "02137417-65d7-4513-86fb-f4f8706f5212", "value": 109168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812413, "uuid": "5c59ab7a-0f93-4edd-9e87-963c5448ec65", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f297d28-105d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771812810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771812810, "uuid": "c0902a1f-fcb0-471c-afe1-47bc7a294e24", "comment": "Malware payload (Mirai)", "value": "80018507fc2e6fd63e9b80149283694e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771812810, "uuid": "4b119e48-700b-4227-b76f-824ee0a5ece7", "comment": "Malware payload (Mirai)", "value": "6d75c493adb9843cff7d6ed4b689f1c12bc2d807d3a2da9581bd63e9f4df8fed", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812810, "uuid": "97013d0c-2c86-4f22-b9a8-24f0c91e7888", "value": "T1945302018FC0597BE5DC68F36B0E9B43D21AA51090FA7824BB288E1A57D3D7D13D5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812810, "uuid": "d7befaa7-c89a-441a-92f4-53863bb0626d", "value": "1536:1eAP27a9UNxFFeFUwqwnKc/NMaJBuwdYlIe/smgCLtm27:1eAP+a9U/X/w7KcF2wcIl7CV7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771812810, "uuid": "35490434-f302-4f45-bd14-1ea8aefe4686", "value": 65624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812810, "uuid": "0d4849d8-ea7d-4236-9fcd-7f6e14fda5e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dca75d59-102a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771813280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771813280, "uuid": "1a5596f5-9ab3-472b-baa0-4b46c1f3ad05", "comment": "Malware payload (Mirai)", "value": "c2c5d00a64bf0eeeba6f13c14e904093", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771813280, "uuid": "c6a76f74-3810-43aa-b101-d802f6ef9e96", "comment": "Malware payload (Mirai)", "value": "c0b79f73b2bccb431d42f22311f68eedeb14fb199fb32ab72c39125605a5f9e8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771813280, "uuid": "97b15bf3-1b50-424a-ad59-9b072e507950", "value": "T125935D02B71D0A43E1570DF03A3F67E1C3AA66E021F8F649760ADB4996B2E325547E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771813280, "uuid": "de36a364-fd08-401b-9b04-2373bbb20bd8", "value": "1536:bvOmIUYWYGy8srUqu46DSSMOjwLi4t+x78rIrDqQCTjNLPrzayBhmeu3H:NIUYW8/MpAi6+SU6QClPrTnwH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771813280, "uuid": "26627794-aab7-48ff-87a1-f53b47d67d62", "value": 97056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771813280, "uuid": "e61f31a9-bfa7-4ea3-821b-23743a7763c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bc90dbc-1060-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771814066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771814066, "uuid": "48acaa2d-4684-4d26-a2ed-dad49f0dafea", "comment": "Malware payload (Mirai)", "value": "285437df2b27954713b8d8566df70d69", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771814066, "uuid": "1ee26d4a-645a-47ee-94f7-904310caf957", "comment": "Malware payload (Mirai)", "value": "1da6633a2c4ebb0324934d564077553f15343b3afbaaa5005657b77e280aa357", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771814066, "uuid": "9236390f-8544-477d-b29f-597a97c2cb9d", "value": "T1C2730299C356B103E7D4EDB79413C494B24B22BF2F9AA3E4684897C4FCAD52B4E109", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771814066, "uuid": "f4cb5aff-3f08-4cc0-bd88-bd9ed92e9dcf", "value": "1536:zSeoOdI7jJdO/EosVLAt58dHxYQfElQE0h/4RmKXGT8z/pdZSoDn1:3oOdI7jJd2aGIYqElQ7h/+mq9zB/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771814066, "uuid": "1442dd6a-b8c1-4a9c-8dc0-02befc20170c", "value": 79096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771814066, "uuid": "0d55f406-f019-40cc-807a-986179d7d2a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7cd7e28-1060-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771814274, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771814274, "uuid": "ef3933c1-5fab-4598-ae23-353e2c58d91b", "comment": "Malware payload (Mirai)", "value": "1eda56d1275b3a9bd965f79943699828", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771814274, "uuid": "278d60f2-ef92-4048-9f07-19bec410ae00", "comment": "Malware payload (Mirai)", "value": "387f989674b2c18e17a6d90c7ad026bb3d23f274b0f6c99ecec0b10627a1188a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771814274, "uuid": "1d3c616a-1fbc-4be0-bd3e-c1bcb7e5a9af", "value": "T1FE530290A2DDD495C5F26AF19561C0402A8E5FD0D97B3AEFB118D1B4FECC40CDEE8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771814274, "uuid": "acf9531e-2b9c-49ef-9c6d-b942c6971703", "value": "768:u/i0pYfmyX+Rh4zOCAcjc243+Swd+fBsmVbZHtr+sN6qbHAibRRt2uc/7h+dwXLg:u/i02mQCN8A2eZHtr+s0GRrw/F+WpKIG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771814274, "uuid": "a48a5cac-2f6f-4488-b49b-7e6c960630be", "value": 61392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771814274, "uuid": "863c5926-91ad-4ce8-b89c-bd880126618f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "180892e1-1076-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771823482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "3da52190-60a2-4bd0-a6aa-b79dcc2e81c0", "comment": "Malware payload (Mirai)", "value": "da7fe378239a12c3b1f630f7576c1171", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "5524f71c-abcf-42e4-bc41-f9b544cd8f98", "comment": "Malware payload (Mirai)", "value": "1fbe6cb0e6ba20afc340df967e6ff7e7862b3d010ee5626ac73e6db4852c8eef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "2362e1a7-9694-48da-8ea2-820346ba8d22", "value": "T1CE03F1D1C99F734CE23F627CC99FB5690761E40A226527A7BF64387A6C71F209E583", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "0db81dd1-903e-4562-a494-fcd48dff503b", "value": "768:6rDE1uLV+u1Q/bG1zfLYAxo7zK4JdCVDrqjhgOIg/PUm/4AnbcuyD7UHQRjB:6rY1uL4u1Q/K1PYAyzdW+hPHUmTnouyv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771823482, "uuid": "beffb085-ac33-41a6-86c3-51f229fce051", "value": 38960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "111c8d2a-c395-433a-aeb1-4379c9c960ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "180c618f-1076-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771823482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "7b0eee32-5019-451d-9ebd-4e9d1dfca41b", "comment": "Malware payload (Mirai)", "value": "e8dab3e53980a55508cf8159c2d8903a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "591de646-3931-4afb-84a4-780b9d131046", "comment": "Malware payload (Mirai)", "value": "c7b2a2b4b4644f6c66dca72290d7f44fb6337b019124d6dcfeb6aad79cbe0c6e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "1dc6adcf-8cb6-4fdc-bd76-dbc121063f4b", "value": "T18213F19D73621EB9E2EEA87D5A860BD03D98D2709193DA433484EA83DF4217878F35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "99c8c747-b0ff-42d8-a655-0b65adc52163", "value": "768:9ET7XP4xzJMIAv+91qErJAvrZ/sqwhDZUeSdXKKRBSKDWxPBJgGlzDpbuR1Jp:aTsxdJyFTZ//wtiBrRJqxPTVJuv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771823482, "uuid": "4f2d56fe-69e2-4911-bd4f-b728dc9990b4", "value": 42692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "283ed873-f159-4913-8b40-642521a4d6ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "181db84e-1076-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771823482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "934026e8-24ef-4cdf-b548-80ea14033d19", "comment": "Malware payload (Mirai)", "value": "dade6d33a08c3253c3a93705ff4276a9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "6e853446-873e-4cda-bda8-179fac1e2edd", "comment": "Malware payload (Mirai)", "value": "eeec163a3cfa424ac7a3c2d70dfc1da7c13200ab4aa6ac4185eb31df4bbfd7ad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "5684de87-1850-4bf8-b7a3-18b0964d089f", "value": "T1D4B2D0705BB99860D2618671F97582BB927F4BF8DBDE32604B2C014859C35DABBBC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "d95fa51f-014d-40aa-93b5-c708cb33d8e3", "value": "384:vL79FDQ06u6LeuIYhdZJ+k7qPHZLlxxUyFJ/oMNjqExgYNphymdGUop5hSq:U063eEh4tPH1lxFFJ/L+kVXs3UozD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771823482, "uuid": "7ef9db90-30fe-4be3-8675-17b9185bd26e", "value": 23572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "b3507049-30c4-4f44-946b-1220f7f1ca66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "181e51c9-1076-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771823482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "134ebdda-b0d5-4e9f-906f-436db4b251f8", "comment": "Malware payload (Mirai)", "value": "6cce33c78e0197eeeaf73fbd91931b79", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "f910d1dd-1c5a-4558-a4f1-e2e72a4dfb52", "comment": "Malware payload (Mirai)", "value": "9ade06515009c61fc82215074fbe0c7af07aeb434c8cc3994a42f59ed8856641", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "a71d63a1-234a-4017-b820-8a4a17c68b0c", "value": "T11803E1A6B1614E03CEE52DE09C90C5D0F7D10CDBB3D25ED672492F81671AE1BD208E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "1b667d8b-dd2e-40b7-b66f-4600c4b1ffcf", "value": "768:v2U819nNz1p3Dn0Pha+YbujX6bQ5y9U5ztX4H4r4uVcqgw0IX:1819NZp3r0r3Xu5CtX4Yr4u+qgw0IX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771823482, "uuid": "515d0bfa-0193-47b4-9ffa-8548afefdee6", "value": 39668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "30973bea-106f-470e-b2de-09ab255f8b1c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "181eea25-1076-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771823482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "930a581a-87a0-40c5-a27b-5585678380c7", "comment": "Malware payload (Mirai)", "value": "2f26cce59963cf03a9ddff1d5afd692a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "b17b5a9f-6c09-445b-a780-0ee94bf03453", "comment": "Malware payload (Mirai)", "value": "315c34efa6fbbbbaa61ec83f02a3ab80df64b58e30df9b40fe9926eb89727822", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "b1ee2081-9711-411f-8c5d-46df8a7d63db", "value": "T1DA0301385A618D87CD089136ED4F324FA6DCE44D9168CCB2EFA53477A47BEEC13512", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "9cd73959-38ac-4644-9df0-b5ab7dd9789f", "value": "768:O7kCXLzAmwMq8Rj1ilRc16YxBJpN+c3Vo5PN1AUrb6vKd3nbcuyD7UHQRj0:O7DbzCgwliXBXNH325PfrbgKBnouy8Hz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771823482, "uuid": "06d9ed10-cdd7-458f-8c83-67a0f58da143", "value": 40244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "c7886037-be6e-4c46-8d80-7cbd2bc49c78", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1820a42d-1076-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771823482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "397d88ba-9dae-4b40-862e-d2b638a37bb6", "comment": "Malware payload (Mirai)", "value": "2aab87bd4024f02fc613d28da3574d56", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "75bb2257-d6cc-4e09-833a-5d41ff3155be", "comment": "Malware payload (Mirai)", "value": "69a084828958de9978a95b462b9ca83db8bcd1f12fa07c27665d196d0edd41b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "7f66d8b8-10e5-48a5-b304-df492982f010", "value": "T19D835B22FD75193BC8C4A47761F74376F2F6438A24E88A1E7D710E8CAF6464022977", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "da812847-d285-4394-bb04-e4f874aebdd2", "value": "1536:XhRLk5+YRoVvgOrVp5ai/Aow7bKtF01XNT5+GIQQihtTFmb:XhD3pNvwqnYXNNMJb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771823482, "uuid": "8e160778-08ff-4130-bb68-88d2676be8eb", "value": 87496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "8e38e0ce-fa57-4699-906f-126f57d3f5e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1820bbab-1076-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771823482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "909744c3-0123-4588-948f-2868a2f3e3a6", "comment": "Malware payload (Mirai)", "value": "c51b4ea9c49e92f1199eaecb11648693", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "ccaba171-f74c-485b-9a31-e0d19c24775f", "comment": "Malware payload (Mirai)", "value": "92fb174b9020ae360d4bf9422b0b14b6e480b2d29f825740017f5430856ff048", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "e64d01cd-1830-464f-a6b4-0aafb4584f84", "value": "T1D813F16A810CC275C1C05CF09D7A93C69E6D0F74D427BB236D84087CB1D1568EABD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "a4e6630c-1530-4b06-b55d-504e06bd3609", "value": "768:yfG9274mM6q1eHsw7EHMfN45Y5cQ1jevymM8K9q3UEL5B:y+9Y496qkHsw7EsK5Y5c4eqj8/Lv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771823482, "uuid": "06dfb50a-4eb2-4301-8239-e43a87492346", "value": 43820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "1637635a-b8d5-4cad-a75c-70a40cadb3d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18267cab-1076-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771823482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "03d673dd-4f9b-4701-8ea1-b72bdbb86aff", "comment": "Malware payload (Mirai)", "value": "adc947bf83566a68456796f313491f04", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "2c64dcaf-a03e-41c7-a5e5-8c0ccd73b890", "comment": "Malware payload (Mirai)", "value": "8023e6c8e78879d50b058d851f30c8ba72abf545b87d917b8a9ab4ffa7907c8b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "295a378a-c76f-49c8-845d-807845c38ccd", "value": "T1056301B5730FC47F76B0D831EDEE866B25970EB2E5FB9673152150AC3D4389A280D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "9ead3f63-7518-49e0-b48e-9bec5f2c4b60", "value": "1536:De5+Hx/EbHCcqQW8OnMMhCsCg7CS31vLOLDzLJsE:i5+R/dAktPCSlvLO/zLT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771823482, "uuid": "7c56f695-4f16-45fa-ada1-69f5a53c7782", "value": 67152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "3ec07f04-306f-429e-ba82-9f9bc41528b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18272d34-1076-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771823482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "93b31bdc-65ca-438f-ba1e-45148ef6fe93", "comment": "Malware payload (Mirai)", "value": "2bae1c6e15ef4c45d730f3b81e956e73", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "01e0531f-d102-4e78-8a5d-4725becfb79c", "comment": "Malware payload (Mirai)", "value": "9305e8c59a66507f47230f6cc2008ad305751a84692c5d1ce02f8f00ab1ab0d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "086a3f7b-7bd0-425e-a2d7-edc3bb0e1062", "value": "T1CD13E1DEB4F87C9ADEBD8D3D27DC2864098A58E2BB55FBC383056C58F65680F70091", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "66c90fa6-f297-4b95-a001-68d341a34c71", "value": "768:jJjFoKGhirlRa0dT5JYs+OsHz4V1n8LX0ySe/6lwQOItAi60eWiig7W9:jdWthoFqpVTiSoeDQOIe0Uq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771823482, "uuid": "df4e1b1a-4ff9-4084-89dc-d2004adb497e", "value": 43544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "f281856f-bda0-4d6e-8406-12408bf3bcac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "182c549c-1076-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771823482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "ee0203cf-8d38-478e-88fa-6376f74977c7", "comment": "Malware payload (Mirai)", "value": "e18c3a290fcbfe33b69cb893771759cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "2a4eb99c-b471-4cec-b700-8d00ba2ec3eb", "comment": "Malware payload (Mirai)", "value": "27932c15c6c21ef787ec5275f35c1ad751d9a80c623a9a44d1582f72dbd9dbe5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "ca70ed25-e5a8-4aa5-90a7-5d345f5413b9", "value": "T165933AD7F400CDBDF84EDB7B44530A06B531E3A20A835F76625BB927AD361984933E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "1856d1e9-bb19-4436-ad44-502ea662a175", "value": "1536:eGXP6gt/it/zX/MyyPATI9RoP128D0yJZWyKN8Nk4urDTbhl/TVcdNp81b:CtLX/0AT4RoP19Hw8S4snTVcd4V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771823482, "uuid": "35a82501-26d3-41bb-ba32-eb4f27a321d5", "value": 90588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "37e2365f-a051-4ae5-9876-3f0e9d84b8b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "182f5154-1076-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771823482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "7c5ff233-1748-4117-83fe-3f3a79565dba", "comment": "Malware payload (Mirai)", "value": "9104409faf060a5a1b7eb69a6bf65898", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "554d2cae-b382-41f2-8dd8-5f951b3695c3", "comment": "Malware payload (Mirai)", "value": "ac6b6baa6ce22cdb732984206aa1feaa2393bd7983221dbcf76411c3802fb851", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "23591840-1ed5-4ced-a36e-1d1c27d03c0a", "value": "T15703F18194F18C01D07A2536655FAADA8C11B85F3254CDBBCADD243BF9DDF51F9143", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "faed3a40-dd11-45e7-afe9-73c2bebd9c1d", "value": "768:X/3vO+iJM/DPqqDBxOtUcEhh/n2Q5YsSTnbcuyD7UHQRjQq:HkJM/2qDTOuh9j5Xsnouy8Hyj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771823482, "uuid": "c1402464-cb38-48ee-88d8-cedc032705c5", "value": 39620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "83100f32-3843-4c9b-a056-0189a4b917a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1831a766-1076-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771823482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "fcf3b026-0478-4b61-acfc-482d225a3ddc", "comment": "Malware payload (Mirai)", "value": "8abdda7ca96b7a6d6b006e1f5fff8133", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "c59b1fec-5014-43c8-94e3-670781e37e81", "comment": "Malware payload (Mirai)", "value": "8f2e2be996b6a5700859ec8cafc2455637fca6a3f5702e3674e2bb1a34907612", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "ab552998-5315-4db1-a758-bbc31f88d15c", "value": "T1DBB3AE97F74714A0C8624AF007C34B9E2E232212CF97D9E76C1E7A3E5A794DB091A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "979f4e1b-258a-4413-ad3e-de8e8d3174df", "value": "1536:fA5IbKtCwBgHSPR3JL+FjTWGbTQ5b1qklUv94QZJBxclog8oyf/LWK:IkKtoHM+FP1bEB1qkmqQZJjg+q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771823482, "uuid": "23094d24-0a1b-483f-a6b7-db88be25c310", "value": 116392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "1720e7ee-d5a8-44ac-9612-4030717e7ed3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1831cea9-1076-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771823482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "a3d72b39-c481-4920-8536-c29cd93cf7af", "comment": "Malware payload (Mirai)", "value": "e562a85fcf91291b788c8167151df652", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "a3b5e670-affe-4d08-b2b6-b6143d86d857", "comment": "Malware payload (Mirai)", "value": "f1fb52f8792ff45b86cfe050b2a0957e0f07d801fd9cd5e972a5eb580beba6e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "22f403eb-22a6-4ee2-9fb0-5fe26f8755e7", "value": "T12D739D63C8362D68D14841F071B08F395763A92285871EF758AACA79E087EFDF2163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "98011ff5-eb98-46f9-b3c7-ea1aba1929a2", "value": "1536:4t49SA5n/7L4KOL4d+eGU8C+AI6I9oKA:4tSjn/P/OleGU82I9I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771823482, "uuid": "6309f35f-2ed7-4995-a475-e21920bb8984", "value": 75528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "35542a22-80b0-42e9-abe1-7dbc1639a293", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "183224bc-1076-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771823482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "c449a986-6ae7-4a5a-9878-73c874c6b0af", "comment": "Malware payload (Mirai)", "value": "c084f7ee06ec934c8867240d1844a638", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "d287be99-6388-4e81-8c9b-4f590ba6e33f", "comment": "Malware payload (Mirai)", "value": "95131e989ffcf20fac261e4ac9cdf89698a54a8689718dedc8fa20e53d61802a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "8c5eb2ba-d7e4-417e-9aa5-238586230225", "value": "T1C903E156C50ADE14CF70AC31925A1047579B23FC66FD3C3F3C4232609B66D868BB93", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "d1bbfd2f-e493-473f-8ec3-6a56a46e2cdb", "value": "768:+G5CGcO/u4yEVLgSAWLaxHFQL5sjyqPa3ietj7uDalCaeJuRuCys3Uoz1Q:jkGc+TK37LOsjVgBduCvz1Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771823482, "uuid": "b3f1b078-a8ce-4725-9a2c-c1dd69443ecc", "value": 40020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823482, "uuid": "6fc89123-718f-4de8-b502-04be30dee44e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39bf20e5-1076-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771823538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823538, "uuid": "af2eeaa9-a979-47b6-bffe-81beac5fd380", "comment": "Malware payload (Mirai)", "value": "b5fcb9c2a104b27dc5127c05c8e69721", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823538, "uuid": "e797025e-15d3-44b2-a3fe-be96253d6573", "comment": "Malware payload (Mirai)", "value": "0b3217709d2927ba08c7559f54485084f6ddb21f5dd4806e0f4ae31510286e9f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823538, "uuid": "43712893-4e47-4bd6-b04c-986c2ebc3ac3", "value": "T15D03F1E16169FA3CF0F0A13047651660D5613BABC20517F50AE93AFFCE71879B9116", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823538, "uuid": "e666cff4-6015-424a-98ca-36cacf07d086", "value": "768:gzj6d1mS9npcxOF1FqS6jK+qzbZfNPjujaMfW8LWV4XdO9Yk0crF5Ax0rVa:Fd1mepcxOYljdgH3Me8LwEO950cheya", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771823538, "uuid": "1bf2eddf-e923-4cd4-ab02-1cd7b416ab9f", "value": 41324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823538, "uuid": "65cf8113-40c8-4737-b487-0daf94104ee3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771826714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771826714, "uuid": "7218bf1e-3f3d-40e7-b237-ff9420e0a7b5", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771826714, "uuid": "c4850b7e-3468-45c0-ad5f-44e75ef6e9d9", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771826714, "uuid": "cc9344ba-73b3-474a-a219-40ae72fe750b", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771826714, "uuid": "cdbfd2af-be5a-48a1-9412-798bdcd3d140", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771826714, "uuid": "af02ad7a-eae5-499a-844d-86488a7866bb", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e3cbb47-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830444, "uuid": "40d52fe2-5c79-4861-8d88-37da9085ee3a", "comment": "Malware payload (Mirai)", "value": "443c92484e4f5903d9cf693549b10e90", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830444, "uuid": "96829dbf-3bac-4397-be17-b1d229c8d545", "comment": "Malware payload (Mirai)", "value": "46de421734f272934e7f6b69db826d4f74db727e89d15a7884420bb625b6679f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830444, "uuid": "5511b6f3-6e8a-483c-9727-d1aa687df853", "value": "T19D615DF7034147335CEB89D632AA4425664C84DBA8DF0F7A9BECA8E68C4EEC87C416", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830444, "uuid": "6de3995e-58e6-43cf-b0d4-ecf941226e0e", "value": "48:i1qZ1r31s91bf1xL1tL1/g/11eR1dvL1SDJ1zf1XD1Q11dudBgJs1bjk:iGtwt/3oyjLeBpMTiBgJs5k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830444, "uuid": "46150462-dae4-4092-b2cb-26d65447515c", "value": 3344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830444, "uuid": "3925a933-7f39-41c7-9baa-f215e74aefc0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e45763f7-1086-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830696, "uuid": "169e1d24-3efa-4ce6-a5bf-b611a5ae10ce", "comment": "Malware payload", "value": "70aeee29c23369c88b1feb58633a46d3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830696, "uuid": "af19ba96-570c-4c3e-9d68-05d1ee037b0c", "comment": "Malware payload", "value": "a46b32d650ff3762f6ad843e1fa7afe1bc7f787bda52e58c484fc47c3dfaaca8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830696, "uuid": "540120fd-9843-4e12-8cc9-62d7f3dbf157", "value": "T110D533E49C2D0F9FE25068B5CAB838FD9B17E2561A184576CB7ED38CFA340DB93046", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830696, "uuid": "828f2396-59b7-4bba-b9f8-2858a40597e9", "value": "49152:yPxGE5JSpZGJ+GcLp/mq+tJLZMK1XFCBkq3yUZzpir4kZlrHHTyepj2uPGfSg:yPx15JiZhTYq+nqscB73L9ir/ZlrH7jm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830696, "uuid": "bbd7c448-ccfc-46ed-8f4c-74b3cb0db9f5", "value": 2944848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830696, "uuid": "dcb8aa9c-bb75-42ab-a111-f58b21e98e82", "value": "application/x-lzh-compressed", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8eaaf23-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830731, "uuid": "937d9202-550f-494b-a27e-0a646f8342a7", "comment": "Malware payload (Mirai)", "value": "02303cbf1f6bbbe779c477b254f6b567", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830731, "uuid": "ef7e8c47-114f-4573-b219-82a5a08e3b5a", "comment": "Malware payload (Mirai)", "value": "edff2e6e0454710afc295a98cae5e641ca87b0f5ceed02699392bdd987026cb2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830731, "uuid": "ec23835e-7a42-495c-8cdd-2eb662e2cb9f", "value": "T13A039E53C93A2D94C63985B4F8219B7E2B53E949A5936FD6D826C274C003F9CFC2D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830731, "uuid": "7374532c-058e-4392-8c63-ec69e5580911", "value": "768:iTUc2eBs3+EuYG6TKjj53iG7/AEt9AKblZ3ay3VJ5egoS6VnYUvC5YMy3:4D3BsOEw5RLtQS2rCje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830731, "uuid": "c7a2c9cb-22a1-47a5-9b98-28d7c67b4fae", "value": 39908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830731, "uuid": "2952ccf8-81dc-4947-aab2-7f3b853fd1ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8ed3818-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830731, "uuid": "4a51e223-efe4-4362-9adb-d39eb2901635", "comment": "Malware payload (Mirai)", "value": "a166af0f425c8a35bcd8f901d5040c39", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830731, "uuid": "454ac8c7-08e5-4cdd-941c-267c017ddee3", "comment": "Malware payload (Mirai)", "value": "62e2eec5a667765305303b5594797e31de5ce7d1a6c1fa3361c97570b5ac834a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830731, "uuid": "f9a9376a-e1ea-4b11-befe-bce7de7e76ba", "value": "T1A31349C59A43C0F1EC1112F110779B519F72A436AA79FB47E7A93A32FC02B1196173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830731, "uuid": "7fe1e7ec-6dfb-453b-a47f-714639993fec", "value": "768:x73jOIDzzrq7WiEu+RiUjre8Ex63a7x2gq1z7yvEdTpKMxn:FjOAzwvEuP4a8EgwHkWItKKn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830731, "uuid": "9e3f5299-d779-4f96-a795-cc2a9ed9f4f8", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830731, "uuid": "d08d08cb-7f41-4ee3-9f88-a53863c2019a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8fcb65e-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830731, "uuid": "79de0a29-4770-46a1-82fc-f778d3f4073b", "comment": "Malware payload (Metasploit)", "value": "8a3803a54a1e9bb1cea7a227c2bb9399", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830731, "uuid": "076da460-1de8-4e71-8c6d-bda8e0b248b5", "comment": "Malware payload (Metasploit)", "value": "7dc57e2042ca79bf1b5bdaad3640dd59140c947968721d12cbaec59682d4746a", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830731, "uuid": "abb17898-bc36-4f80-aa74-7973c1491a60", "value": "T1DBF2E139EADAD520C347B37B20456E8EF8079E17F1EDB26B37A4D1CC8D828514607A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830731, "uuid": "eb90d8ff-a9c1-4191-896e-1f2863581b1b", "value": "768:UaQP+NAiJQucR7gWUU/V10JIOLV5oti2e1o2H3Crpy:UB+WqQuctgdCmJnDsi2OXCly", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830731, "uuid": "b124f705-94fe-4b03-b9cd-72ec9c710af9", "value": 34620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830731, "uuid": "a133a3e7-0fd9-4b1e-b6f8-c049d847b232", "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f965e58d-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "970abeaf-19a5-4ae3-9dde-13c9435a1f61", "comment": "Malware payload (Metasploit)", "value": "4ee96aa1d44ef3dd9bb3043032ed30e3", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "a55cb883-6d42-49b7-9332-6d78ee2d6562", "comment": "Malware payload (Metasploit)", "value": "7047dedb4a79f06667afc7107cd2ae57e7a34d65af6d1e9c418b74e9207a7638", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "d3760c74-c0ac-4610-b02f-4c4aa28c0fad", "value": "T1E0227D36B01A0F30D9AAAB74F0945B9AF85C148FF2163D25B215AFB3C9C31CF5264A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "13da46a1-4359-4dac-b702-b55264950968", "value": "192:eEhMOQfFUUp9264wpmGhejb8Q7Z/c+8poF1d3jvvtl87e6rGxjPmK6:eqNQfFzp92hwYGAjbVcfa7pr1lApyxj0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830732, "uuid": "d6a85c2a-de9e-46b3-9334-01cfb6056fa4", "value": 10696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "182a0b75-0423-46e1-bba4-d73749b17396", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f97dedd9-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "182a41f9-f087-43c3-9574-9bdb5b94ca78", "comment": "Malware payload (Metasploit)", "value": "2660e4fbef73c6468addab2842939010", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "e4d3196b-74f5-4fbb-ace3-b0245eacc787", "comment": "Malware payload (Metasploit)", "value": "d49b1a337270ff054da831cd3fe657c4fb885f51d0ab4aadb7fa2788bae29fa7", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "8b85b6b3-cfbd-48ad-baed-2db73d74c8aa", "value": "T1CB03D600F3DBD91AF1AA95710DE3C6D6B23ABC299D2AD24B32543B1D7C35B708E21B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "917951a6-e198-41d0-840e-b97fff7dd08d", "value": "192:gAntnJaoZEvAqh3FtAL0Tqdnoq6/6rr109FvleVqJNOl3b5YNJOtpnOrbpfXfNoU:gIPphiSif5i3STOtgb9+5d2ZPk4ejtl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830732, "uuid": "ba69f778-dbb0-4b20-ac1f-74799d026bcd", "value": 39424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "3c72827a-6297-46f4-bc29-dd804b4eb21e", "value": "application/msword", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9b5bfc1-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "e4f5064e-7ea8-4720-a6b4-ba4e192e6470", "comment": "Malware payload (Mirai)", "value": "642250ab9a225d0ea2d098fbd5560533", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "215eda22-bdd0-4868-8315-8a1ae38e2166", "comment": "Malware payload (Mirai)", "value": "17f579e6a7d9f23ab61522c7e9411254524eddbcd5348d75e6369640995f38c4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "a7055f69-fbb4-47f7-b17e-b1e1566bb5ba", "value": "T10B43F89AF9C28A15C5D412BFFE0E118D3313676CE3DE72139D205B246BCA56B0A7B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "7237662c-e75e-444c-ba82-1279d614dba2", "value": "1536:bUnzbXpccgjHNwzgfU4gDkzoI+iYtnRK1rL:WXOcOt0WetnRK1r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830732, "uuid": "5afd85f0-cc91-483c-bcc3-509b33c6af94", "value": 58744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "7927b32a-5c70-46ad-b70b-dd33f9fcb81e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9c52b31-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1771830732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "546df082-eb5b-472e-af45-78d775a1c146", "comment": "Malware payload (DDoSAgent)", "value": "3841c467bd8ffc1af4ee005cff7ea799", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "7886633a-91d4-498e-a4a2-737314faf9ee", "comment": "Malware payload (DDoSAgent)", "value": "aa1b7f97f8711871052f82e4e4826173ea31f071bf13c815e841cd7a2c20876f", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "2cf72a88-cfc4-4081-b49d-d2a8c827a5ba", "value": "T1E1F33907771C0A83D0576EF036F717F187EBE81126A26240F61EFE846276BB16819F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "db4d5c1e-7365-4943-9983-e17506298bb4", "value": "3072:Tom9ZxeuW07vxT1gLascDBZfmHkaNSrxth76XWf8xi:UmDxeuW07vxTePc7fmHkaNSrxth76XWf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830732, "uuid": "67c67941-2beb-4d61-9af0-c60bdebf0a57", "value": 166630, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "78c20882-39da-4bb3-a433-6588a84c419b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9c6eb02-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1771830732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "736be3f6-2086-4826-a87c-38b24a115e87", "comment": "Malware payload (Gafgyt)", "value": "ac267982d83b5b5ac299da7d518d376a", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "780777eb-6874-49b0-9b53-616409621c2a", "comment": "Malware payload (Gafgyt)", "value": "b8d2a44ae199fd36b05a25ebbc99f481921e7eb5e5a5bf643a35a449d73f925d", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "1ca4447b-db96-424b-bdf7-fb607aa5f9d4", "value": "T110E32853A8655FA7C196AFF522E34A750753FC114B4B0B8AB23AEAF40207DCDB8097", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "25365536-195f-462a-8fa8-ffe000240ac4", "value": "3072:FEWiLaXbxK2asipWjjJ6cjlByT1mlqaN7rx+v7MXWffhi:FEWiLaXl7e0jjDZBm1mlqaN7rx+v7MXj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830732, "uuid": "5f109402-66e5-4745-bc48-28f5ffaf3ac4", "value": 154213, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "94b8437c-8238-463d-81c4-1285d12d4133", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9cb00b5-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1771830732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "5ba20e69-891f-429e-8d7a-59f56b41ab25", "comment": "Malware payload (DDoSAgent)", "value": "5c1f93a1853059f2c25c5bb78a2e4f87", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "3be0e3ef-c419-408a-8eaa-f389126d1a43", "comment": "Malware payload (DDoSAgent)", "value": "bda6046d5713266f838ec8dd5bebaee7d2359e31a235b978ad73212a6bba1a22", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "11a4356b-5510-4edc-9a00-28e55dc69bfb", "value": "T1BE735C05A392C0B6C4834BB011E7C73656B1EE7103128E2AD71CFFB59F26686B56A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "8953553f-fbab-47ad-826b-6835437dee23", "value": "1536:V3dzApF5eR9QUD3180mPobJvfFfriiF1d1Fdaf:V3dzsfqFisbJV1Xdp2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830732, "uuid": "399f3b0b-63d2-47e2-81aa-936f2db6fb57", "value": 74312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "eab3c814-6593-4f0c-95ea-78b2bc6bf364", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9d0d6bf-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "8676f145-eea1-4d91-be10-31b8f3f397a2", "comment": "Malware payload (Mirai)", "value": "ef4312c879fbb1adc68197dd4291ab54", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "7bf6e7a5-2921-4a84-9127-62c7039decac", "comment": "Malware payload (Mirai)", "value": "7d2fa921fb4312bd0e56861b3bb90b7a1e8095d6c2eb7758498d50fed14f4471", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "6c0c4cd9-a0b7-404d-b923-22367dbccf02", "value": "T19E131842B3180547D1631EB0353F47D0E7ABAE8122E4F288760F9B4DC171E77A946E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "a67f3383-e85c-4f96-95a5-68ebd1729f52", "value": "768:TuZQBal6xzFogyxBvDM/ccDP1UqI9XFPTMmy6/janpyvsM73V+Otauo:T0UFogW5DM/3DyqWPwmy3nYx73V+uaD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830732, "uuid": "3ed3d722-b3ef-40cb-aae5-4fd635c0c8a6", "value": 44168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "e01ef7dc-1834-4208-9773-c4dd9b9a5ba3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9d784c4-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "c77e1d62-e0ec-4ca0-84b8-da356ed1fd90", "comment": "Malware payload (Metasploit)", "value": "7d96341d1d91464b990e998cb0703cb0", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "0990e287-076a-4616-9547-c0d92404c9b0", "comment": "Malware payload (Metasploit)", "value": "558bb6eb15dcac4cff35a953b35bd6b067df71db3d36c7b6f29f7f82fcd73fb8", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "8bf46ba2-44f5-450e-b665-2b98d315a305", "value": "T1CAF2E129AACAF530C347B37A20465D8DF9075E1BD1EE726B3EA492CCCD0185D4607A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "808fda3f-6a80-4645-baf9-6ffcb9ebaf7f", "value": "768:K1QP+NAiJQucR7gWUU/+10ilOLB8Jtite1o2H3CrpU:KA+WqQuctgdxmiSiHitOXClU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830732, "uuid": "2629fc40-e231-43c8-886d-05117593a0a8", "value": 34620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "d4829a4b-64cd-4b74-a244-422eee67c37f", "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9d99a7e-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "bc55df83-5ee9-403c-8be1-403d5a743a88", "comment": "Malware payload (Mirai)", "value": "c54438195eee98af0cf60c2038a5e524", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "6b044b39-144d-4dea-ac1b-25564c247fc3", "comment": "Malware payload (Mirai)", "value": "adc195231c91e045f53a1a16bf5b2ba71aa36471666ee71603ff6996d897e660", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "80db9ff0-f846-4be1-be04-da715d9133fe", "value": "T143141B02D5518B57C1C61B7ABB9B425A37336F6893DB3301AA28BFB42F46B9D0E3D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "9282613d-86a1-4cd6-91bd-ee224c0cc86e", "value": "6144:2esZX+a2XvsboTMZ5POTUFUTmfGQ4ZP9P8Qg9PV:2e4X+a2kboqcUFUTmfGQ4h9P8Qg9PV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830732, "uuid": "af4a93b2-0e8c-45b4-b35a-cc5b7831960f", "value": 196840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "c689b5ff-ae80-47f4-9cf4-ca4e545dc748", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9dabb0f-1086-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "7cd5ea84-3ce5-47c8-943c-778f244d1f4c", "comment": "Malware payload", "value": "1938a3545517650824657fd09ce4ee16", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "98c74b22-448b-4901-860a-7770f8d8c3fe", "comment": "Malware payload", "value": "602dbcf4008c585582d5e5d5c8ddb1932fdee07a14308e9cbf937904f31df1f7", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "74aa9ee0-0063-4a30-9c1a-53b14c969645", "value": "T1BBE35B0773A531F9E1778238C9A64906F776787207619BAF0364477A2F233D0AD3AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "59bfbaa7-84b9-4e58-a481-755c163da87f", "value": "f9a28c458284584a93b14216308d31bd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "6b30a68e-d830-434f-a8e9-8aba71c6ff12", "value": "1536:bcmdSR7NBuNA124hAsuDBajpQZfCT4DbAkfe9j5w35GKQTgtxjsWCtd7p9dlw2Qn:4mQD0Ar7pyPA8e9u35GKckxStXlp4Il", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830732, "uuid": "66d0aa99-b3fe-4ddb-b0db-249cb8fef3bf", "value": 153600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "e17030b8-db4a-4e43-a5b1-cf1b16b518f7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9de45ca-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "dc6ec399-6c03-4c82-9da3-677cc175e78c", "comment": "Malware payload (Metasploit)", "value": "b36523e7232dc4d777864995b32c7720", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "4b0e4e09-abbc-40c0-9bc8-6c936682274a", "comment": "Malware payload (Metasploit)", "value": "cfbe6716fd8a4a39a17c9e7bbfe3e3baf48252d44bd4dcc91f77ebed5ae9c5f1", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "08049ed0-fa96-4064-a2cc-a3537e75458d", "value": "T1ECF2E129DA9A5565C387B3FFA0466D8CF9075F3ED1DE72A73AE081CC8D1289242026", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "2e58bfdd-c371-4598-a9da-5bfda83f0ae0", "value": "768:iZQP+NAiJQucR7gWUU/K10epOL5gyFttihe1o2H3Crpp:iM+WqQuctgd9meOmITihOXClp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830732, "uuid": "363d1e96-487e-4ec2-b9cf-4a423b27da63", "value": 35255, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "3a1a1fdc-8147-4030-afc4-ea32fb341d8b", "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9de6fa0-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (SweetPotato)", "timestamp": 1771830732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "a0a4fa93-2fcc-4185-b594-18aa4cc07ba9", "comment": "Malware payload (SweetPotato)", "value": "b6bd8ff194d22d83a123a3ad48edad62", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "4642d888-3bb3-4166-b2af-26047ab91705", "comment": "Malware payload (SweetPotato)", "value": "3cc739bb1882fc9dbb056f39ebe4965771aeca0ceb44e85da39d1ba7dade693f", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "2f9837dd-589e-4d01-9be3-47e15bba7b1e", "value": "T1B4F36B4673A130F9E5778239C8625A16F772B47207709B9F07A407BA9F273906D3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "3f91140b-fa3d-43c1-a512-2589a57daa09", "value": "e1742ee971d6549e8d4d81115f88f1fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "98ae4480-b8f6-4a62-9977-ac6d174e6414", "value": "3072:Oo3snIMKGAL4T4ulYAf+EV6ec1+a5CDOaVBC0UzL:dhcAXZAx8eS+a5OUzL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830732, "uuid": "f0abf1f2-6f10-40c0-b408-b46490f03d41", "value": 166400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "e17fa6d7-bf1c-4f9c-a4a9-792b94036da7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9dedfae-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "5fa04c78-e11a-482d-b0e7-7bc0597babd4", "comment": "Malware payload (Mirai)", "value": "9f02bf1276cf03355ba0a1a67ebdefde", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "b353c328-31a2-46d1-9357-70b91da9aad9", "comment": "Malware payload (Mirai)", "value": "4cd772c9fc218a2c4e7757cb23d19f89c8861013a4cfdce6d0a51dd38e137755", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "089cbefd-440b-4d93-859e-f3955302102c", "value": "T12553941A2A258FADF76C873487B74E229799379727E1C644D15CEE001F7038D641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "61df9c4b-feb1-4a69-9514-882da81b3311", "value": "1536:dMBsSfxA6HdeKImzB1M1Z6Bc2ueZqf3J3J9:af/HdeKFB18eZEZZ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830732, "uuid": "bdcc8f6d-d0d3-4362-b791-5aafd014175f", "value": 63660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "e718edc6-a3ee-4116-ac18-0ce156a28b41", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9e56557-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1771830732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "03ec13c8-c16c-4413-9b68-f605c99b356b", "comment": "Malware payload (Gafgyt)", "value": "c40d515b64dcbebb81127688ef3ffd95", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "1bb55f19-e6bb-40d2-8717-8ee85d2f2b81", "comment": "Malware payload (Gafgyt)", "value": "58baacf905326bcebdb1211fe0c3e43e807e08bd50fca6ce556e1e6580b3f667", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "609f6bda-2497-4f2d-927c-e8cf62753193", "value": "T113041803759185FBC4D68FB41BEB95528933F8391B32620AB398FDA91F0DED86E1D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "c444507a-7658-4cd9-91e0-681e504bd807", "value": "3072:W8ZZDIEKXlRvGGzbJU4lpqppZVhA0KkLxRmuan+wshqo0ENbfhhi:W8FED+hxdmuan+wshqo0ENbfhhi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830732, "uuid": "b84fb0ef-0231-418d-9244-163d4263d274", "value": 182678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830732, "uuid": "0609d89d-082d-43e5-acde-0727a83655f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9f16602-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "0e8e0965-d361-484c-9a4e-e32a8be8a1d8", "comment": "Malware payload (Mirai)", "value": "163d71287e15330285cfaa136518c82d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "d08d949f-b520-40f3-a959-7d67f0033aa5", "comment": "Malware payload (Mirai)", "value": "344f4f02f68788bfae4af5639ca567b2927e1973c61d1da40990f07dc98c3dac", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "dbafbf84-1186-4883-98fd-d715b8be6641", "value": "T1D9E34A416646C6F3C8C30FF602A7576A0633E8295F2B9E49F32DBCB45F0659CF2196", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "c931bb5f-571a-44b6-a7d9-05eec85444f3", "value": "3072:chYh4MAOi2/GOLwx/UaW3sEDMdBmyanDdrh350BXDfwhc:ch/saWcEDMdBmyanDdrh350BXDfwhc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "2430a62e-e511-49c2-898a-210723fbe38e", "value": 149528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "1cec01ec-9bd8-4b88-9978-1677bfe2458c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9f393e9-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "7b293f21-861e-41c8-889d-d454ad18f153", "comment": "Malware payload (Mirai)", "value": "0c7d81e893bb919d89910580426a8f83", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "330249b8-b366-40ab-a8d2-6de68ce62d22", "comment": "Malware payload (Mirai)", "value": "3bc121e957dbcf2e093a92146015db4afa17ca35f872ed9d6e055d28563bf27b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "0745f844-7c00-4de6-8e7c-42ac91ef7e2f", "value": "T135040993F905DEF6F40AE73204D30B257271BB520A531A36B21BB97A9E3A2D43427F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "2dfd6910-f012-4fab-9bd5-fbae55aecccf", "value": "3072:EB/Achsc2qiYSuQqEpbpPsfcW/6SzmLvKQIyHRu5eaeGmHknNarxtK76XWf8hi:GsoiYSuQPLsfALv2yHw5IGmHknNarxt4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "ecc80996-d7eb-411d-bf5f-3dc2a8203a0b", "value": 185576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "3e84eb35-5b62-41f0-804b-bd0dd0769c2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9f444db-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "b6768f8d-cca8-41a0-908e-2a3caeaefcdd", "comment": "Malware payload (DDoSAgent)", "value": "8bc4b8c68388f3d1f1890a71e78d3644", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "ba99fe59-013f-4b1b-97a6-3b8dd6402e70", "comment": "Malware payload (DDoSAgent)", "value": "a77a239911c3d61d486d83795b44e2d17bd4c478105ea4ad91a93cd191f7fda4", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "6f1219d3-e879-4fb5-942f-9233b38aba70", "value": "T1CAF33B17671C0A43D04B6EF036F717F183A7A91125A7A140F60EFEC86776BB1A41AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "90ad6c83-fcb3-427a-87fa-591dd3be9dec", "value": "3072:oSgLlZxasbk0xD71p5dghr+rGKl6zfmHkaNSrxth76XWf8xi:oSghZxbbkED7r5Sd+izzfmHkaNSrxthr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "e5fd0973-bc58-492c-91eb-47c597200cf2", "value": 166598, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "1f4247f1-5fa6-4139-a795-d6aab1538248", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9fc43c6-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "b7ae2a93-337e-41ed-9500-a1769a19a562", "comment": "Malware payload (Metasploit)", "value": "c2db86b46eb27d46d7d710b707876ef1", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "9eb87b7e-b01d-407a-9a26-83e334d812eb", "comment": "Malware payload (Metasploit)", "value": "9818172dd6c8550a50ba902ec59300f68f8caa8afcbd585d2d7a60353668159d", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "3ee5c10f-8b2d-4bd6-a83f-1cd79ff849f0", "value": "T1AEF2D039DA9A7520D34BB37A20466DCEF9065E17D3FEB666369492CC8E028514703A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "678b2af2-9fea-4a8c-9a69-ca9e2f2f3b65", "value": "768:azQP+NAiJQucR7gWUU/410gPOL92m5Vti7e1o2H3Crps:am+WqQuctgdLmgYQWi7OXCls", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "22b2f5d8-a0e1-4af3-a828-b988bd59fa4d", "value": 34621, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "3059c18a-c2fb-47ac-a551-a9ab79ea339e", "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9ff8a66-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "409a3c81-e01a-483e-af28-3fdfacb01321", "comment": "Malware payload (Metasploit)", "value": "bd0edb96fe6f64271fca11c33708efb3", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "057332dc-d702-40b5-b32b-615e95871246", "comment": "Malware payload (Metasploit)", "value": "513a2bbd8758003f748f097a852cbfdfba2b65191db3463cffd2663f13f6da68", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "9af8b15a-447a-4139-8269-7cb5f5585c9d", "value": "T18FF2E12ADBCEB520C347B77A20467DCDF9071E2BE1FEB2673AA995CC8D0285146076", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "4f57d797-820d-4979-b97c-58a9c9344015", "value": "768:UiQP+NAiJQucR7gWUU/t10BwOLVxN50Xti+e1o2H3CrpD:UZ+WqQuctgd6mBPLNSi+OXClD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "273cdc42-2a82-407e-ba5e-bf1c0ed94134", "value": 34883, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "d5426cbf-d792-4439-90bc-fdf74d7fcb39", "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa1bba37-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "aa30aea1-91ba-40cf-a806-25e330ea4307", "comment": "Malware payload (Mirai)", "value": "0de8140c08589544ed0d208d7cf51319", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "f8e6a626-c422-419e-9b90-0da66f329ee1", "comment": "Malware payload (Mirai)", "value": "cbe70463831bbbbadb9ce8fb23f0055db3486e7b6a8c14854983ba34de49c9b0", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "165a32fa-73f6-429c-af67-9c08d004d842", "value": "T16A04F901F9144B57C5C22BBAF79F42993B366B2897DB3301EA18BEB42F4679D1E391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "85e521fc-55f9-4884-82b0-71a8cb562309", "value": "3072:PDMToVhS6OG754rQH/4PNYdD4siYDsm3+IaWf/m5kn8SGZEB1LbjSBwmi:LGUH/4lYdDJ7Im3+snm5kn8SGZEB1Lbn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "41ef56e6-a499-47aa-8c6c-21bbfe32c620", "value": 175047, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "2ba91e21-7da2-4a16-9057-a150a7b16f04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa1cff76-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "72f3fef8-29c0-4727-96c0-a0f06bf65492", "comment": "Malware payload (DDoSAgent)", "value": "db151fdafcd22d8618c0e15068cb9e1b", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "4cd34f61-5a4b-430b-8cfc-c3ff1e54414a", "comment": "Malware payload (DDoSAgent)", "value": "f11bcac3ad9105108dcc1b4e055779e4c2ab72a7ca114139eaf3687f5c2ff170", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "3a3b7fdf-a996-4584-9095-7d4ba619e227", "value": "T17524E7076BA19EF7C89BCD3302EA860120CEF05722956B6B7378D65CBB4A94F49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "1c60171c-75b5-4591-9968-c2183d57ef3d", "value": "3072:ikkyo8Jbqa7jlSLUOdIlYDuWCP3moz9nzBsNcPUTkFizT:FkKP75zO+lYi13moz9nzBsNcPUTkFizT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "1508b514-df75-4a9d-8035-fbc7652a589e", "value": 227701, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "49fd7b94-be22-441d-a57f-f60bc5860d4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa21c51b-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "e8b05408-955a-4abd-8a50-f56d53931632", "comment": "Malware payload (Mirai)", "value": "c39ed054136d47586944ce17fe7e1624", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "b2be5164-d0b6-47f9-a6fe-382d7411d905", "comment": "Malware payload (Mirai)", "value": "3e9c3f49e97a8b4ec387b80304cd0488e4d6e566e82694e12947fd4b17eb7989", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "200aad2d-e149-4768-9e33-9c704adfab59", "value": "T196040905E8144B53C5C32BBAF79F42993B326B2897DB3301EA19BEB42F4679D1E391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "a2ffc7dc-93b1-41a8-be21-bb83e13bca12", "value": "3072:oJFTnVrSL4G75Hxqf64J4VnFKvD7Nt68+eilIRzbhmoknIDjZitsJUjRi3hi:Q8Uf64SVnFG5t68+5aFmoknIDjZitsJi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "337cff71-673d-4a7f-a4ee-dca9cb189842", "value": 180993, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "eaa7be70-5d5d-4575-b0f9-3e987c764a5a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa34ea16-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "010ece2e-a2f4-4095-95f8-3e1506846133", "comment": "Malware payload (Metasploit)", "value": "be0efa4c2c6e815b49749a21186f6660", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "386fb1e6-d5fd-4ae6-9211-b70f3e85f8af", "comment": "Malware payload (Metasploit)", "value": "071207d36467fe346209d513ffa7366491479b6af4592d5ed43efdbf6007dbbe", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "0e4a4652-ded7-45b1-a599-31ee1d11f999", "value": "T127F2E12596DE5531C387B37B20466D8CF5079E27D2EDB96B36E052CC8D16CA253037", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "57ad4754-d03c-4545-a3c0-42ddf3fe012e", "value": "768:2/QP+NAiJQucR7gWUU/410g/OLh2FHtize1o2H3Crpc:2K+WqQuctgdXmgIkFNizOXClc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "a74f5936-d0cc-438b-9743-60d3afe5c873", "value": 35211, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "0c1b8708-9129-48f6-ac34-c81fc0772d78", "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa37dd7a-1086-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "497b82f1-be24-4e70-b4b8-1997b81f8d42", "comment": "Malware payload", "value": "c3270905e2da14e91f14e8d679eb2334", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "1f56bf90-f025-476a-91e7-f003430a8863", "comment": "Malware payload", "value": "02ec371868f200a73be422bad4762884f6aec9932550b9a344db25d7a8f32ccc", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "96ae81ee-ee66-4212-842e-833478e61a32", "value": "T1EDF2F134CA2760F1F4A7FB75ED390951F66C49A081C63BAA3C2FC299D0B3B4D6A275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "0fab77b5-284a-44c6-80e1-8e47b744496f", "value": "768:BADnm7rdW8RhejMaCRWrY/CGD5uLiNTKUUESvGOfoZ42o:Am7rZHISr/CGD5uLmdU7e0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "5939492c-89a0-4b33-a425-bbc13edce9ef", "value": 36754, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "5f157e81-1954-4523-a8d7-4f1f1f5e85ad", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa3957c6-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (AdaptixC2)", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "5b90bdb8-6b3b-4b2f-9175-9719fa661057", "comment": "Malware payload (AdaptixC2)", "value": "db9d6f2434e960b380c4a6073cb85b24", "object_relation": "md5", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "efcb1f9f-d119-4894-a3a8-95144591ce96", "comment": "Malware payload (AdaptixC2)", "value": "0e7d48636d29a59361c13d60dcc16aff14a0e0b16f8a1dd346825a8b139e0ef7", "object_relation": "sha256", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "d385d37e-b141-4a0d-a8c5-71025e81d14e", "value": "T14E834236E6B3C4ADC05BC634AB8394B7B9F07C5C463475194781A6223B5FE386BBE5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "6a1d5e87-f12a-49c0-a785-fc6a12eaea74", "value": "6b133001594cf90aafbcc38997fd46e7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "efd679b1-357a-481a-9eba-2636ddf83a32", "value": "1536:jv5DkpcQqa1hAGH2GAd/SUcNQI+fNbm1M4V5R1RHZljA6d0tp1OHFkkN:jv5DfSQ0RNTEJtpo2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "2f910db2-e76a-41bf-8dde-012f3b83f12b", "value": 84992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "0f1ddcfa-dc41-4e22-9685-96663bbb2f00", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5afd9cf3-0ea8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "69ec4972-cc54-4c06-9aeb-e35073785cfe", "comment": "Malware payload (Mirai)", "value": "e6c1881012b05e8ce06be0541a174f0a", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "d62338b2-67c7-4af8-854a-fa9608a5033f", "comment": "Malware payload (Mirai)", "value": "32c7cc8b0c85be01b23c0b826fabaa757fd2dbb516a2ff38a26dd09a24d9cd33", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "6b4b8566-e83f-4147-8c68-f7238ed40386", "value": "T16C133BC1A643C1F2EC5212F5147B67628F76E4365A7DFA92DBA92531FC03B10960B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "3943c1ba-5a9b-4a81-9555-47b0194714d9", "value": "768:QQaiSup66OkEgy5oD5YQuj4JUUTeU4wQOnUspVI/4bOGd7nX:QQaiSuptOkEX6D5YQ/JUUeUDtUspDbOY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "314832bf-cf2d-4c22-a767-37c15cebb911", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "bef2e223-5411-4ab4-a85c-98d38b52052f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa487b94-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "0a0a5311-d62c-49ae-a9aa-596101fe3a95", "comment": "Malware payload (Mirai)", "value": "a865e5e58ccb6f9ffdbda73393847703", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "87ee1989-4006-44d4-add2-747e6c4e6537", "comment": "Malware payload (Mirai)", "value": "e120e5c15e833ca008528e41b0b0859cd35068a00767b5fe7b73be8b618d2c13", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "05fdf954-bb81-4a90-9103-a13718621830", "value": "T1E3231894B9829A16CAD0437BFE0E42DD3725A398E2DE3313DD225F6137CB92B0DA71", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "acc6e95a-d032-4803-8045-d36b1c0eec6d", "value": "768:mXYesyi5wPVQEkJVvOwxPFV4iRu6Jj3oSCA6gPj5+uB4Pl5Q1ML0xkbUFqBgEk9H:jZe4vrR476JdnPj5+uBaluZObUoBEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "af522126-6abe-44a2-89a2-6412cfa3440e", "value": 47940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "ba755955-373f-43c6-ad20-5b9321e2bd60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa508769-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "9000a05c-8438-4939-83ec-634d41250441", "comment": "Malware payload (Mirai)", "value": "b8cde8b709ca93b44e02ef7a7371b74c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "f867fe75-93c5-41ae-aaf8-9c6e502544d2", "comment": "Malware payload (Mirai)", "value": "493d16585f6517226e6f9a595945450aefd437ec1eedb05160c8a8c63e51e857", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "06a94bc3-8681-43bb-9f52-270738a955d7", "value": "T1693319B51516F2BCE9E22078F40720F529530A1C3ADCE2D3B0930579FFB5B48B96AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "f16e69a8-729f-4bee-9e4e-a82372c8f099", "value": "768:zMClhMqB0yBuKw3GoACzQyZRtlkABYxQpTUnR9ww31:zF0vZ2oR9DtlksYisMs1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "795811cd-d961-4dbc-a0f4-e1774460bd27", "value": 50632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "62c14dd7-a518-44e3-bec7-265be283b7dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa5a6e04-1086-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "f6ed804e-0cd2-4ade-a11b-4f83173295db", "comment": "Malware payload", "value": "2da00e62c1f064a4c23137f5eb439c26", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "09692285-a787-4e30-a61a-c017455f3668", "comment": "Malware payload", "value": "a2bafb5367ea1de0349c20bd59c95ab5143a174c7deeecf1c6bbb012bcd6bcbb", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "538d350b-2d1c-4274-8d10-798e6ffb06dc", "value": "T177F4C02013F8826ED5BD1771F0B0542D46F6F60A3EB0DBAE9F42948F3622B41E555B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "e94de1a4-589c-4436-bf17-783bf3fc1331", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "a32ac153-f38e-4955-b830-e60640b50ac7", "value": "12288:D1nxXSW8YdocZbsm7PHZxsDDMOMfyTyJxtXotYNLNOb79qpnsBOGXe20bRLqLFbE:D1nhsYdB9sg/ZCDD6OyJxRoCNLsVqpnv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "93699cc3-539b-48cf-a05b-7812694d52f1", "value": 765440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "da0c5936-cbf7-4f3b-9b68-05c92f5e8f1d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa764439-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "52c2ffe4-0d15-4bf3-90a1-41cf9d18fa5c", "comment": "Malware payload (Mirai)", "value": "739a0975e4fd3dea67a3d54f168b9934", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "6bc855be-dc7a-407d-98d7-059bd0ae17a6", "comment": "Malware payload (Mirai)", "value": "cb1e37c0e272099d0179bb1a53e916d0208d615cbf9214837c6c4b985d33dd3e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "0efc2c4b-5dd3-496e-bc37-ff60cb3152ed", "value": "T1B953831AAF650FFBEC6BCD3745A91B49349C640A12E93B367934C818BA5B20F45E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "6dfeaf36-9022-41c6-be36-138b00ff27e5", "value": "1536:yGtQ8AKyjOz8lIXDXUAFrMSL3bKL2LZgsF8qD:yM6KyazQWDUBL2LB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "5ac21e3b-0e8a-4846-b4ca-102e452dddf0", "value": 64380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "532c63f5-2fba-4a93-9eb6-2728c0b2c975", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa86849b-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Rubeus)", "timestamp": 1771830733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "191ad856-acb8-42fd-94f7-3df6b0f1246f", "comment": "Malware payload (Rubeus)", "value": "3a85d8a51ff724ce38a02d435e0c0bf5", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Rubeus", "colour": "#3E32C5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "a2d98cd5-617c-49c5-a525-1f66f0e6735a", "comment": "Malware payload (Rubeus)", "value": "84b24071b0229e189f03bc643027a63c582b02f6e96e82d730e12793cfcd9abb", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Rubeus", "colour": "#3E32C5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "d9104212-bf4b-48b9-b223-5fb97adfd431", "value": "T1FA35E1392BEC5F09E5BF0735E071491906F2F112A4B2FB9EEE85909E2913B44E8217", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "7776523e-0455-42b5-9819-7c94d8deae73", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "4782e437-4b10-4f66-aa74-8f7fe5066613", "value": "24576:2ZeqOjAlC+9nHLmX63wZSGBI/u0+eW81ATw8FD5S7Ms:2Uhsl99nrmXOFp/HJW8itDR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830733, "uuid": "0304ae4d-42a9-4df7-8027-d98016f3f864", "value": 1061888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830733, "uuid": "7235659d-a41c-44a8-a506-7f2827b8565e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "faf10375-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830734, "uuid": "febce6aa-13ea-49d9-8f62-dc8006bef912", "comment": "Malware payload (Mirai)", "value": "491a6d2c5e82a73d9c1e42ae2a7416f6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830734, "uuid": "737b39e9-3615-4695-89a2-6698b23e3008", "comment": "Malware payload (Mirai)", "value": "b1915df3a058975ea8cf908c27075668d2544638f7512cefcc9f89731e367b32", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830734, "uuid": "498fd9ba-3613-4a8a-be41-64efc458b44a", "value": "T16EE329416686CAF3D5C31FF612A757220633E83A1B1BDE05E32DBCB45F19188F11AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830734, "uuid": "2ad51b10-1c88-4a23-8feb-257979d74ea3", "value": "3072:pRlee2jGkKSJ+/+FllVJtg4mnmyanDdrh350BXDfwhc:pRlFm/rJa1nmyanDdrh350BXDfwhc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830734, "uuid": "cea6a9ee-7521-4a8e-a1ce-d9fc605044dc", "value": 147224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830734, "uuid": "9f91184e-2200-4c10-9cf6-d35f988bbc68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbc8eb0c-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "a5c70daa-9cdc-409b-92dd-3b183d14a90b", "comment": "Malware payload (Mirai)", "value": "0f28c22ece595874b5348fd047b433fc", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "077420b2-b8c7-4e52-8929-81005b3abd09", "comment": "Malware payload (Mirai)", "value": "c1f6e0c2823e27d39d2f79c55ece6bfaa4034cbcdb4e3e9e337cc3f34e8e5541", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "abac3489-9916-4bd4-8763-eb0018d62df0", "value": "T198133A92B400AD7DF85EE73EC093090AF131B79551821A3763A3FD776C322A85D76E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "57ab3f2c-b738-4941-889d-1a3af00ed913", "value": "768:0xqFTD4t0MoBjFoWEw0Cmk+3oq6WluD811JtTRHGtHwl5bsW71:COaWVeWLHVQ6WkD811bRHGtwlXB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830736, "uuid": "15d0dc77-e583-4d02-ab01-0f649c42d3c7", "value": 45516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "759bed92-127e-4d89-b524-64a840144b0b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc2fb758-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "34c0efda-18af-4022-a51c-3228cff52c15", "comment": "Malware payload (Mirai)", "value": "e7298aa5220c6098d516151e75f4edad", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "42e997b9-a727-43b8-acf8-6b7ce2c4a5fa", "comment": "Malware payload (Mirai)", "value": "2de5c08707c1a1b87ae20fffe74bbfb56a55728b1687fa7412f67332c2aa6401", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "40f8a237-8166-42bc-9c7b-edccfe544a91", "value": "T1FB042B05EB508B53C1D22BBAF69F434633339B58A7A733059528ABB43FC679D4F225", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "ed993c28-82f7-4f1d-91da-2b5dce568b14", "value": "3072:wv3e5C0ovungilFqWXxna5uG7QiXs850P5UOfPzSe7M/RpGjICSO:wmTVXxna5uG7Q60P5UOfbt7M/RKIfO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830736, "uuid": "edec8765-26e0-4695-9f15-92051c68b4e7", "value": 183674, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "22bff047-9154-4e9b-a929-e13c312b0744", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc30c85d-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "6ee21b2c-8e72-4a9f-a409-83244b44a589", "comment": "Malware payload (Mirai)", "value": "c0cc04cd5107e4b38fe82e4335e9d24c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "38eb78e8-35cc-43ef-8a53-4f0aa58dd76d", "comment": "Malware payload (Mirai)", "value": "736f43d55eb1d8c59630c9077ae28f03c2430ec1398165514214f0fb5b9aa26c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "8b3cf693-785a-4c72-8689-4330893ffb69", "value": "T1D9330A997C818D2AC5D012BBFB7F02E9331563A8D2CB7313D8149B587E8A51E4F677", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "c5b3c224-27e0-4243-934f-d4f99b6108d0", "value": "768:Uo8D636IXLb1aG+xC3pXNyTtL9SbOQuw5l+M42zJWzRTW3t3lk7iKcP4sxILIxas:Uo8G3NLIxCs12OFwKyzJqW/zxILIE63", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830736, "uuid": "34fbcd0f-be18-4845-afba-8b9b68502c87", "value": 50287, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "7e0880a3-d953-4de5-93ee-7c8174e18126", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc32fcfb-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "9266e8a0-a3ea-4279-8f50-917e83a1ec41", "comment": "Malware payload (Metasploit)", "value": "b69c6fe133e93a7fcf036967d9a73ac4", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "d1ca6f3c-2a0e-4e8f-9c61-f02e3f7364e3", "comment": "Malware payload (Metasploit)", "value": "d372d58a85364bdce80030573a91c3a51d1e06b238e973cf66e31ae1c4c2360c", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "c06e93c3-63a8-46f4-a4df-c41cf840b0f6", "value": "T14D227D3AB11A1F30D96BA774E4945B5AEC0C148FF2562D60F315AFB3C5C22CF5264A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "aaa0d588-7e46-4d21-84e9-448e2834f850", "value": "192:eEhMOQfFUUp9264wpmGhejb8Q7Z/c+8poF1d3jvvtl8dwesrGxjPmgM:eqNQfFzp92hwYGAjbVcfa7pr1l6wesym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830736, "uuid": "df2ed743-649a-4364-8001-9dd87534ebae", "value": 10697, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "ca340b5c-67a4-4078-8d6d-9166c4a01133", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc33df0b-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "5237ad0e-9241-42a7-833e-ad10826de2b2", "comment": "Malware payload (Mirai)", "value": "be565f104222d70f01886e87f5596cae", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "091d5b2a-c90e-4744-862f-ba72b5dec014", "comment": "Malware payload (Mirai)", "value": "ee00209955d8efe53fe6ff284d72a33ac4a440f2e67a9d684020eb16bfb471a4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "1247ad07-742c-4ddd-b7ad-6bc359a2c839", "value": "T1B82329035491C0FDC955C270AB3FA637C922F47E123AB59D73E0BE226E4AE311F5A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "dc53472e-51ca-4718-8758-49f1e598f6c3", "value": "768:FkrR8ysZAY+OGZZRw4x6wPtKOo3vHjKRDACGyjltp4B6gC:6d8y2+OOByfDckCGyp4B6gC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830736, "uuid": "5d642f8a-dfeb-462b-9e32-a286952de3e7", "value": 46400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "4c54074f-9deb-473e-8581-6ddfbb6ae1eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a198ffdd-e222-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "d110aecf-7228-4264-ae19-fd720300815e", "comment": "Malware payload", "value": "1fdb1dd742674d3939f636c3fc4b761f", "object_relation": "md5", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "Havoc", "colour": "#a1abbd", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "ae939678-b19b-47f2-9f5b-6834d929d576", "comment": "Malware payload", "value": "9a8e9d587b570d4074f1c8317b163aa8d0c566efd88f294d9d85bc7776352a28", "object_relation": "sha256", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "Havoc", "colour": "#a1abbd", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "e81f96b8-d72b-42aa-b569-df7a35450fa7", "value": "T1D143294163B84A61D0ECC77961F20B0547F3E21E393AD7AB5DCD91DAAF9738291233", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "8a727c76-3770-48f2-8b94-62b8106eb39d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "66743c49-9ac4-40d8-b439-6fa65f369ba4", "value": "1536:U4w3oBIVl1khuu7OlPxLMtu9Zhw8l1+dmgI3E:e4BG1AuuehMtu9Lw8wmgI3E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830736, "uuid": "6bd79fe1-b2eb-4235-8202-3e1d85e8ae96", "value": 57344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830736, "uuid": "26259366-45aa-41d9-b90c-998ba8eeb662", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc8060fa-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (MimiKatz)", "timestamp": 1771830737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830737, "uuid": "2c9eb74c-54a6-41f5-ab6d-dcb7a6330672", "comment": "Malware payload (MimiKatz)", "value": "0add16e3e96c888ca55a4566e04c000f", "object_relation": "md5", "Tag": [ { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830737, "uuid": "adb41bf3-07dc-49a1-9f3e-b6bc8a0a1944", "comment": "Malware payload (MimiKatz)", "value": "ebd21ac4ac71e466c1441dd998895dc5f9567d3ca999a30762f6028dfc59b4d5", "object_relation": "sha256", "Tag": [ { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830737, "uuid": "e8ff7f46-bef7-4246-bb63-af1ae5826b2d", "value": "T13D265B4FF89141B8C4AED634CAA59E527B31B884173123D72F71A6B62E33BD45EB83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830737, "uuid": "2377bc12-1e0d-4e6d-849f-47273d4995e6", "value": "49152:YqCFngKJITFDv6Vrb/TkvO90dL3BmAFd4A64nsfJQ2UnN05yOs88rQdzVezf6jI0:YHqKJGbRrNnAdhWELZkj4EQ0DLU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830737, "uuid": "565f4332-bffa-457e-b33c-fea9d5cde206", "value": 4859392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830737, "uuid": "f2425fc1-f6c8-414d-a0b7-8de28ab953df", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc8f72e4-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Rubeus)", "timestamp": 1771830737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830737, "uuid": "03c9aafd-1c53-483b-89dd-ec51fe03c040", "comment": "Malware payload (Rubeus)", "value": "6b6ee63e1b57405281275a7bcfba6f91", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Rubeus", "colour": "#3E32C5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830737, "uuid": "55ec57c0-13ff-43cc-ab0b-a6be2494d8a0", "comment": "Malware payload (Rubeus)", "value": "a84d2731983b2f9765bdc2048d1108aa69c7d926bbb57a6cea60de7d3002de1b", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Rubeus", "colour": "#3E32C5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830737, "uuid": "7ff920ed-b22a-4591-ba6e-0d32f08ff741", "value": "T19235D02437E88F1BE5AE0735F071151507F2F422A672E79F6A81D0AA2E83751ED10B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830737, "uuid": "fba49c45-36ea-4811-beec-814796960cdb", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830737, "uuid": "36a2e7f1-1442-4bf8-b88a-b84371e797e2", "value": "24576:/Ud4OjAlC+9nHLmX63wZSGBI/u0+eW81ATw89rgX6BCYICX:/mHsl99nrmXOFp/HJW8ilIC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830737, "uuid": "ae89fcee-a3e5-4837-98fd-b8d40fb06eec", "value": 1112576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830737, "uuid": "a7569313-f721-40e4-89a7-db4daf0df67a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc94bb51-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771830737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830737, "uuid": "4d88055a-94c9-4770-93e0-b5b0f3d416bf", "comment": "Malware payload (Mirai)", "value": "63fc7430b5b5a42ca7eb865b7576791d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830737, "uuid": "2bc53684-a53a-4153-b66b-28798e5df2dc", "comment": "Malware payload (Mirai)", "value": "2885ae14268189912f3348b896c473250d0e00d1ceb857cc1faa3fcb296fc1df", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830737, "uuid": "640a4634-0e3c-4d96-9211-efc2b6333713", "value": "T13F24B61A3A22EFFFF568863007F38A7097E5259636A19745F26CD71C1F2028D681F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830737, "uuid": "ce670971-05ea-4f46-8a9a-2704090ad31e", "value": "3072:xhxA0o20YPukHbCRfnRHRQWzThdxAmoz9nzBsNcPUTkFizT:d/PH0fn9lPhrAmoz9nzBsNcPUTkFizT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830737, "uuid": "ff8a3d96-b7d9-4b2b-9bd6-cef71693927b", "value": 227640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830737, "uuid": "d4c41345-1b2d-4412-b624-a63515afc460", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe30ed67-1086-11f1-8369-82aee05be84a", "comment": "Malware payload (Ransomware.Hive)", "timestamp": 1771830740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830740, "uuid": "d2fd9b3d-95c9-4127-abbb-a633bf96bb01", "comment": "Malware payload (Ransomware.Hive)", "value": "527c71c523d275c8367b67bbebf48e9f", "object_relation": "md5", "Tag": [ { "name": "Hive", "colour": "#30ec1d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830740, "uuid": "bb83b753-21a7-406f-a271-e2c7b45acb4e", "comment": "Malware payload (Ransomware.Hive)", "value": "8a99353662ccae117d2bb22efd8c43d7169060450be413af763e8ad7522d2451", "object_relation": "sha256", "Tag": [ { "name": "Hive", "colour": "#30ec1d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830740, "uuid": "7230b609-4874-4d70-800a-c9978dc49ab7", "value": "T1FC862943FC9140E9C1EEC270C66B9292BF713895473423D72B60E6B62B67BD4BA793", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830740, "uuid": "5063594d-e988-4f5d-8aff-d90557215b3f", "value": "c7269d59926fa4252270f407e4dab043", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830740, "uuid": "12763381-9967-475e-84f4-a6567dc09f58", "value": "98304:/KRt9trenMQWMZ7+fD25GGF5LgNGzl3WVxE:qD/QBy25GGFxgA3WVS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830740, "uuid": "219eb60f-54c1-412a-8b13-ff513a3647e6", "value": 8230912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830740, "uuid": "2b7d6c37-5fa2-42d8-86d1-01a529d25078", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37395898-bf10-11ed-af1e-82aee05be84a", "comment": "Malware payload (LaZagne)", "timestamp": 1771830740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830740, "uuid": "e93e917c-f110-4dc2-a4bc-12373aa784d4", "comment": "Malware payload (LaZagne)", "value": "282df7bcb720a5b6f409caf9ccda2f75", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "Lazagne", "colour": "#0dc975", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830740, "uuid": "7af09ab4-1a13-48b4-8bcf-88dc3e977ca7", "comment": "Malware payload (LaZagne)", "value": "3cc5ee93a9ba1fc57389705283b760c8bd61f35e9398bbfa3210e2becf6d4b05", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "Lazagne", "colour": "#0dc975", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830740, "uuid": "766b5fed-0aed-43e9-80d7-1019b35f267a", "value": "T1B1C6331122B121B3FAE54635C562D832A476FC360B62C46A83F405777C97EEAB63DF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830740, "uuid": "bc7f499e-3038-4cc8-9eb9-8f547716a21a", "value": "7aa1951517b3b8d38b12f874b66196c9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830740, "uuid": "4a90f235-80a8-4e60-8265-b5723f2f9591", "value": "196608:0cHu78K//UoEkXuWJysVYvsOfhumHhtdIQLOMIdiwXa6vTVzy/BOfN1XZuoJnB:Bu7L//HEnWJIuahtaL/dg67RywfNxZuu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830740, "uuid": "4e2ad490-c324-44d8-a8f5-ac84e8594189", "value": 11849245, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830740, "uuid": "eba9a15e-70db-4b56-bb86-3065be18ea57", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bc0072f-1087-11f1-8369-82aee05be84a", "comment": "Malware payload (Meterpreter)", "timestamp": 1771830789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830789, "uuid": "eeb9c4d6-2e05-4f83-b733-697438394b71", "comment": "Malware payload (Meterpreter)", "value": "5ad25e17489ec64e9757480d78b9ea87", "object_relation": "md5", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830789, "uuid": "046c40dc-2e97-4d7e-a304-880388d0d8ac", "comment": "Malware payload (Meterpreter)", "value": "4da6fe90bd0c2ba8f7bf419991cc1f86762c9a23fb9bc24f581b9d8050320a09", "object_relation": "sha256", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830789, "uuid": "aa945380-9bcb-4ea6-b598-33f23a871833", "value": "T1B9F132D6731128A7FA3C1BBF8283DAA766FD7A3072B7075A065400196681D7A7521B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830789, "uuid": "7563f5c7-9535-41cd-be2a-acbe5b37988f", "value": "c2d02fc98f1d75d7b9457468ec75da0e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830789, "uuid": "730f6515-f5d7-4025-82e0-063bba3fa477", "value": "24:eFGSGCfpFKknehtht6dp5raKq9K9qXeNDJSqUmZEWdXCI2vp:iGCfvnehthEdTE95SDoqUjWZC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830789, "uuid": "8df5a14b-efff-4be5-aa72-41980e0cb898", "value": 7680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830789, "uuid": "720f5b3c-936f-40f0-9ef3-dbf6ffa59b62", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bea62a8-1087-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "b758cc77-cd38-475b-969c-606233aad7cb", "comment": "Malware payload (Metasploit)", "value": "6a5c5c5325024b73fb6189ac0fd668d9", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "7558b6b6-d46c-48ef-b790-53e0a3e5223d", "comment": "Malware payload (Metasploit)", "value": "0f188a5741c7753b90d4e51b6096541e018abfb3db33d502d718ccc29f89e98b", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "51c57edf-0759-40b5-ab97-58fd6fb2c604", "value": "T1FDF2D029EBCA6621C347B37E20475D8CF51B9A1BD1DFB56736E492CC8D12861C603A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "31dae3d0-06f3-477f-9baa-2cca8d2f73ae", "value": "768:uBQP+NAiJQucR7gWUU/G10SVOLtk+iOyztite1o2H3CrpE:uk+WqQuctgdlmSCWXZitOXClE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "bcde5e65-cb11-4674-89ee-e276bb45c857", "value": 34664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "1230426f-6973-4ae2-94b0-5f6556558ba4", "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bf46915-1087-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "cbc8bdf1-3001-473c-8e00-dd471c150bdd", "comment": "Malware payload", "value": "288e3ae4f3a8e68c65db570d0f6de218", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "8c6c6d5a-f0c4-481c-a998-2eeb2820579a", "comment": "Malware payload", "value": "237e360ee95e03d3d287c1efda0abcb8557b897336f6abe7863015642a985e3a", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "02765309-236d-43f0-83ca-8e51a633a0ff", "value": "T168641210B78408AADE7F0BB9ADF6D148876F75066653CCD90D80A6FDCA303D17C16B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "f74c62ec-70b7-4fd9-a7cc-15fc86055e2d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "53c418ea-6392-4dad-af62-3a85055da882", "value": "6144:q0OYu9hI5yJ34fX61TDYP40xIGh2qKKKZGxP:aHCqJa40CQ2q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "549c22c7-84ec-44e3-afa0-19b5a847c1b9", "value": 329728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "ed1c43a5-7f0f-4f91-82a2-6c43ec8e0d0a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bf88f7c-1087-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "47485471-106e-47d0-8e24-7243f4694638", "comment": "Malware payload", "value": "ff5aba648966325499c17beb1d52e0fd", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "18994e66-a93e-400f-922d-aeffdd026f4d", "comment": "Malware payload", "value": "0e77dee10295621df8ec4ea11373d83f18743fa40c52a6950b54089f911467bb", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "20ea6a88-26ab-4da6-8511-8b1e9076ae10", "value": "T14941B6315C05C746F372B3B694AA99C2E40E22F1EB1C6B23B0F4E1786DDBDC40A213", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "a705ece3-552d-44b0-9efa-e0661c5164bf", "value": "48:90q9mLBbAIiSKXsulXvvGskoQoOqL4E6W+zwwB4emGKwk:GqkjiStEOs8eL4E6WSHy1wk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "05146787-74bf-42a8-8a01-8ef23af1afd4", "value": 2358, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "6150b940-701c-4d6f-b770-de9a19d36771", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c08bd26-1087-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "461437d7-cc91-4b0f-82d9-73569accff8a", "comment": "Malware payload (Metasploit)", "value": "316ab7d35cc31cfcb3090e435857a7e4", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "65ccf5e4-6a7c-4f6f-b0be-42f7613139bc", "comment": "Malware payload (Metasploit)", "value": "3399333d5145ba202fb5fcddad2ce46ecc9f63d357f9490d62a5d49fad112884", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "927d7431-0c06-449b-8fe6-f0deb7dc0e9f", "value": "T13EF2E019BBDB6520C34BB37E70065D8CF50B5E17E2DEB66636A092CC8D52D5246037", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "66542a45-e18d-4ab9-bed7-207ddf2241d0", "value": "768:42QP+NAiJQucR7gWUU/510d4OLFBkAgptiCe1o2H3Crp+:41+WqQuctgdGmdXPNciCOXCl+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "99504b8f-196a-44ae-9201-6880aeb2f756", "value": 34664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "a3731ecb-05b3-437f-aa88-2596b4514f1d", "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c091dd1-1087-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "27aa0330-8722-4137-bd32-657e35574baa", "comment": "Malware payload", "value": "31eb70dc11af05ec4d5cda652396970c", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "bd7947df-b284-4efa-96a2-393f679577f8", "comment": "Malware payload", "value": "c0a7a797f39b509fd2d895b5731e79b57b350b85b20be5a51c0a1bda19321bd0", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "848f3cab-e61e-4306-9588-437906b8f6a5", "value": "T1E2822B86B7FC8725F8FD97B9ADB306114772B9629D34DB2E0089229F0D36741C412B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "ceba75cd-8027-45fa-b645-aabd4d007e90", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "80916e5a-dd0f-4ea4-9dd5-91dce530efa4", "value": "384:roOvdiW1r56eepTYYmz5v+QZ3ENfK1SVqxd44VgW5:9se5GdhtWR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "dc71cca4-5c01-446a-a349-f9426d91a2a8", "value": 17920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "825d4353-6ae0-49af-85a8-beaabe5f66f9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e06c2e43-0bd9-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "6d630b4e-475d-45ab-9d63-29b11a692b39", "comment": "Malware payload", "value": "108da75de148145b8f056ec0827f1665", "object_relation": "md5", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "d1800a43-47ca-410c-90a5-cbaa74019c47", "comment": "Malware payload", "value": "8524fbc0d73e711e69d60c64f1f1b7bef35c986705880643dd4d5e17779e586d", "object_relation": "sha256", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "5236e13a-51a2-4e81-8728-d6608295022d", "value": "T1B7C26347B3F504E8F5B79230C97B0531AB7BF8126632A79F12A040190E76695EF34F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "b94c5a4d-8cc1-4261-9ad3-9c2170839d01", "value": "545a81240793f9ca97306fa5b3ad76df", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "6e0b0623-78ac-4135-a253-c29484108f9f", "value": "384:RYCVNMxCkddWDBJJdVOpAdoKRCqjOOhbsezKMlhtY:RHNMBdyBJJdRlq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "002f9b43-f15c-47df-b4a5-b1d37ffb9484", "value": 27136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "18e537db-eef4-4573-9939-4623da3f571f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c0e3f7d-1087-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "3128ffe4-2815-4846-8333-7866963dd2ff", "comment": "Malware payload", "value": "99b01164daf2732840eda4213badab92", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "35a64e0d-445c-4389-a236-74e119d8820b", "comment": "Malware payload", "value": "a4c7d6d5445243f3c8d4154bba3f22e746335d8e9815c2e0c5f572ff1e4cd938", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "29b2e05f-73ba-424e-8225-8138d923c8cc", "value": "T1BEF0D4313700200DD5287549CD539C3BA7D589B9323638B297DC01137756F7551551", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "c55c7501-c3df-458f-a6fb-f7c9b89f8663", "value": "12:ytrO1tLtaUl8RupK9UmQHshkeNDJSzmNUmh7EvudnAkeG/KID:UaKq9K9qXeNDJSqUmZEWdXCID", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "4dc68fda-3f3c-43a0-baf8-55c8529767b8", "value": 460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "caab31b2-6012-42ba-900e-b1bc441f0099", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27732bb0-259e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1451c7aa-a602-4759-bc7d-9d19de831985", "comment": "Malware payload", "value": "92e567d0590f2763960910e4bb85a871", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "b4df1d55-fdfc-40e4-a11b-e54c8fc02ed6", "comment": "Malware payload", "value": "0ea02bb8dac24d72cee8d5fcac3e65c4f809dde226071ac273fbbd4a060ff4c8", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "899b712b-e65e-487b-83b6-44f979e2b38b", "value": "T1AC5385827BF90154F2FF2F79A8FA05504AB7BC966D79C72D018C409E0B73A818575B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "479320d3-72df-46eb-837d-be393f19fa6f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "ba1efc82-d393-450b-a351-858f3e3e8b34", "value": "768:MNpd6m1CkHglgBr/DVLKOYfFZptu/jJzkne+JboYjcii:U36mgkHfB9LKjFZptu/jJzQJboYj2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "913aae3d-027b-4f66-beaf-a0a52c910cab", "value": 61440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "53dfb00a-ef39-4617-a18d-7fac8c58d25f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27889357-259e-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "2ea86ee7-07f9-49c2-bd61-6b285e508222", "comment": "Malware payload", "value": "ed04f33a60faa912c5406158e2d0a800", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "34b4317c-b625-4a7d-b495-49762d735311", "comment": "Malware payload", "value": "29955ba1e2193047ee5f4561445f81e218ae4de1a295f8fd296ad536bf381f17", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "17a78e17-6352-4f3a-ba06-ce7e08024101", "value": "T19533B681B7FC4114F5FF2F39A8BA06610AB77C966D39C62D118C909E0F73A818579B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "afc7430d-7f9f-48f8-bf37-205838d6a2d9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "edd21b01-ecdf-4946-a74b-6e4af7bbac8b", "value": "768:GBkpiKLp370FvefwZz2m9j/pcgrSA1ne+JboYATd5:BpN1a2fed9j/pcgrZ1JboYATr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "bc63e38c-abaa-41e1-aa98-370771973058", "value": 51712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "66b17cd7-1509-403d-834f-a8f9b28c0766", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c2e2e26-1087-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "44ff9a23-a01e-4c62-819c-007548548086", "comment": "Malware payload (Metasploit)", "value": "4d56fcd9609e7c2acd345254ad2e3e8b", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "b03a162d-1b0d-4253-8a17-a69507736144", "comment": "Malware payload (Metasploit)", "value": "9779b841a22ca39777f4230bdc3a8b0bc9cfe5a4f34c232c3c22ece2c38cb44b", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "02cea3c9-26eb-4432-b3d1-41b2b5402692", "value": "T15AF2E03AEA9A6530C347B77B20466D8DF90B5E07D1FEB66F37A591CC8D128514703A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "c119f542-4386-4fce-9be9-921cd855032a", "value": "768:oAQP+NAiJQucR7gWUU/X10feOL9Pftike1o2H3Crpl:on+WqQuctgd8mfxllikOXCll", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "a80dba4f-e09e-45d4-8f16-822feeb93e96", "value": 34650, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "e6aec46b-4fce-473a-9148-a30aff4d7f19", "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c32cfa9-1087-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "6096ec2b-c49a-4284-b086-de4dc3c972b3", "comment": "Malware payload (Metasploit)", "value": "a7dde5c63ee3f1b66a4a15af5390acb9", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "7da79bc1-d65b-454c-935e-da5571cb14b1", "comment": "Malware payload (Metasploit)", "value": "1c8e8efb28bc86ddce2049fbedf4a76b5c3a50f63ae49066f4e8d9efa5d8bbac", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "c6794136-f003-46bf-a27f-c162c4a9b788", "value": "T193F2E14EDA225430EAC343F0A596261DDE47D70DB18F9AA23D5375ECB0B7ACA1380B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "f593120c-ef79-4c99-89fa-4e9ea3f61627", "value": "768:q0HqguJBZ4Gb6NDOrnk9Vr1Wf8zIzbwvDiMl:znuJEZOLkb68UzEZl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "ff1f6288-c86c-4c2c-9eec-86b1aadb8b56", "value": 35038, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "89dfdc04-f2b1-4bc4-9a03-78e1e95220ba", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c3a5318-1087-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "a55ed184-3b91-4f9b-bf7d-0eda23bd170b", "comment": "Malware payload (Metasploit)", "value": "ea34ec65732e63723618fbf730391cbc", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "3a1c005f-d8f4-413b-8ebb-91d048939717", "comment": "Malware payload (Metasploit)", "value": "c4aed35c30c862c466e504ab4c0ebec8fb4c9a84e24ca02378378fb1693d1caf", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "3e995b51-e250-485d-a984-59ed4f14a268", "value": "T13DF2E02ADBDB6631C347B77A20466DCCFD075E17E1EDB26A36A491CCCE22C514603A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "5aff7a78-36b8-4083-a148-67780758c3f4", "value": "768:arQP+NAiJQucR7gWUU/A10wzOLJKbjtiTe1o2H3CrpR:aO+WqQuctgdrmwk09iTOXClR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "20aafbb7-39b9-4982-8c01-2e17927f3d85", "value": 34663, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "99ac0ac6-bc55-436e-a547-6399a6e848ef", "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c6081ef-1087-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "0deeca95-f6ee-4a61-9b59-122ae1b27c3a", "comment": "Malware payload", "value": "f4806b9e14179490e4e5bb452c2d0175", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "d8ea76ab-6313-40a2-b6ef-749123b3d742", "comment": "Malware payload", "value": "2e119708b87f8ce7ea54dac6b87a5f6dceb9566d2edaaf5805bfce4ec0df85ff", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "f2df5c7e-f532-4e95-abaf-32dec0f20da0", "value": "T108E02018B3C2FE59454446875141AC95F2740C05551CB6D343CEC4ED54A59C6B2041", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "f7b0a957-9141-43de-8cdc-27c3df1c19a2", "value": "6:5RwmoNRhSx2SYbEB4bIpHKAnIfhBKIMX5rVyl3mmdyQ4nXemNOPmA3B+3+u:YmoNRc7VBBpHbnehBKwlnt4nXm3B+3D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "9b8a4709-ac69-4d00-962a-bec24f46f162", "value": 348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "abadada9-c185-4e70-a856-68120cdf13d8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c644378-1087-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "131d67e0-b93c-4c82-bfe5-e79e4c575b7d", "comment": "Malware payload (Metasploit)", "value": "44767d1ee04bab52f99fb0ca26440987", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "b39eadb8-ff9a-45df-8220-a12337bad0d3", "comment": "Malware payload (Metasploit)", "value": "78e22cf4ce317530bbefe5017b16423aa99bb949543ca905e983a1fd1b84fa9c", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "b57f2c41-7fa6-4958-9460-f49d73a4b89c", "value": "T11DF2E019EB8A7170C74BB37A20466D8CF90A5E37E1DE766B76D091CCCD02C92C603A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "4b006b20-0b5c-4861-b9e0-d07e0d375953", "value": "768:23QP+NAiJQucR7gWUU/A10IXOLB+dTiGVtiLe1o2H3CrpW:2y+WqQuctgdfmIgMdTiGbiLOXClW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "13d427c9-fa61-4d54-b696-6b3bbe8cbb3f", "value": 35822, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "0a003bce-2728-4ead-a3c1-61ba11669756", "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c6ecc8a-1087-11f1-8369-82aee05be84a", "comment": "Malware payload (Metasploit)", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "f2c43e43-178e-4ef4-997d-f49523d86250", "comment": "Malware payload (Metasploit)", "value": "8137b046c204f291206f9cad3fc3b4c1", "object_relation": "md5", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "79d0d5e0-307c-40e1-80d6-ffac08543753", "comment": "Malware payload (Metasploit)", "value": "828a03e1a219dae9c5fc45dd92139cc6063dc01b3db7ae557aaf57ab9eabd80c", "object_relation": "sha256", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "4e0b55dd-7cf1-4979-9ad1-a7e84f4fcef4", "value": "T177F2E11D9D22B431EEC312F09598191ED98FD51FB14D8BA33C2275ECA9F5ECB1381A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "7cd923ef-0dac-405b-8392-c9203e7cc860", "value": "768:a9R1FP+MPqguJBZ4Gb6NDOrnk9Pr1WJyz+zbSx5iH:+/fuJEZOLkNEyazWM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "a06982ce-dc86-470c-ab25-7526b59e2ed7", "value": 35713, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "b952f75a-010e-4a39-b851-dc9cad6fa314", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c75f88a-1087-11f1-8369-82aee05be84a", "comment": "Malware payload (Rubeus)", "timestamp": 1771830790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "5fffd2c4-3b09-42b7-a0e7-88af9f9a899a", "comment": "Malware payload (Rubeus)", "value": "43626499c9a56ae80c64a066c717767e", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Rubeus", "colour": "#3E32C5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "6927d9da-6b7d-44e0-865d-b0b791eb27c9", "comment": "Malware payload (Rubeus)", "value": "214be0aae0079be975055752faa13143c003d70655b8c5917fb84ca8f7ad9837", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Rubeus", "colour": "#3E32C5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "37e4c025-c315-48fd-a69c-5a3463fcbf41", "value": "T1279429252BEC4704F2BF1B35E8B152448AFBF806A83AD75E0958549E1B73741CD21B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "2896b55b-a956-4d29-a32e-910b87c4d4a7", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "75f7f8c9-f3d9-4671-8830-a2fbce06eedb", "value": "6144:NWtgFKmx00rpfw9Z/MGStNh7+8tpBgGUv1bvuoHBSyz2c0MS:NzK+GUH/4GI2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830790, "uuid": "bef1fba6-e006-4c6d-88b9-6cbaa8b4b1d3", "value": 422400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830790, "uuid": "002695bc-10db-43ac-9faa-87c8a28dcec6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c882f17-1087-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830791, "uuid": "356faaa5-ca72-4ef6-81c9-e12b31f64abf", "comment": "Malware payload", "value": "169c629f5c3d88484c39b01b9e4b07b7", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830791, "uuid": "37f4b04f-59be-42d5-866c-c174e463af43", "comment": "Malware payload", "value": "1a13844fde7e03e38b594ed0fb6c9aa99143e3d6c2ddf266b6969e1f2661121f", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830791, "uuid": "e718c1e2-fc6d-4443-a400-ec82dd429384", "value": "T1C6316DBDC836F8E4079E719094723D4520E8AA27C7744FBCFE4209AA5A147E4DF299", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830791, "uuid": "f83c2692-4adb-44d6-9d6c-6a694d043f98", "value": "48:R5fPU//hhPAEjTlRMLtiUfG5ZSjHAUIq7hNp0w/:b8nhhPAEjRREgU+PSjHHbhNt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830791, "uuid": "b9b7f205-fca2-4fbc-909a-174811a1439f", "value": 1559, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830791, "uuid": "8cebf063-13ed-477a-9285-9776509d7c97", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c919b9f-1087-11f1-8369-82aee05be84a", "comment": "Malware payload (SweetPotato)", "timestamp": 1771830791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830791, "uuid": "9a446ff8-9485-4b12-9fdb-2f4b4e1eb022", "comment": "Malware payload (SweetPotato)", "value": "f03a17b69f4c60629ba9b9981c89deb0", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830791, "uuid": "6065fdbe-a7d3-4b1b-a9ac-cd7c3f7f5298", "comment": "Malware payload (SweetPotato)", "value": "287f87db7206d01932a38c7971c3b658e5e2fc932dff378c18bff88e215338b1", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830791, "uuid": "8d63a97b-7ffd-4f8a-b46c-8aaf116aeb3e", "value": "T1C315F1122BAC4B52EEEE17B8E871204567FFD500609FF38F2E94E5AE664FB1049453", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830791, "uuid": "e3902ef8-7bfc-4bcc-b278-06156ec934ae", "value": "24576:Hdc8cY5G1FOPjWcjL8TxNYqEv0rODHZ/lpWUmJKfplz7XWu9q:H5cY56OaccTtsWIZ/GUm0fpB7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830791, "uuid": "5900cd86-48ae-47e3-86c4-4d4e2d677d9b", "value": 926208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830791, "uuid": "c63df05a-1478-44c9-90bd-940d04823577", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d03c260-1087-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830791, "uuid": "034cb175-1bbe-41c7-ac43-ddfef170ed9d", "comment": "Malware payload", "value": "ad9ea3c0d03fa9b338a2bfaa9936778e", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830791, "uuid": "04565345-09ff-4099-8a48-141f60df3673", "comment": "Malware payload", "value": "02654237367ed430ea7b7e3a8bd49fb161fa5e4649d3ccd43f63fa49c4afeffe", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830791, "uuid": "b57f6b03-4bb5-44ce-801f-b3ba8a111826", "value": "T128A55A07BCA049E6C0AA9231896691927F71BC840F3123D72E60B7BD3F72BE49D797", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830791, "uuid": "56809676-3f37-4ce8-99ce-6644a347691b", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830791, "uuid": "733ca353-5ff9-425b-9a27-ade1e00583c7", "value": "24576:D02MslR4PzMhhTiAz6o4GMU+GI84cS89IJz3e6eleXq9DdaAoUEYlTO:D0lKRcghhhz60t1I84qb4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830791, "uuid": "3d23cb53-9f29-4869-9992-ec5ac8611ca2", "value": 2228736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830791, "uuid": "41424774-06c7-4eba-a843-e5a82fff3656", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d84d6cf-1087-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830792, "uuid": "b22434fe-7e0d-4f07-b112-1adb9ffca24f", "comment": "Malware payload", "value": "a467a21d9d2b2482f5f6508a1b9080db", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830792, "uuid": "a981d6b3-90f0-4c1f-88c1-b01240a2a9b9", "comment": "Malware payload", "value": "158d62312ab502f4f574f151ca10559880bbc5f5d9ec3b981b32cb2e4ab0efa7", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830792, "uuid": "84784396-8e4b-43f8-a582-9aacd3b7decf", "value": "T1BD564B03EC9555E5C0AEE6318A22D213BBB17C485B3063D72BA0F7682F77BD06A797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830792, "uuid": "56866ea6-8753-4c7f-be6b-9b8defa25514", "value": "49152:4hgMBbLBHudHhZJYjHH0WIGx3KQ7GjyQV7ZWhveyo1fVtEn6aKzUw/YTibEoT51j:4GkvNR77GTZcqaQ5HwBYyuEK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830792, "uuid": "e03243eb-7da8-4cd4-b6ab-551e2e65fffe", "value": 6410424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830792, "uuid": "e6c8b712-d830-4d02-8540-fd6e9b16cdff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eb3fceb-1087-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771830794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830794, "uuid": "2460020e-8566-4339-afc3-8ebaa9baff51", "comment": "Malware payload", "value": "281d2ca40691bfa0debcfb96c81b6cd8", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830794, "uuid": "1e0ac107-bfce-45bf-90e0-8b804dee4c61", "comment": "Malware payload", "value": "7945f9ccf7c2261a5741b5d4102b8909d48976f047e673190914127faa21092d", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830794, "uuid": "b4f11c09-aa5f-4be1-9faa-19544c754fbe", "value": "T1CAA6F102F3E48A61E9FB467991B216129772B4268331D7CF339C85691F33BD19A363", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830794, "uuid": "2b90083f-3f22-4a39-a31f-713fe2e2c57e", "value": "196608:BPxdtVBFUcwti7TQlyVN8iNISRTRmW5QD:NZHwtQQlyXOOQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771830794, "uuid": "15ee0bf9-f324-46ae-b751-02db0642d79f", "value": 10170880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830794, "uuid": "67a621f9-68ed-4a12-95ff-7a3b9d5e5d19", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "657c994f-1089-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771831772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771831772, "uuid": "4ab87aa1-4b0a-44b9-b22a-d15de54674ba", "comment": "Malware payload", "value": "a5410baf7274af1c9285cc2ca2e7433f", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771831772, "uuid": "8c7ea083-0682-481c-a7b9-d23d5b66926e", "comment": "Malware payload", "value": "554b1084a35fef0f0f64e741c72734e7752fe457159c34aa7552c8a2315708cd", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771831772, "uuid": "49e6b79e-3d3d-4019-b759-541fb51d5326", "value": "T1C3852353DD33415BCE6E1C3E2A4FBA821DBD9EC45D468858A1409DEC1B41231F68BB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771831772, "uuid": "a07ac73b-cc7f-4c9e-af6e-3bf8bdfeeb47", "value": "81bbda50a2982e0e014acf537665f7af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771831772, "uuid": "cf6fd74b-b415-41b1-b483-9fcc6262d954", "value": "49152:aRUxkRRREXEEzmHtTerlwB4R4XGnydW90q6tAM4pTS:aRlFEX5mNTe44aX6ys+q6t94", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771831772, "uuid": "fbede875-f524-42f6-9f5e-f13ffc5b1adf", "value": 1862144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771831772, "uuid": "d9b1af07-55aa-40d3-9502-e898f2d7eb9f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02a7ed3f-108c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771832895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832895, "uuid": "81c041c6-8206-4e1c-8b9d-40fac0caa695", "comment": "Malware payload", "value": "e0720b18327379acedd6a899321e8e5b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832895, "uuid": "f4e45c6e-fec8-42ec-9499-c8fd1788de9b", "comment": "Malware payload", "value": "2c63880e3f89289e6d8baeaaa3c336270c2965c079d20458435b3cb6d67a38bb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771832895, "uuid": "11bdfbc0-f874-489d-8cb0-7fe42f4cf67b", "value": "T18C24E0B5E20B92342F67B5D0D4B964D2C7767396C18483FB08A30E7A0E3DB8EC5999", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771832895, "uuid": "167b94b8-29c1-466a-9700-33270d47a24b", "value": "3072:0W2wwWv/adMhPoSbC88GIFv6nEhTzCY+JjrMR0CumTLp91A0ny/zMoXtTbqWU8K:nGWaSan88Gc6+arMR09mTD1An/zMCnl8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771832895, "uuid": "7a45b4cd-9c82-46e1-b757-53c3a31275a2", "value": 223308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771832895, "uuid": "32556d4f-cdc7-43b4-902f-e0e4834756e4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24f74c7d-108c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771832952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832952, "uuid": "2a51b783-234c-4db7-8236-ba42aa1fed2a", "comment": "Malware payload", "value": "7ca6fe6dea780a4646bd65b9d23b6b0c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832952, "uuid": "4409518f-8492-4341-a2ff-1ce70c62df7f", "comment": "Malware payload", "value": "33b54daccebd23f4c6b6f1bec08d7424a8ed2d63d85c65ac7600f87dae4cea97", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771832952, "uuid": "9980c8b7-c427-415d-8a79-c04dbe177f20", "value": "T12873F1D03AEA9DDCDAA14A31501E10ADBA25F7AFDE8B3A0D1D3F4148754124EF63AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771832952, "uuid": "89771826-2b25-4d0f-8fb1-d65cba45adbb", "value": "1536:aTKcCaEh9JsgSVb+hXCk3AX66NAPrDZQ/GrDT:awzh96t+hX9oWXN3T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771832952, "uuid": "ae76106e-130c-49e1-91a0-2f9e1e42bfea", "value": 80584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771832952, "uuid": "cac7fec6-6ae9-4a10-b685-1594bd313405", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a270341-108e-11f1-8369-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1771833793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771833793, "uuid": "1b70d38b-0a7b-4315-bcde-eeb6c5b9ff0b", "comment": "Malware payload (SantaStealer)", "value": "01ed495b26eed8ccae3f95c09b476d95", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771833793, "uuid": "13a640ab-bef6-4c36-994e-0a0ba481ec01", "comment": "Malware payload (SantaStealer)", "value": "f0bf0b03f1d6675a917b4b5af999c1ff9f7cf0c59226dd3a90fe1a1586d64c9d", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771833793, "uuid": "68c84f85-a58f-4776-a0e6-73c41fb14bf8", "value": "T1119623ED2244735CC41FC4309437DD54F1BA961E4AEA96BA72DBBBE07B6B830D602B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771833793, "uuid": "a7b1abd2-a4b5-453d-9d8d-02e9eed9c000", "value": "b4436fe2ccd1a0108c1cda48be61b0bf", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771833793, "uuid": "11bfdd45-79af-41ce-8ba5-7ba7fe8e4679", "value": "98304:tUTFGjR0hwjZUpvLEacEGepwUuxH2GdlHjHMQY63Rnbs2H32FvwEk5OWUP+lwiF4:ru8qYav1iH2QDZ3RRmFfk+PMaOOG/H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771833793, "uuid": "04b7a288-a1ff-4c3c-99d7-51effa3f014d", "value": 9309184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771833793, "uuid": "e6c890e9-704c-4480-a635-622fa4ad375f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "474b71f2-1092-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771835587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771835587, "uuid": "0cc07775-97b0-4bcc-b415-21d77f1c3fdd", "comment": "Malware payload", "value": "be8f88c0669117d7b9687097ee16f5c4", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771835587, "uuid": "f7f325cd-607c-4b50-b9b1-c8165deb6f1c", "comment": "Malware payload", "value": "6863d2adfbc8c7953b228337a93b1ae6530475ff8364dcfd62e5c2f4e993ebe3", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771835587, "uuid": "7d8caef9-af6e-4d12-aea3-7c9023d5a4e4", "value": "T1159633B181BA8B30FDBEF6729DBC63696513C35292548F74535A1BAB04CC3FA99BD0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771835587, "uuid": "53dba41e-d8ee-436f-a344-9518631f58f5", "value": "196608:r8z7S+mdRRAkQWHA3bXDImgyuTdlIhlC9ohd/FjMNM:g/JmRRQfwhTdUCe3tEM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771835587, "uuid": "0566d3db-92b9-41c7-be5f-2b640828d2cd", "value": 8896378, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771835587, "uuid": "8af2489e-2b06-4264-8e03-634b62b18b31", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95c1d337-1092-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771835718, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771835718, "uuid": "12daf4be-9382-458d-8ec9-fbba2ef8dd7e", "comment": "Malware payload", "value": "c1d5cccaf30fd567e772436d717d5d37", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771835718, "uuid": "848a5d26-b2b7-4f3c-b14a-05fc0f3c4266", "comment": "Malware payload", "value": "6b2bc9fb15c9397152413028c5582726b273144ca6323ba91b28f92552af6042", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771835718, "uuid": "fba9e16d-f0a1-45be-817c-cf555d584899", "value": "T19E034B2B21AB20210523D05D77877BA931351167FB42CAE63DAC8071AFE7D92EB735", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771835718, "uuid": "acde6600-9aa1-4263-aaec-7740386f9f1f", "value": "768:4DSlf60pY9JYkGWkkg1kVpA3EHkV7kV3kVr3pkVskVA2kVRkV4kVPkV9QmVGIEGc:+Uf60pYbYkGWkkg1YpA3EHY7Y3YbpYsu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771835718, "uuid": "5da7b14b-fbac-4d2e-a010-78ee832fbb00", "value": 40285, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771835718, "uuid": "0218bea5-7e76-40ad-906a-3610883ba682", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90bd2b68-0d76-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771838046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838046, "uuid": "a77c1ac7-693a-484e-94d5-7ef998a74b65", "comment": "Malware payload", "value": "16c2656e83b993a614730ec6bfda8363", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838046, "uuid": "5ab9400d-4bb2-414c-99a2-c6568e60cbc0", "comment": "Malware payload", "value": "d00515e3f6704152f863adf9e079bf15e6ce833dd824a1005d45df595d7114bd", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838046, "uuid": "efdd7d86-6415-4cd2-b2bd-b427a80f54e2", "value": "T1CFE5AE72A203BEDA526A0CACC4503D002D999D6B9B1681EC7ECC5BDAF16E118DDFDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838046, "uuid": "11423bbd-e2ac-462b-8231-b1d1ab1a9b26", "value": "49152:8UixbItdTrJoFVPMvXGBK6NMm8A4BQyzIdIh:7iBI/JoFdMPGK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771838046, "uuid": "f8faa82f-be33-4625-9cdd-5051b6461cd4", "value": 3241480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838046, "uuid": "04188b8a-fd49-41c6-a674-61d8978952e1", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9953aa7f-01c8-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1771838047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838047, "uuid": "34544f3b-b7e7-4d04-958d-0a46715ac33c", "comment": "Malware payload", "value": "884bab9fe6a1c95a985c159e0a2e1f21", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "encoed", "colour": "#145d44", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838047, "uuid": "e88b36a2-b3ca-4043-afaf-a86544bdd998", "comment": "Malware payload", "value": "c15ea1bbf6fa09969b7d3917aaf0ca17aa89978861be19f78d309cf67c0787cd", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "encoed", "colour": "#145d44", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838047, "uuid": "38c9ccb6-144e-46c0-9b2d-61ba4495e128", "value": "T173E4AFF65395EC8F0A1C0E95F508074A1C6C48D7E5B8C2B47A82B8F9869A1A44FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838047, "uuid": "34362e39-9f0b-43a1-979d-72d3fb8b2ba0", "value": "12288:+8Vh8P5yyBqrjjZ0W2s4oO9ZYg3UtSwImcyjaJ+hE7TqvIwK:+gu/BqrjN/2ZoOH3UtSwImcyjaJ+h+T7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771838047, "uuid": "60c5f806-306a-4ec8-941c-6958163ad254", "value": 676527, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838047, "uuid": "594bed5b-2b3a-4e97-8848-1dc3a3ed1be3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90ad6ef9-1098-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771838287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838287, "uuid": "beb23a50-138f-43d0-902b-829aef5e6cee", "comment": "Malware payload", "value": "cc0b4bd43cd08eea86aabd22f70d6d86", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838287, "uuid": "db5933b0-9e66-4609-ae88-e8f1b411c0b2", "comment": "Malware payload", "value": "560dade57a65ec0d26a7981a16f4f3738eb768f354fc52847de84eff58d1b168", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838287, "uuid": "a7b293fd-a421-4f5f-a3c7-6557c912a6ef", "value": "T1E5C02BC0040793307412F3070071D174718051770102C0EA370DDD7FB1024C0E40D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838287, "uuid": "f34b2716-6402-4f2b-bd5e-00d3c46b0921", "value": "3:lP/ErUcA9JYAXPQXuRH518P53yFoyV7W6WFL5vhc7yn:lP/ErUcOnKuRH52pyFl4Jc7yn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771838287, "uuid": "f9aff510-f821-447a-b2ea-659d24913d7c", "value": 137, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838287, "uuid": "b178672f-e22a-44c6-8c29-222408f2521e", "value": "application/x-wine-extension-ini", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce644912-109a-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1771839249, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839249, "uuid": "e737509b-55c2-4d55-92b2-b38d6d8e3edb", "comment": "Malware payload (ConnectWise)", "value": "b718253519827323877dbca083c7bb5b", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839249, "uuid": "a36dae26-17f6-4a22-b677-866b00b08165", "comment": "Malware payload (ConnectWise)", "value": "396a8947624eca4682c8cb947464784bada241c7379f6acbeca5be25d358bd4a", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839249, "uuid": "badc160c-5f81-47c3-9b36-1ed4006693a2", "value": "T11CF6230563FCA119F1B32A3AED3951F19C7B7C628D62D15E1658364E1AB0EC18EB27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839249, "uuid": "03753f75-838a-4fb5-be21-7384645c6704", "value": "393216:emkEdQ03NldgmkEd5mkEdOmkEdRmkEdomkEd1mkEd:yE2cxwE9EIEBESEVE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771839249, "uuid": "73e262e0-6ca7-49b8-a317-44da00fe8d46", "value": 15564800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839249, "uuid": "f21ca418-e52c-4ff4-9569-7e43d194801d", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37853753-109b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771839426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839426, "uuid": "be15318c-ec77-4509-be4c-ad7eb8387cff", "comment": "Malware payload", "value": "76810e6fdcd3d954af91fbf61425dc1c", "object_relation": "md5", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839426, "uuid": "bd2b5643-87bc-4e70-a95f-af174a4540bb", "comment": "Malware payload", "value": "fa3d041b32789b3b866ba990372da196b0c9d1145d96591b5908cedbfa3e4292", "object_relation": "sha256", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839426, "uuid": "4b754afc-dc8e-4963-ab96-c91e48ca9194", "value": "T1EF012BBE872C64BBB6D08ADF529B30CEE5C4096B1DF376A4071029D7792223CD551C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839426, "uuid": "f50f3a46-cf3f-44f7-bdd4-a80696e74eb8", "value": "12:lHyKzbYU7RJLWpw6068LBt2gkTVjpKi+KVL8VHO3bprmTczV:RyKzbYy/Lf6h0wJTB8AL8Vu3bprCIV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771839426, "uuid": "58adf4ad-6720-4f07-ade1-4f5d909fbf67", "value": 741, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839426, "uuid": "43f96a40-43ec-4306-9d2a-6ac3baa8c72c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37f2395e-109b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771839607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839607, "uuid": "a5185cc1-8c01-4d86-ae0e-a3e11f79074c", "comment": "Malware payload", "value": "100eccd03843d7c4fcc9afddbc64653c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839607, "uuid": "fc5f8f92-acd4-4b05-a14a-081e8fa5bb68", "comment": "Malware payload", "value": "1a9420a67cc79a4a7e945c9a91846d1246dc94b8e76a04a2a8a2ab4f41acfa5b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839607, "uuid": "47bfb270-f224-4378-b98e-37f5bf6748ac", "value": "T1D5149621A3FD5208FAF73F84ADB452645E36BCA6AD79D2AC1261004E4AB1F40DDB17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839607, "uuid": "63c9119a-ab6c-4867-a107-5891fb8ed695", "value": "1536:LB5okyWg5oOoqiAWHfSwiByoenBqhjV771lTol2CjOmFDytFp14AWHfSwiByoenL:LB5ok85oOoqJByXuV7PoYeZZyT3ByXL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771839607, "uuid": "7ee831d9-36b3-4141-8017-1224756d3751", "value": 204102, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839607, "uuid": "52567a99-bd2d-48e9-b561-a79528f95bbc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bed6d77-109e-11f1-8369-82aee05be84a", "comment": "Malware payload (Babadeda)", "timestamp": 1771840748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771840748, "uuid": "b04a4667-a6a6-4c75-ba53-b433fa3363fe", "comment": "Malware payload (Babadeda)", "value": "8cad77647d186c3c04a18872a88a4f89", "object_relation": "md5", "Tag": [ { "name": "BABADEDA", "colour": "#c25d29", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771840748, "uuid": "9436708a-33af-43c2-806f-95785273e7b7", "comment": "Malware payload (Babadeda)", "value": "784ca47ba6241fb31afaded057d2f98b58854e6b7ca3209d5eee6e2c84302345", "object_relation": "sha256", "Tag": [ { "name": "BABADEDA", "colour": "#c25d29", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771840748, "uuid": "e22b4bf2-530a-4b9a-8a13-468c8eec4977", "value": "T11E453397F6EE1A7BD465D9B8444EAC8C6DC44C2C3AA703226FA187487F488052F7B5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771840748, "uuid": "914aa8c4-fbc0-4c4d-b1e8-4badc814cecc", "value": "a50e815adb2cfe3e58d388c791946db8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771840748, "uuid": "c9a2379e-f14d-4cb7-8639-03abe1954b03", "value": "24576:moGtZf0rAvWHpHgD7R/k/C3aBDyR+pyylEmilmH9F9eJ:ktZ8wWHKD7eK3aJjUYEYFw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771840748, "uuid": "066ade5e-3d0e-49b0-9e2e-2267518ee2f5", "value": 1259520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771840748, "uuid": "11329c93-d95d-410d-8112-193a7348aa3e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c0f6386-109e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771840749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771840749, "uuid": "b35c512f-5a6b-47d7-aa73-1a09000842f3", "comment": "Malware payload", "value": "53ef5f68f3c0d92e171b41e98727812e", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771840749, "uuid": "eb15d01e-7118-4a0f-95bc-4b0ec20151aa", "comment": "Malware payload", "value": "03f82d1e6b11c39ae88fbe0bc8a0e4a16a263af3d7f50183b6ecaf1e3a000256", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771840749, "uuid": "a82f68cc-1409-42e7-8ff1-2da2a183c2d6", "value": "T1DDC63348F1B8586FE9B13E78531FDF290AFB84D47641151183CB29858BCAE1A8A1DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771840749, "uuid": "335a3085-afa0-452c-bc50-6db7837ef24b", "value": "196608:+dZx5KQqnpev0HuOq152FyAuDAXegIhV4wzQMZvxpPp7UIcOkVQjig29U2skbD7W:oanpeeHi2FNpu60vxz7iRgeFsmDt/SBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771840749, "uuid": "af2b775b-45ee-4d30-9f59-7b31216b7952", "value": 11694925, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771840749, "uuid": "db75f3bb-3488-42b7-8181-1ea72c2bd888", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5615153-08b7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841226, "uuid": "2fa34673-52aa-4ed3-8d00-5c29ca4b5563", "comment": "Malware payload (Mirai)", "value": "91ff5564be871758ad25c3061f6e3fa8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841226, "uuid": "31a77c0b-3c24-42ac-89b7-1c143daf6088", "comment": "Malware payload (Mirai)", "value": "1a26e62115a4b0298f1fcf423e8067e5fe45a1ac6912e9975a6c3844b17062cb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841226, "uuid": "82983e98-067f-4835-8c27-735c9e14a223", "value": "T17714C819AB910FBBD86FDE3702EA070539CC551722A43B3A3674D528F54A94F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841226, "uuid": "4cfadcc3-5a7d-4aa4-813f-aede9ab34ed4", "value": "1536:9r/p5l+k+livqTKgu18T+jG5EIlcDY2lUuX3+a8ZMfI7Om7Z2FzvsTxYg7+5uk+l:Wk+lXu1FGv1sIr7TxuYMsgLCbI18", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841226, "uuid": "01dc9af0-1d40-452a-9f18-99d08e7ae2e6", "value": 201288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841226, "uuid": "436cf71d-6380-4c44-bda4-f89356d7770a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e55d7f9b-08b7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841226, "uuid": "6ed3e9fa-22ec-4f92-96fe-48c7925fba7d", "comment": "Malware payload (Mirai)", "value": "59df1db95fede1cc371a0b4477a6efc0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841226, "uuid": "b42a07bf-1bc4-476f-9cab-338baff915e5", "comment": "Malware payload (Mirai)", "value": "c47bc24ea51550ae30e8574fc23862208eb7ea1beec6b2550c7df91ee1ff15d0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841226, "uuid": "c2dc0894-3467-499b-86b0-fd1756809900", "value": "T159E31A45FC509F56C6D226BBFB4E438D372A1768D3EE720389255F203B9A85B0E772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841226, "uuid": "8a246fb6-979a-43cc-aba2-fdad5436958d", "value": "1536:oOxE5WDSFCBnlIytVkTrLn0fwAMgbwmAD2GJTHLyfHfkOUJZzxSt8e2hfl5XwywA:djD0YqL0fw00mADJfy/kxu8F8rb7nO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841226, "uuid": "54f522f6-5160-41da-9b37-0afa47b56b3d", "value": 146112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841226, "uuid": "1673cb5e-893f-43c9-bf89-03bf21406ff4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68a1ceb6-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841226, "uuid": "546851a8-ba57-4067-9cd7-36e1788c4c8a", "comment": "Malware payload (Mirai)", "value": "47de8fa770d55b45533ed1ea245e7778", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841226, "uuid": "1723387c-34d0-459a-8bf5-6571bbdbc874", "comment": "Malware payload (Mirai)", "value": "a8b258531c208202b0bd8dd07f3b64bfa3aec56fed34d049490903163229cd58", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841226, "uuid": "75fad787-b6c0-401b-93c0-da8a04c2dcdf", "value": "T195F2F110C531DBBCDB782ABCA6368C46262B1F7BF5F5300351B25DD5AEC2D4296B81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841226, "uuid": "ff8c79b0-d41b-4e0b-99fa-4576a116b8e1", "value": "768:USLVv9Qzqn8kZcThJ2exQr/ENkg2NPREQniVPJzy79q3UELfG:LJ9Qzq8ljvxQru0ZWQOz9Lu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841226, "uuid": "454ff00d-bd9a-4f8d-8e99-fc55cffac95b", "value": 34416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841226, "uuid": "20e651bc-76df-4706-afdd-0bc427cc5685", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5693629-08b7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "dfa7039e-ee74-41ee-9bd6-c74977eb0a42", "comment": "Malware payload (Mirai)", "value": "6c5ce1ac6f9e7c2d6979f37cf4d820b8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "3b7ddde8-c258-482c-b6f1-467f848476b5", "comment": "Malware payload (Mirai)", "value": "106e399026a0642741bfdd3ffb6e1fd469f33ad600285e88d4822ce89ff9768f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "084fe0b3-26ce-4af4-8940-862aabcaf193", "value": "T1C9E31945FD509B26C6D322BBFB4E428D372B1768D3EE320399255F21378A95B0E772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "248670a9-0a47-4446-aa32-31371fc93911", "value": "1536:ooWWGnDyRBfSv+GWVevEDrNqNZRlbAZnBnADnUPT68thYfNO5Z5I0niJ+hzlF9wa:ohTDmBfS26/lb4AwPbtiG5diJ+EkbH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841229, "uuid": "0984cc8a-1275-467d-be5b-c462b88c7e21", "value": 150208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "fc055bef-8320-40a9-8f93-327babaea2f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e560c272-08b7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "6cecc2bd-2e49-4c4a-8c60-593070a9c0c4", "comment": "Malware payload (Mirai)", "value": "71b11a0e51956cfae732ff2cf3cfeab8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "525ab49a-8dcc-4c85-bb18-e8e52d296a2f", "comment": "Malware payload (Mirai)", "value": "0965d07e60fbd4832a86ea203bf972142b92c1bb61084272a8b8d870c3666d1b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "72e139a8-f2d7-48de-a9b7-5ab9367e5576", "value": "T10EF30946B8819B55D5D216BEFF0E128E33231B7CE3EE73029D245B317B8A86B0E365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "e53a4ca8-98aa-40b9-af90-ee8455843959", "value": "3072:2Y4VsU3FUUyaAkEfM+amh7KZ6WxxQNW0sOsZCBD2/P:B4VKp0EffamZKZ1QEaCCBa/P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841229, "uuid": "b034b988-8443-484d-b391-4c009fee595c", "value": 160476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "d31e4edd-ba77-4ad0-aefb-99235de59aa1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a3a1181-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "78251da7-5b83-467b-ba63-9133cc9aadb7", "comment": "Malware payload (Mirai)", "value": "7105c3e18deab86ba401cdffc1b75f55", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "bfe41978-5e61-48c5-a9bf-a991955b9c56", "comment": "Malware payload (Mirai)", "value": "46b4c0036369f33e246d79a30879593742df277dbfd38f85d928103381239eca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "987c6fe4-9e9d-435d-b15c-48b144623b34", "value": "T1B1C2E1B4E1590D1AE9A9A9B1BDF696DF77600F0E6375DCD320C47B50023212C1F45E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "8ee00f38-5a46-4d21-af24-eec381eec698", "value": "768:kYIEfIhPxGUtVTNxzdEF+7Di4uVcqgw09m:+EghpGitNxyw64u+qgw09m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841229, "uuid": "2be23823-1541-4250-a60c-dbdfda7c4807", "value": 28148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "2e77c135-2223-49f3-9b7b-d3701f598939", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a3aa514-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "c21ece34-1914-4b1a-a693-eb3fa94b8b45", "comment": "Malware payload (Mirai)", "value": "b504df29b66c71e0379fe28d1527c2f4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "8a3e0061-a087-4684-bc05-cf90bdbc107b", "comment": "Malware payload (Mirai)", "value": "8e16401a4591be92aeebdff09aa11fd5aed10676f0c2bc1e5b5c011e0ab2cb60", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "063bc775-cf56-430d-8dd5-25fd86768710", "value": "T17DC2E124D82B0D2FED01617F871F598E6E19EC0F2A6557D023EC5A47098E1A2B6318", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "b0767f79-0c2f-498a-b0a7-dfb883611d33", "value": "768:Y6ttzWVE7Ro2+DtHoRn9knXUVyB5f91Je3XncQwjTcL/z/u2JF:YatzCE9o2iQ9ekWf1833cQ+c/9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841229, "uuid": "b33c9dd5-7599-4a67-b939-db131a2e7cae", "value": 28080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "bc3cedd6-89a9-4c10-adbb-6e585280cb5f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a3ac5d1-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "73b5e0a9-4c84-4cfd-8671-c77bc087585b", "comment": "Malware payload (Mirai)", "value": "496eac4beec5bfbf81917c78cae27796", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "8acc7c29-934b-4a41-bd4a-54a67a6f00be", "comment": "Malware payload (Mirai)", "value": "b2937b0644708222a2c384157ac5fd0ed9d30e03561000872595d7caa87b9339", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "5eac08f0-c6b7-45d2-b810-26b99998251d", "value": "T18C82CF74614AC550E2305432AB3EC2C7639326BC65F7706A24707B24E18121FBDF96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "3b941deb-5f2c-4854-84c1-e1f6558038e9", "value": "384:lcVxtfRUr0ZNSGLaJ0gGKW6hymdGUop5hKG:lcnUW9RKHs3UozYG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841229, "uuid": "90e4e0f3-27d4-459c-b3d4-f902be2e049b", "value": 18140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "b4a37c64-91a1-4c4f-80ec-fdf4dcaee798", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a403e66-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "9c148782-002c-4d08-885d-f91686e415bd", "comment": "Malware payload (Mirai)", "value": "1f38ddef5f04b07db8c91c2873349250", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "cce0bcb5-a5b6-4f7e-9c29-41e6b842c112", "comment": "Malware payload (Mirai)", "value": "9d411d2ea4975d448f9419074bb7ed4af7230e9d71cd21c364b469fd0feb6e6f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "693fbd61-2011-4b1d-848b-9dd636ad4b20", "value": "T1B56312BA9736BC4FDFCC5A785C40226A6088D2D1F3B3A55070DEC88D675922FD51CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "dba34314-033d-4120-af3a-4e94ac8d9c55", "value": "1536:YVUQ0TcrWCT3gcHB+cyepg1k/zJhw7nWAvnQGUgJViXZjbdyNR:ip0T2WCbgc8bm/gCAv3JwpjbkNR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841229, "uuid": "62cbaffa-ee81-4cab-bab6-448d92ada0d4", "value": 70436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "4aea8de5-cbbe-4786-8956-3d1db0816b91", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a410879-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "9a9a133d-c521-4c45-9f8a-5fdc50051c7e", "comment": "Malware payload (Mirai)", "value": "1eb29973d91cd6a36c81de22a013107f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "225a31cb-b7e6-4074-a1f0-4f6dff00d79c", "comment": "Malware payload (Mirai)", "value": "9976094a4cf95e878f6b504a52c73b3a54b5742db047a119b251fc51ca1b4bbf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "730cdec7-32e9-4bb3-a887-5814c0bfcbc9", "value": "T15343F150C237A1BAC674D83F8592C9C2EF079FB1D1A634C26B5A45A16ACD05933FE1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "447da722-1b05-46b7-8c47-708d115c81e0", "value": "768:u5IbINTG2ajlHvfxBzLMvL/Fqblq3VJQY92BYce9q3UELjQ+lTxbSkxTq1JyDlMg:u5IbSihjlnxZLMD60nQY9gBLc+9xTXAo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841229, "uuid": "b7ec5c3c-76c4-48f7-859e-6b9c80272201", "value": 55316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "cea68a2a-1e37-46e0-ad7d-9ffa05f47176", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a471283-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "8ee29bdb-47cd-49bd-a864-bbb298c663c1", "comment": "Malware payload (Mirai)", "value": "ee65aa9dddb6d446c4f40dc4e836d1d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "2baebf95-cc8a-4a6b-ba38-dbc8d158dda0", "comment": "Malware payload (Mirai)", "value": "e1514369e66b2e62e966bc55a83534a04c04afa74b50b4e419004f015ac58ed9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "fe22747e-7749-45e3-a7a3-34e4099fc566", "value": "T1B3631A21F9750A27C0D5A87921E74B19B6F286DE25E8C71E7D710E8EBF21A403943E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "56f24357-bcb4-4825-bf5c-e09ec2fc6d04", "value": "1536:SHBeEySWxCczJXAulY24dPCa54VT75Utea7:UAomdydKJZVja7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841229, "uuid": "b11e6eed-bd7d-472d-80c0-e23da9fa5a8a", "value": 66880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "8ee4a485-0f71-467d-bcba-9aa6b90542b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5643198-08b7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "7a4a74b2-4ea4-40c3-8344-bd449a043c1b", "comment": "Malware payload (Mirai)", "value": "6cb1ed56ec761c9a213a4225229bb8d1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "65253a6f-d8df-4782-8f87-57aba7f93d28", "comment": "Malware payload (Mirai)", "value": "10b27c0767a74d2674e8f1b3fe230dbb984939f809c908c7fa913e4696d4be22", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "d0f84c1f-3d00-4d78-8e2b-b7177a5144ac", "value": "T16BE34B06B5C088FEC495C1744FEBE63AD972F41D5238B16F27D4AB626E8EF201B5DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "13e7eb0e-20e2-46f9-93f4-88842c4af4fc", "value": "3072:Jb76vFXKtOiRzXsTDT7zG+NwhvSM3CkIQAT:ROKLSDl8vM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841229, "uuid": "ca4b56ec-0562-4043-b220-a782ca678d5e", "value": 155816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "e08a2482-d92b-4b4c-9d03-3b302d212dbc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a4a052d-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "87fc21cb-4ef6-4ead-a672-df0857317f7d", "comment": "Malware payload (Mirai)", "value": "1430866903f9c05324f9f79d19d6a9e7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "793fb819-bfc3-42f0-88fd-75e9ed7eb532", "comment": "Malware payload (Mirai)", "value": "3d7f8cb01aa7265a866a2724eb6222b3bc720dc52ebfd96366e5948b5626c382", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "ac2e28c7-2c45-402a-973d-ff677b061379", "value": "T108D2D05130C46D2AC7B19CB0F3A15FCAB7568AB3A1BE3132145091EAFD99C081FB87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "0d432af4-c992-4f44-8294-67edd5d31cf0", "value": "768:GSa4dV64TVT7qcq65+AZM279Y2rQ3VJIs7iyys3Uozq:GSdxTVT2cq65bl9Y2ry6Ezq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841229, "uuid": "778c05d2-b79f-4336-876a-92c42acaf917", "value": 29624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "783c37eb-2e3c-41f4-9e5a-c7ee50e322a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a4c4baa-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "cc9e5f5e-fdc0-4545-911d-a7fa4e718f97", "comment": "Malware payload (Mirai)", "value": "15a839493da0a57fda6821cc8cc50e29", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "856a2dac-9b4c-4105-a6fb-26666896bdc4", "comment": "Malware payload (Mirai)", "value": "6a0602e45dce1d0be1ee3d3c8458c7b6356e2ea17c0e0390d7349181fd707aee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "7832358b-58fc-4ccf-beba-80739150608a", "value": "T1A85312360AB4902DC474CB378B1CCC668B3641689B608297EA69F5FF2E81D05F564F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "4e46dbdc-96a5-47c5-9042-da02e3834f6a", "value": "1536:PoZ/Yzn9l6maZh7RybbM6EwryUxNW78z77SshBGf1mAQU:wSn9jaBybw6E4yUu707bhByQU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841229, "uuid": "9ce4a8ca-de7b-447b-aa33-47c4672afced", "value": 63920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "7719d97e-e81a-429d-bc39-3981a26e285a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e56c0f5a-08b7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "f7cd3254-6770-41c4-8a37-5787edd87183", "comment": "Malware payload (Mirai)", "value": "e4a8d79b0027c2b6341c9f7f7d4fe0fb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "be4168f5-7157-4d50-bb9a-eb1e75adfe66", "comment": "Malware payload (Mirai)", "value": "9ecfa8723d042c9d4f60991e2b337cea5757fa5f39c729c5744123ea1da0c6c8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "cb6a8a88-6f21-4282-b26f-a5406bf0b6fd", "value": "T1F0C30845A9429F01D4D731FAFB9F429933536FA9E3F97101D9205F6123CA98B0FB26", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "732303c9-4a39-4070-b00a-3117fa8198b5", "value": "3072:mLdeWa1ASpKpZqMVTzTah21troOdBEn6ARuf7cH:GdewpZDVzTah21troOHrAsf7cH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841229, "uuid": "f2a24f7b-7110-4042-b5fa-d8669c08a8e9", "value": 126368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841229, "uuid": "67462e52-d840-40f4-b335-e5e293587aaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cd9ca42-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841233, "uuid": "6a9559e2-ac4d-49e0-acc6-445be189fe36", "comment": "Malware payload (Mirai)", "value": "cbf40fa16a5e40bc54388c8d006fe3db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841233, "uuid": "fef53214-5534-43ae-bc6b-d333d9c35538", "comment": "Malware payload (Mirai)", "value": "95dbd6e36abeaa9e8823c1216abbe965a2d4c60b4f362c0b369d162b6d8086a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841233, "uuid": "670f670e-256a-485e-a188-0ddd7e129f61", "value": "T196D2E17C43034CE5C06AC0FA6BE58BD62A690BE010D3FC0ED9269955FB9A17A34CB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841233, "uuid": "65bce3e4-0b52-46d2-b7c1-412a09966893", "value": "768:scsP56eWPnV2UQPQBbQ9eqbb5cG1OfgPJgGlzDpbuR1Jw:kbWvV2UQPPbFfI+VJuS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841233, "uuid": "5a06dbaa-c4de-44d7-80b2-e1a981153c72", "value": 30796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841233, "uuid": "01341ba0-fc36-42ea-8b23-e864e828ce4c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cda2904-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841233, "uuid": "96ef6231-f489-4cc7-b4ef-e7b3fa7ebf9a", "comment": "Malware payload (Mirai)", "value": "3e9dd8ff011de6eae1546002de777bac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841233, "uuid": "415364dd-5b70-440c-8a53-e7f23fc16e2a", "comment": "Malware payload (Mirai)", "value": "52f802201f8ea9e9a0a43a17329030e9daa26c49c9627799c16027f84bb15720", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841233, "uuid": "f1cdfbe5-59b5-4c1d-920e-be13510899ea", "value": "T13B632A9AF800DDBDF80FD6BA80170909BA30A3D141831B3767A7BDA3BD721A55817E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841233, "uuid": "7dc2af07-7d4e-4e7c-9c23-89d3407ef101", "value": "1536:C0W35NYRnJDQJ9dzx8N7hhvLoHrhqkJUMV2n50jyW:C0W35NiJDQTdzMsHlqo42yW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841233, "uuid": "fa42da12-c5e8-4f19-ac40-4297b2d85052", "value": 68304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841233, "uuid": "20df9617-199b-4a76-bd5b-3a94e3ffc6f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e56955ee-08b7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841236, "uuid": "bea3e9d5-51b6-4a33-a02c-2f56f75553e0", "comment": "Malware payload (Mirai)", "value": "77cce0f732c079a5eb400f676480cb7c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841236, "uuid": "01c42109-16bf-4699-8763-5a3b3a2e6d44", "comment": "Malware payload (Mirai)", "value": "701e218c7c650f24a7d4b2dc1f10d3997edcc8547ee884f804db05aabe1f369a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841236, "uuid": "c6c10cf4-1931-45df-a30f-489cf69a5d21", "value": "T1F714A71E6E228F7EF768873447B74A30975D23D627E0E644E1ACC2145F2029E645FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841236, "uuid": "16a767aa-424a-4598-8baf-0a684a0b021a", "value": "3072:BWSJzYszqhbMO4BFhJuRu6bzZM+FXXn6eo:BWSRYsWhb83uBZvXX6n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841236, "uuid": "711a0aeb-adde-4e77-ae00-6ef0a706b9c1", "value": 199368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841236, "uuid": "e79b4976-e9c9-4db1-8a16-f99b4345f1e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ed63f39-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841237, "uuid": "62788ad6-9ff9-47a4-b4c6-58c1eac9df64", "comment": "Malware payload (Mirai)", "value": "983b11e6e30b2a04bfcf3cb1d87bb583", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841237, "uuid": "d5469d4f-28d2-409d-a2c0-cefcecdb7fdd", "comment": "Malware payload (Mirai)", "value": "102d932cf2f7afe40923fa2832b444d6b9f3f4995a710ef9fbbd413d03d8c216", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841237, "uuid": "d028323d-1d87-4689-8a7d-578398ab56ad", "value": "T1DFE2D03A52B67D91CF5CA8BAE3A845BD51A438C2726E9F7C55220CC1F275D4EE8CC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841237, "uuid": "1ff6e05b-3836-45a0-be68-07d97ec01daf", "value": "768:25cLRB7S1qJ/B2r/sUgytDDXuYO1Pr5uWF:ocLig+C0DDXuYQr3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841237, "uuid": "d5758820-f8a9-4144-b661-6be5724b6ae3", "value": 31700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841237, "uuid": "990131e2-48fc-4177-b242-b7559a7dd23a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ed92eed-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841237, "uuid": "9c94d189-79f5-4d42-b207-e45af0e25811", "comment": "Malware payload (Mirai)", "value": "054eccbe817a577b5c38c69cfdf48a9b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841237, "uuid": "bf88c2b9-d55c-49cd-8413-a5e37308ac5f", "comment": "Malware payload (Mirai)", "value": "c2d884856950bef91a5f0841966b5b07bb2da4c6d3730e6d8970a8adb0f586ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841237, "uuid": "c3d379ee-cd30-4726-9a63-6ab5f614dbd6", "value": "T160437B77E8255D90D188487074689F342F13E1C592836FBB61A687B5F853EA8FA06F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841237, "uuid": "301c460c-9cba-476c-b9d4-34f510a02570", "value": "768:faTtJOFZ5eOFmwtz7pPLr/KZQib6L91w7BtC2HvKBDpwayocrV7VS0C/4BJMfY8E:faBsMwtpzL7U1tZKBDpLFcrLfC/C8qI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841237, "uuid": "633f9012-2e2f-43e4-9103-67854a73cfbc", "value": 56112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841237, "uuid": "317edfdb-11ef-4cf0-b013-4646189e5ab9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ee70d5f-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841237, "uuid": "65fc8180-e325-4f60-af65-370d781c33cb", "comment": "Malware payload (Mirai)", "value": "fdb00b1af2efe1b18c414955eddf0cd7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841237, "uuid": "998ea7cb-534f-4cea-aad5-d146e285ccd3", "comment": "Malware payload (Mirai)", "value": "07a33efcafcc394742514478a61363c9d63522c8cfa39f988e471fae566c8702", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841237, "uuid": "aecdc378-1622-4ff3-badb-df72a08a638d", "value": "T189B38BEBF24B02A1C86246F007C74BAD3E236281AF2795E77C5A66791C751CF4916F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841237, "uuid": "d8d9c81a-5eb3-4798-88e2-a67248f937b1", "value": "1536:1NnTGmVZCBSs1kSbPHuoga0gjUSgv9/LWu:fLVZyYSbdga3USgv9q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841237, "uuid": "60fcd00b-d350-4c8d-8251-e4c26d027e0f", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841237, "uuid": "f1341b91-e54f-48aa-94f3-27df42b46267", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93854c40-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841298, "uuid": "95fb8610-0ac1-411d-9d4f-4be0852ec0e0", "comment": "Malware payload (Mirai)", "value": "46480c7344f328c8723c3126b54932c5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841298, "uuid": "8caa998f-f2ea-4568-ad41-e7f064642844", "comment": "Malware payload (Mirai)", "value": "ce1339cc4b678b3fa46d5c45efc2e1cd34cf6ed0f56e1e4d21db7e43535db997", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841298, "uuid": "39198f69-abfb-46fc-ae92-17fa8687b5a9", "value": "T12B143C537B324FA0D365C5720BB38B295DEB12821FE258D1936CDA103A207A9285FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841298, "uuid": "eadbed11-2a58-4087-8b7b-d3690d246b17", "value": "3072:doTEHXdqws7gs1DoHEoHNLRD7QphiH6pQx4plU:6TkXcws7gaQEoRRDMaHjxB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841298, "uuid": "98deab0a-b8e3-4146-a630-c8979e08681f", "value": 196968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841298, "uuid": "b1217f8e-831f-47ea-b29e-6faf4bd7046c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6b75d6d-109f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771841357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841357, "uuid": "3a2d8625-51b4-4d2a-ad70-103e361213c4", "comment": "Malware payload", "value": "c3bc571674f0e1951010a7d13d060d05", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841357, "uuid": "69540712-4270-417b-81b0-b6c024362868", "comment": "Malware payload", "value": "d105e708f76aa160678cd499ea2215fc86c170a37ec8edc84b24d640e2a6fe2e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841357, "uuid": "39e935bb-64f0-45a0-91c0-a70c4832c520", "value": "T18CB66C077B68E70EC61462305EB2DA94276A4C9601D7A527B355E309FAF30BC896FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841357, "uuid": "216c2f90-aa62-46c4-a8df-f242b348462f", "value": "98304:Br9QvZQsFkJynUjEnFvuuM+hNhUrTQVh8ITS6nV:Br9OFkYnvFmj+VUrQ8Ie6nV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841357, "uuid": "2d727d6c-6abd-4e6b-997c-e0d4c9fdd82c", "value": 10989080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841357, "uuid": "9aec41ce-9862-480d-86e7-530deec60628", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6bd3b2b-109f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771841357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841357, "uuid": "daedd935-5079-4451-9747-ba6b829add10", "comment": "Malware payload", "value": "8c0280591a46213355e292d4e3fe7cd5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841357, "uuid": "155f170f-6f05-4879-be57-ed736b35f024", "comment": "Malware payload", "value": "1e26743465b8a590324ef6538efe56ba424dceaa801d855451b414f002cadeea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841357, "uuid": "c2ebd5cd-b925-41b7-a678-5c89ee4ad238", "value": "T18FA68B01FD8B10FAE9430A3105ABB22F63315D068F65EBD7EB407F29F97B69518362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841357, "uuid": "bdbcb630-6326-4ec5-b852-555e68ffd53a", "value": "98304:r8VDrZhMEBiftZOxXQ2U1GAIE5D3S0xT2Y7izv1FlGXpM7tQcq6MiWc:rq9BWZvE0xTvW0WXFv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841357, "uuid": "efc03b06-6a57-4295-9b96-32a6ec01602d", "value": 10233729, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841357, "uuid": "6fc2dba9-c3e6-433d-a8c1-6dd9ff78d327", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6058873-0909-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841414, "uuid": "dfb51511-a773-4514-9b74-2fb3f0b436ff", "comment": "Malware payload (Mirai)", "value": "e680e5c88f79d7f350994cf459a3fe2c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841414, "uuid": "526a542d-5abb-4810-a648-b4f9eec95359", "comment": "Malware payload (Mirai)", "value": "72ba78aeec34bcd1c4181af54255e33f714d4998970839682ab003fc54dcb893", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841414, "uuid": "b04063ab-c939-4b0a-9658-4315b265119d", "value": "T1F51112D5C090F3235ADDEE49F6B18258E499B2856CD12C0A9B965EE50C274943DCBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841414, "uuid": "6161ea20-b2c3-4b12-9d2d-e8af7dc09d05", "value": "12:klCTJ1AxXaAocTCJAX9G0iT0qdG3X8ZwiTw4ANxXUYFYSTjuw3XU7jPTZmxXU6FJ:kHRYM9/8V4UYFXuwHU7ZmRUWplUpe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841414, "uuid": "8d067da4-998e-4ec6-b797-6912962145e3", "value": 965, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841414, "uuid": "f51cc3d5-6cd1-4fbf-b77d-f676297feaa5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fc986d6-f783-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1771841414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841414, "uuid": "1336e7ac-3cdb-45e1-88f0-1a80bd40bd8e", "comment": "Malware payload", "value": "fc449bb4ba748318897a0fee67b55008", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841414, "uuid": "df05043b-3cb2-45ef-8ba5-d43ceba16129", "comment": "Malware payload", "value": "e3a4874547a3f1fcdad409cf47bf3f89e986ba5301a957bcaea7396368c33ac7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841414, "uuid": "f6ac55eb-3877-4f28-826b-cc92b9ce9ce0", "value": "T18A415BBB54E37AA8385A699EB263422854C0F6CC5CE7578CB84C6E35B345548F2227", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841414, "uuid": "ea6dd0b1-4c8e-440c-952b-5f796dbf8168", "value": "24:o9qMkpnIDd3Eo+h/s54NvIaNHnJl9vYp1MSQ7BVKfrnvN2DND7DTckM4StL5Ji5m:o9qMyIB3ETK8VE9cBC2RHmi5m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841414, "uuid": "37041c13-8f75-4dfc-9e79-c756dc737f47", "value": 1974, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841414, "uuid": "00c31ba2-b3f6-4613-a368-663bd4e6c482", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d89386e3-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841414, "uuid": "e36005c0-006e-43bb-8fa8-90fe4382458e", "comment": "Malware payload (Mirai)", "value": "a54dba5434bebc25f7cb0c0852c891fa", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841414, "uuid": "3d414e42-558e-4a84-a988-425ed821c86b", "comment": "Malware payload (Mirai)", "value": "fd59679a9241cd40cea3f3cd08033ee17e1f323d7d671c56612fae098806248d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841414, "uuid": "48da50ab-e7d3-4f42-988a-a2097f925a8c", "value": "T18E51058A61084D343DAB6E52E7B6912834C164630DFA6FA5DFE4BDE1818EE103784F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841414, "uuid": "bd1610bf-1367-4047-a976-871b7bda076d", "value": "48:vD787N7hD56GDghzPDpKWD/oUD7/7o7UDfW3bDM9RDrcgDgpVDhSODV+CDmfTDum:vD787N7hD56GDghzPDpKWD/oUD7/7o7o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841414, "uuid": "747afca6-b922-4559-85dd-0f9dc8a64200", "value": 2970, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841414, "uuid": "3a147521-31d4-4756-ab62-ad55c3692fc8", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d89f9a8f-109f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841414, "uuid": "bafaa539-7025-4267-a457-560b977d8e36", "comment": "Malware payload (Mirai)", "value": "e2d9b861d442c25b78374e64bf05f20a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841414, "uuid": "3e095570-6218-40d0-8f90-761797325ae5", "comment": "Malware payload (Mirai)", "value": "d586e9eb58b9962474ac2e2b5648f8c30b823ce73e1847e5d737048773cd2846", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841414, "uuid": "b2373093-8789-4c6f-beb1-90645ef224f2", "value": "T14351849F13008F31A74C85AD7BF0B1385546A4935BEB8B18EE90885E0EC6E4C37CDE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841414, "uuid": "95360bf8-f5ef-4921-9488-9a95c07bebd2", "value": "24:6tA9O92JMY6C6biBcWLWuZUZEdZEnE2EhEvh4tzLzbwPYQawsCsJUfcX04O4hM3G:b82JMPxbiBHyuZmmcvyfnbwWnhM3G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841414, "uuid": "750c35fc-654a-4a33-9ffb-12952243d4cc", "value": 2881, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841414, "uuid": "8d9ddfdf-5638-41a2-b0c4-d7dc666db359", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40629316-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "1f613bcb-d9e8-436f-8744-bcecb1171425", "comment": "Malware payload (Mirai)", "value": "771bed2f0ea29b5472cf00f106affd71", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "f0b0bc57-655a-422b-9355-33e0ca0f42ab", "comment": "Malware payload (Mirai)", "value": "fe5cdfe9b7f80f6b45eac6cab85006bfe5c1ffdc4f9ebbcad7a5a494d062e548", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "6fe3f25e-e0e5-4c2d-ad85-51d186b9ada5", "value": "T163B3E085B210AE55C02272FCB1870A90D3B16E7B4B9A150B44B3F5B46DBCCD47E1BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "e828a3f8-d20c-4b69-bb5e-4fe3ce4f818b", "value": "3072:X5Apzl9NOvXoVLAE375lhYy5SkOXNwuG:aevXCLr59hmNwd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841588, "uuid": "5227322c-30fb-413d-990f-5ff6ff96c72d", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "37ae2ac7-5d47-4041-9911-82275a428723", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40675a36-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "0be3786c-2194-4ad9-a9c3-22d705e259b5", "comment": "Malware payload (Mirai)", "value": "e10b00d881a60c8ed876cc40884ab6d0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "83ba82db-9d90-479e-8225-7487d48b23e4", "comment": "Malware payload (Mirai)", "value": "53bc38db1b98c45d55757e8e48623d1d6c9583cb90ca39d1374f5f9f8a7e44a3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "5e4c8c56-e862-41e0-baf1-dd8d36e10bdb", "value": "T106C3F185FB636991D0A342FDA4C00AC387912E318BA217480699F774387DDFB1F69D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "cbb7aa8a-bd8a-4587-8775-f15282a55c99", "value": "3072:SBdQK+TG2nIjnRdZaUXUSgkLCCVwHWiEiBtbMMTnO:eMQRtXU9kLCP8ifbxTnO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841588, "uuid": "3d08c02e-1261-4960-9aac-30207edbdd18", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "f75957b7-2b2d-4ab6-9bf3-ec96ad53295c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4068b953-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "549d44a9-89ea-421f-80f4-fc1e35fa83e6", "comment": "Malware payload (Mirai)", "value": "319ee06800ea4f24961aafb7bc78203d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "8265b24f-46ab-459b-8165-5419e01da7fb", "comment": "Malware payload (Mirai)", "value": "8b81cc5589d6c6a76c60e46653585e2e492bce3f62ea1415557b0d5b3fadffe6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "5faa304a-897f-477d-ad4b-cda14fef470d", "value": "T199B3AF87B1907ABEF0A45E3FC4135E26E6259F705583173D71BDF9906E3A3903292E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "261adac8-a57b-4860-ae0b-7c23b91f51ac", "value": "1536:toOxCg+uUGWkCqYUqwaJ1XqfXg5AcS5blaZeCtjHXNLdCS2T15OvhSkzN8rSx:t1xKlGWnqTUcXgZS5gZ7CSXhSQUSx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841588, "uuid": "b4f04ae7-6900-4009-8b2e-5655bb964dc6", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "f8ba54a1-0035-4cff-b9be-48e5fe149c95", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4069b5b0-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "36c35a61-4408-445e-a5ea-3185105ca715", "comment": "Malware payload (Mirai)", "value": "59d9d7704539f8432d0819db59fdf964", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "caaa4dec-024c-4fbc-ad35-a2be7ba31555", "comment": "Malware payload (Mirai)", "value": "5dc95fd46ac55877620392211ceaf25f7bc92c123c98399ec22f1de9ac6d63cf", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "8ee34dc5-a34d-4ba2-83e3-00c1e4334162", "value": "T1E573022B519F4AB3C1E9DD33B00B7B30AF74A163F8E53B05F841A045AA19DF271546", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "35106196-0eda-46a1-b930-d449f2a6786f", "value": "1536:LOlDJ9nqHLw+ZQeuFvQfPbYGiNw7VI/rW0wvnEJ3gzE94e/oh0cyTorC:Spn40+ZsvaTYbeO/VwP/zE99/oh0cyTF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841588, "uuid": "39dd1164-858b-42f8-a08b-013051f23fea", "value": 74740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "71a56597-7ae0-43d8-b975-2d632603247f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "406aa7cb-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "62cde968-53f0-4d0b-b97f-ce5a45998f26", "comment": "Malware payload (Mirai)", "value": "5925dd96ed59ba2e8c7160e9c20efd5b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "88c2ff30-3b9c-4585-b2ff-c1dbe1d140f9", "comment": "Malware payload (Mirai)", "value": "3c185216f32db7ef974b6b99d03f099078af2c8326a9d4dd0ee1091e06224981", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "c35df73d-7920-4c9e-a5bc-054a2f4ca074", "value": "T1085301A150F5F469C66293F222148F02628ADA817B15CDDC30CA136B6C9EF9F5FC56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "42d9ebd3-37e0-40dc-a4a3-4b080846e248", "value": "1536:LznwRRM10ac1B010ZtaS4SV/zQUjsPwttl6ohHwLkg4azHI:XrREB5taUVLQlwtt05LGazHI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841588, "uuid": "56f75194-0583-4804-bee9-680075cb24f3", "value": 60788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "a23181bf-6065-423b-aa12-c57b16083fa2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "406b32d2-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "792843dd-429a-443b-b469-29fb3850a547", "comment": "Malware payload (Mirai)", "value": "43d372436140962515ee84fc86e7ca75", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "f884d5bf-28b3-402b-92b9-978f0395fe7b", "comment": "Malware payload (Mirai)", "value": "e6d7a59c35a1c0e7f936c824c27244d99bebe813fc0ec281789357db06c28ff3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "5a641e91-2ecb-4547-8518-69ef6e35661c", "value": "T1E5148120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "faf26efc-1a32-44dc-a821-3f896a8e8582", "value": "3072:BcHZcggFy1tJmajThwnKBDMOzsjJjL1lCR0UKG:BcYFAJ9/hjzsdjyff", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841588, "uuid": "b120625d-67f7-45e9-9b87-7eca601d939b", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841588, "uuid": "6aa8aa68-1828-497b-947a-4b6cb91de436", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44074958-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841594, "uuid": "ff734fef-dc00-4214-8c2d-5fe640f24bea", "comment": "Malware payload (Mirai)", "value": "8e25e61754276008e4ded2c980552b25", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841594, "uuid": "a92ec230-011f-4ca6-8618-e58eb0b035a5", "comment": "Malware payload (Mirai)", "value": "e179a564c84da82ae6cd343ee5bccc15c6433382579d5386af2152f760136bc0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841594, "uuid": "db1d6806-94fb-489c-992a-aa64f0a96203", "value": "T1C1146C2BB3C39CE6C51063308C316362776FD7081958EAFFDA1B3794A99772256246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841594, "uuid": "565df6d6-02be-461e-92ff-536fbd15ef02", "value": "6144:zNROm5155gL6mTX7zRR1Lwt8Al7IKTtr:XgLnLzt0ll7I6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841594, "uuid": "f377d18e-d079-4fe2-aa46-4691e0c72bac", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841594, "uuid": "ee1821a9-d31b-4d90-ae61-56f024322d35", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44077271-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841594, "uuid": "693798e3-df40-408b-a267-01678c89f225", "comment": "Malware payload (Mirai)", "value": "8ab1cde4e68cdc233520cf570fab759d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841594, "uuid": "6fd2f949-197a-43a7-841c-e763e29225f6", "comment": "Malware payload (Mirai)", "value": "cd45ce1719122ae5a86c4f2b07183fb03350e22c861d503ec892b4b5fe151919", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841594, "uuid": "2838f73b-30e3-45c5-ae29-6b6c03269936", "value": "T10904392F258192F0F6411B746BCBD3976C390BBF51A9909F6B416329B6E0B7BA02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841594, "uuid": "8c4d565e-64dd-4e99-85db-55e152aae5a1", "value": "3072:7mflblbBDfvNUZem/LVA7bGQU66gOVNLddnNgRdgJi55wnUX9:7IJ5k1DVA2nDXNgEJi5aUN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841594, "uuid": "06265b1f-cb0b-4ee2-870e-6bfcfbf6a74f", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841594, "uuid": "4b96cc1f-d0c4-49f2-9235-0c092ca5d47d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44095ef0-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841594, "uuid": "ce624195-de57-4457-ab18-16a35a16353d", "comment": "Malware payload (Mirai)", "value": "48dff396976185c5bcacd4c83e93872e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841594, "uuid": "36ad82f7-76c4-43ba-ae83-3287aecd1bce", "comment": "Malware payload (Mirai)", "value": "4ce0cf81db980e021161730effe02c3418e687a83ccb2377638eb9ac4327ad17", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841594, "uuid": "ffdec770-5493-4825-b80b-106e8859a83a", "value": "T15B6302BC32EB8430B0DDF521264F22303331EB9AD86B53D93E95B5E9E2675584D13E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841594, "uuid": "9a11ba3e-1870-4d8c-b422-b3cd31183c9a", "value": "1536:hltrI7mDmde7Lletk8cghgLFPjihgulh6DoInuiFrPb:hl+YmdkLMk8c5PdulIdrPb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841594, "uuid": "51992fb8-2cff-453e-974b-6844e0c9e16e", "value": 70848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841594, "uuid": "81851791-3e87-46c6-9ff9-ed6915f5d6de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "694545b7-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841657, "uuid": "74d8143a-8fca-476d-9833-22a93924633a", "comment": "Malware payload (Mirai)", "value": "fd11f49e1a49f70908d416ef4181f334", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841657, "uuid": "6b69a001-9f1e-4c2a-93d3-c60960020c96", "comment": "Malware payload (Mirai)", "value": "c0a5a83009d82ae7f51649266605ba241c961b3e96149045db88bab52b9dd9d6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841657, "uuid": "6ebf1413-c4bb-455d-8385-a5439cb039d8", "value": "T1C9D3B021E4006DD1EC2129F578BA96BC0350EE700BDE1586EFFDE95E647BD9438AD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841657, "uuid": "0089eef1-89f0-4d70-93c5-dcee572ba914", "value": "3072:PHiBTNkAgcly+hoVpE6AKUjq+8biA7JBd/xz:PCdny+hovsmzbisJfd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841657, "uuid": "e266f929-c2a2-4de3-9375-7d5ebaf2dbd4", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841657, "uuid": "18eef3dd-dbb7-4c53-ac29-94240dd7a477", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6951a260-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771841657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841657, "uuid": "3f7e679c-cff5-4093-bd51-599160059c9e", "comment": "Malware payload (Mirai)", "value": "024107c63c5ca1d32f0f0b387a3d3d23", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841657, "uuid": "6d18a029-2156-4cac-911f-e05636890ab7", "comment": "Malware payload (Mirai)", "value": "cd886cd30ecf8bd0d19f21895a016b4bb920bad6cb4c2bf82c903d96349a5420", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841657, "uuid": "aed37bcc-3ff7-4565-86e0-7eedde573132", "value": "T18DD3CF32E0086DA0DD2116B4347659BC0340DEB40BE59243EFBEE59E28B7DA57DEDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841657, "uuid": "f3ca29b3-77a0-42d5-b0a9-71c8d4c90f44", "value": "3072:kNulV+GOAc3YSmDEjdX/VuHVv3WDRGGRhaUNZkP0ZKa:yulo2ubIVv3sXL5NZmOKa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841657, "uuid": "b1f21b29-586f-46b4-b4a4-c8b4e015f9c6", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841657, "uuid": "9d29a626-eff1-459c-8f83-0c5af98720d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12138631-0e31-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771841828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841828, "uuid": "1bc9add9-cf74-49c3-962a-75f52d0f3b16", "comment": "Malware payload", "value": "d36cd55c85ed93a9946d5f7bdcd6e4d2", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841828, "uuid": "d68aa7c7-0de3-42b3-ac06-c96a36d90786", "comment": "Malware payload", "value": "8f5a2b047d41915a06c648148a1e96eb4bc9a888b9b57b61dd05c9eca16fe119", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841828, "uuid": "fb7c7ce1-e4ab-4333-94c0-e3f1a4ad7d88", "value": "T160B5CF765207BCFADB675E7CD1022A710C887C671B2185CCBACA07CAA1D558CDFB98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841828, "uuid": "694cc2c2-c745-47b8-b0a9-feac464a9688", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGN3eOfh11YYGBY:8UixbItdTrJoFVPMvXGNHi5c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841828, "uuid": "aa85d8ae-5265-4d52-80c4-e556d18bed52", "value": 2384048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841828, "uuid": "39d2503a-7d11-49f0-8fa1-4d3bb6e10de4", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1deee369-10a1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771841960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841960, "uuid": "6c910802-07b8-49ed-93c3-e95dffe5ab35", "comment": "Malware payload", "value": "58b4d0e400c76005d3d5060c38aaf324", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841960, "uuid": "96118eea-5c39-4c7c-9803-13b03d13089f", "comment": "Malware payload", "value": "0d06b42a2f780cd8e9be998b25a5187b1479521d39417c0f815b84e1fa822070", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841960, "uuid": "73827d3c-f712-4a1f-80b3-05cb79734a4a", "value": "T1EFA63332C32AF955D95372B939BBC61A942FD6883343A5CF17B819DCACC19D05B2E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841960, "uuid": "f6027ff8-6bf6-41eb-98ec-2e421718aa4b", "value": "196608:o6gGLdq/Q3Y0iNSrb1Gf0suSMMl0bu6Z7EfxrA+O7i:ZI/Q3nJb1GfeSM+0buiIxrA+O7i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771841960, "uuid": "55f10194-23af-44b4-87b7-71372e9b0304", "value": 9563667, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841960, "uuid": "f7433af1-b689-468f-a155-c2d8dba8590f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e34cd76-10a1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771842068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842068, "uuid": "c51323db-437a-4559-bb2d-cc2b17fefd5f", "comment": "Malware payload", "value": "b46f348a5c79468012500aec8342f567", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "encodd", "colour": "#e003c4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842068, "uuid": "d04c0f24-3a0b-459a-979c-290f5b8e7b66", "comment": "Malware payload", "value": "c6fe2a84644a1c19bd8c647dd3722258aba32c50b120472f02f613497a9f9b04", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "encodd", "colour": "#e003c4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771842068, "uuid": "d1f01832-e06b-4e53-bc7b-7689149bf56f", "value": "T1F8E4A0BA5355AC9F4E1C0E65F408074B1D6C48D7E2B8D2F87A82B4F886A51A44EFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771842068, "uuid": "d9a1b215-2aea-4861-871f-416efa046422", "value": "12288:7zd0KtLQw+MyzGH6bhDLiz9I7Wbap0oNArZZK2xn8eGbSHO4iTdQfOCbb5:7WKHQzM6b9OztOp0oaO2R8eGbr4iTyfb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771842068, "uuid": "fb9a916b-ad63-4c76-8b2c-4021c7eabce5", "value": 704515, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771842068, "uuid": "19480b30-e1cc-4bc8-8dce-7e6b2ccc9844", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cef893a-10a3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771842844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842844, "uuid": "3e0c37f0-f032-4936-b799-1ea30cbd13c5", "comment": "Malware payload", "value": "7e41cfa50bc03ad333eb420a642c974d", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842844, "uuid": "73c3616b-2942-452f-afb6-60842daa6123", "comment": "Malware payload", "value": "6140f0fa5b6f3438a88a8bf829b6458d2542660b9d8feb5e84e5a10635d5e84e", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771842844, "uuid": "15123999-198a-457e-965c-86b636abdc40", "value": "T19634128E0AAD15FBCD2D1185200B2F12BA6DD73295C00F44AED74694DAFEF4F68E51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771842844, "uuid": "ef3dc542-08bc-46bf-92d2-c8d9ae7eebdf", "value": "3072:3IS0FvG9HQGtzc4VsTDr4nfvf3g2FxyesNKLmp2RPw1LTVsQ//DZ+bPZdl29z:3cuSXTkn/g2PLe/Lm0Z+r129z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771842844, "uuid": "a80b8f1b-7b95-4281-a89c-b902398bb8ac", "value": 245312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771842844, "uuid": "3b26578c-77e3-4497-a284-29527534e1c9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52b842a4-10a3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771842907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842907, "uuid": "94a173a4-bc60-49c7-8e64-da600de241f0", "comment": "Malware payload", "value": "7ef621f4d6fe52419d822b27448e62fe", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842907, "uuid": "8b2fd577-9cc0-406f-90ba-6313d744ce5b", "comment": "Malware payload", "value": "b9523985b7aaa933894727ea3d41dc80be6dfc2dfbab08ca02bac3149df85103", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771842907, "uuid": "54a29d25-554e-4fae-9870-22850be43842", "value": "T1AB341254B9D0FA93A9BB3B9429D84071D08E9A253F2DCF396CD9481F944D98FB80C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771842907, "uuid": "5b0f8098-a38e-4ae3-a743-a011e0d9b42f", "value": "6144:QgOKiigN42lLjits4WWK/XUkxepVVjzrwgPFdHGme:QgOmnWnEYgbjzU8fmD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771842907, "uuid": "90cbd814-a57c-4481-8d80-3e747e9c2cc0", "value": 241728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771842907, "uuid": "910f488f-1ecf-4976-975f-65a5177d1ea1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf5e6f57-10a3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771843090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771843090, "uuid": "08b73fd0-8642-4773-bd74-7ed0c8dbb762", "comment": "Malware payload (Mirai)", "value": "8be6c5a8ea8bc888fe0ec0a98abae28f", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771843090, "uuid": "37696be1-9a91-4c59-b501-7994d8079dbd", "comment": "Malware payload (Mirai)", "value": "8aa1ec9c31ca74fd25ab0aa581faee30f5340a1eb2291e5670c37a028133eb4f", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771843090, "uuid": "76b69dc2-dfe1-4b59-9ef3-bb6477881521", "value": "T12AB31A42BE529F13C5C261F6B7AF42483B127B7CD6EA3142ED247FA1274B4DA0E276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771843090, "uuid": "69bf9b08-8e86-4ed3-a1d8-a1c14f127dbc", "value": "3072:bMfQOnErL515+aNDjBochr07cA74dtZFnS:GQOn6LjYgRochrGcA7ctnnS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771843090, "uuid": "95c99c1c-76c0-447e-9532-392c2615483c", "value": 109224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771843090, "uuid": "9b21db84-0620-474a-8e6a-459bbda48641", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2cdc04d-10a3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771843149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771843149, "uuid": "01b7b309-3430-4ce1-a666-9ac4236d8b52", "comment": "Malware payload", "value": "f618980e7f08b11b615af52f5c77d82e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771843149, "uuid": "cab71cc1-08b5-472a-b745-5318649cdd0e", "comment": "Malware payload", "value": "196e665ad4759ca2b94dbe21e47bd453033397bdcacde71237b145b0e758a327", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771843149, "uuid": "7218e667-4c1e-4545-be64-957355e63cd8", "value": "T1DDE4AFF65395EC8F0E1C0E95F508074A1C6C48D7E6B8C2B47A82B8F986961A44EFDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771843149, "uuid": "f2d373b4-e8c0-4cc1-b3d8-a01f680c11b7", "value": "12288:VtVh8P5yyBqrjjZ0W2s4oO9ZYg3UtSwImcyjaJ+hE7TqvIwf:VZu/BqrjN/2ZoOH3UtSwImcyjaJ+h+T+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771843149, "uuid": "1f8dd3ce-c564-49ce-b92a-d9b4bd49d800", "value": 675840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771843149, "uuid": "b3188ef0-8b16-429d-943e-a2568d17d5e8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7277728-10a7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771844848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771844848, "uuid": "17efd9a3-06ed-489d-9407-a2e9656c963e", "comment": "Malware payload (Mirai)", "value": "352733b61b1cdad0373df0369e4aea75", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771844848, "uuid": "2585fd1e-96c8-4232-96ed-9b8a98838130", "comment": "Malware payload (Mirai)", "value": "88487949fa9c363fb6f4ccd8b739ca61df58afafe8968598cd43549ca8dd58e9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771844848, "uuid": "e77f1544-6d66-47a1-bdc7-59c3af558ec6", "value": "T147157C99E786E0E1F56300F1025FDBF71934A12A5013FAF6FF86266374327616F1A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771844848, "uuid": "8b67737e-00a0-440a-b29d-7c942ad4c480", "value": "24576:3MlKqZRhdQhbPlU6t2AxZwJHbaakXiUCK:3MzRhdQhbPb2A8paak/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771844848, "uuid": "1ef3098d-8fe6-49bf-aae9-65189405a505", "value": 923288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771844848, "uuid": "411cf3f3-15a5-4023-b120-7d296b2430f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "795a108f-10af-11f1-8369-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1771848126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848126, "uuid": "836886f5-73da-4393-a167-11d0114e1a1a", "comment": "Malware payload (Formbook)", "value": "b95e79e7b028b3ba99c7094c122a37fa", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848126, "uuid": "ba745c4e-34f2-4585-a803-d3aec25cf77c", "comment": "Malware payload (Formbook)", "value": "3f05216f892f0da182788e7cd6b9aa352a79fdcc6de6b284be2e5f434df057ce", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848126, "uuid": "10daecfa-3d55-4608-9255-d1cd9e840927", "value": "T1F654237F9F07A66CD062133B9C9B7C321F2A7A725B270603D6C61EB1A6D00F17A466", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848126, "uuid": "597a3c97-f720-413a-ae1a-0187b735f2fc", "value": "6144:u1lzWZFrdjgID3RuEge/Nk8TlzPAviXygaorhAMTF+Iqyut8v:u14bgIDBXNk8TZP0ii1jEF+ITv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771848126, "uuid": "8ff4bbb5-b126-4c49-bb4f-46fea229f908", "value": 285696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848126, "uuid": "8ed407de-22b6-46bc-978a-c590c6913101", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "795c5291-10af-11f1-8369-82aee05be84a", "comment": "Malware payload (PhantomStealer)", "timestamp": 1771848126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848126, "uuid": "a02aafd7-1cf1-4c91-bf89-4f1ebac4d714", "comment": "Malware payload (PhantomStealer)", "value": "646586043c05831046852c8b8e48f15f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848126, "uuid": "76b7312d-93cf-427a-af0b-35c9b4daaa3a", "comment": "Malware payload (PhantomStealer)", "value": "cea61b4a9b33918afab25a788717902248193ede839dc572428d7a6dcbc4e069", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848126, "uuid": "d1d54538-3423-4338-ba52-4d0ee8d403ed", "value": "T1ADF4DF6873F85A00F1FF5BB294B59D51AB35B513A962D71E11C081C80E72B918F8AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848126, "uuid": "09e6555b-9620-463c-84ec-91e96208c171", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848126, "uuid": "b4361207-e318-459e-95cf-d68e1b8d1324", "value": "12288:H9aNWvkqjVnl36ud0zR/6CtQ9PUHIG8DXjAGq2amJYeQabm3NUW6:H9RkqjVnlqud+/2P+ATAS/JYec3NUn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771848126, "uuid": "9a718162-7ce0-4ebd-a202-5525415df567", "value": 750592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848126, "uuid": "4b79ebd6-909b-45a9-9762-61a3746a322b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4fca718e-10b0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771848486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848486, "uuid": "dc9ea832-1f73-4a58-af51-d72666ddb19e", "comment": "Malware payload", "value": "0ecc8de696dfa572f3984efb938faaa6", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848486, "uuid": "a919edd3-dd62-4f2d-a308-dee7553aa5a1", "comment": "Malware payload", "value": "92e58fb8cb03f031708d82b5e269f43ad773db74b7d8abce00badb1026d7653d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848486, "uuid": "6c0c73cc-b31f-4853-ba9f-fcf8482f9284", "value": "T19B235CF61523ED8F8B260D52F40C1001ECACADA3359694BEBF4445EA8BE451CADB4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848486, "uuid": "8d49b13f-edc8-4733-8f02-7d17d8dca29f", "value": "768:HxD6gIqFwYrZlXlIElL/1aQj99++BbgM2jDv3L0rx4y0nSRiYbYlCmfsEGTxWay2:d6gIqFjr31Dxd5G0brUb0r+SYlxUEGTR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771848486, "uuid": "f1e042cf-e66a-4aaf-b475-1ec8eb63dde8", "value": 48475, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848486, "uuid": "2f8c1a18-6ac4-4607-afa8-adacfa4be809", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16734bfe-c902-11ee-b9d1-82aee05be84a", "comment": "Malware payload", "timestamp": 1771848667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848667, "uuid": "f826c9ce-6a45-4dea-8682-c73da26645e6", "comment": "Malware payload", "value": "3a9349af006440c7e0da677724551239", "object_relation": "md5", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "AV.lnk", "colour": "#072ce5", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "ink", "colour": "#552ab6", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.lnk", "colour": "#d92883", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.lnk", "colour": "#d1c6ca", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848667, "uuid": "3271f1d3-6624-4b5d-a300-99725cd925fd", "comment": "Malware payload", "value": "00401651af3194ede5157004b6dbe1edf836a94ca182221f2c034201fe55e4dc", "object_relation": "sha256", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "AV.lnk", "colour": "#072ce5", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "ink", "colour": "#552ab6", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.lnk", "colour": "#d92883", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.lnk", "colour": "#d1c6ca", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848667, "uuid": "13590bf4-e6bb-471f-bb4b-f9ca4f8ce372", "value": "T13C41E2019FE70B3ED7264234AC76A251533B7555F8965F8D9040478404B3401916CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848667, "uuid": "c029e3a5-5353-45d6-b3f6-84aaf7885db3", "value": "24:8NqDOlC82vUKJU1+IMJ941y2bY6HoIab/C8fn1vURXTUmu3+IMmmt:8aVnvZJUdMs1yE3HVabhlUymu3fMm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771848667, "uuid": "997362ad-fd4a-495b-842e-2e00bf826ebf", "value": 1952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848667, "uuid": "2d0ca8b1-c5e2-4ef4-a912-9740701e7ae9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c42d4b42-355c-11ef-b2b7-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771848670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848670, "uuid": "78c0fc78-bd05-4d5b-8996-125dca71e90a", "comment": "Malware payload (CoinMiner)", "value": "2a4155ca43741401f44cff063859affb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848670, "uuid": "976c1e70-89c9-466f-830d-b33204a912ff", "comment": "Malware payload (CoinMiner)", "value": "eaf34aa272aa6550ae45d504c10f4d90b6609ec7a57bff4ba4a8e8f273e2736f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848670, "uuid": "cbf6f026-4d7f-4e98-a18e-5967888837ef", "value": "T139563363F4809836E038203525F694A2B17DFD7343654A8B73A93A364D793D932BDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848670, "uuid": "cf322f1f-50e5-4732-845c-6bb5cf414bc6", "value": "98304:zapjLqB4eFb55TJolc0GMtAKj/gXSYG47MUkc3QDJ2dll+4SfE8Il:uveFb5X0f/o77MvcEyjhSil", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771848670, "uuid": "46a5e6f4-846a-422f-a73f-08d1eb90a5bf", "value": 6247149, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848670, "uuid": "fc2c81d0-f421-4e54-b055-d7e08b61dcff", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6e720e8-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771848670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848670, "uuid": "862c6382-3e80-4435-a2bd-bb737af59857", "comment": "Malware payload (CoinMiner)", "value": "a20727b81b50a20483ba59ae65443dfe", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848670, "uuid": "6119fb7e-d273-4f93-bb13-f68719bb8dea", "comment": "Malware payload (CoinMiner)", "value": "af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4c", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848670, "uuid": "971a84ba-983c-4b01-874b-5b4618b67c3f", "value": "T167563362F440E436E038203925F684A6B17DFD7347254A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848670, "uuid": "9ba381cf-7ef0-4be9-a3e6-2e2d5b797f6e", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848670, "uuid": "3706d9ed-ee23-4d03-a7a8-1ad4bcb266b4", "value": "98304:RLGSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+Y2naq8le+:YBfTCiUswVSLOJgyBG/aW+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771848670, "uuid": "691d366a-42d6-4041-97ac-2d37e8c58de0", "value": 6271259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848670, "uuid": "0cd113bc-5466-4b3a-befc-cba123af5c82", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7efe089b-2e1a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771848672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848672, "uuid": "41508912-d212-4c10-931b-b79b941b95a1", "comment": "Malware payload (CoinMiner)", "value": "e3bcf6c6f4d21e8a1e2789e981366973", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848672, "uuid": "94daa75f-20c9-4b9e-bf5b-cde575c5f01d", "comment": "Malware payload (CoinMiner)", "value": "617e6896100c4289af8ec35ce7b719ea50c18d006b1e4e4c5fefdbee65b6fbbd", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848672, "uuid": "e267fdc3-517c-473e-b2d9-664155f8a926", "value": "T175563351F0409836F039147A34F984A2B47DBC724B75598BB3A93E721D393E8267DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848672, "uuid": "e8c907ba-80db-465f-890d-43299bc04c46", "value": "98304:zaejLqB4eFb55TJolc0GMtAKj/gXSYG47MUkc3QDJ2dfe7u0MEGCD27/Xn:7veFb5X0f/o77MvcEyG7udlp7/X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771848672, "uuid": "e36ecb66-f2d3-48f7-a6d9-2eebe98a38ce", "value": 6247290, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848672, "uuid": "4ebcfcac-2942-4ae4-9e25-58d69c72589a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e409c06c-10b0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771848735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848735, "uuid": "f8098880-97cc-4095-806f-c14d34823641", "comment": "Malware payload (Mirai)", "value": "e46f6bc9d40171c0b78496ce579849e9", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848735, "uuid": "8498b10b-219e-42e7-91d7-7aa8c008d16c", "comment": "Malware payload (Mirai)", "value": "3526ed9ae1ae70a01c0e8e1d8cbcf1011607b2b1a4390db2a56cd9d02fe4a48d", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848735, "uuid": "05c58a65-de26-4e71-b912-79a530625042", "value": "T156D3F856B9919B11D5C321FAFBAE414933136FBCE3FA3101DD206FA4238A99B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848735, "uuid": "8037c16e-f3cd-40b9-8847-d1d10d1d473b", "value": "3072:EVWVVQDnuiHblZQ7xDcabsqOL+aQ6tihC4OV/E/uXO:E+VQD77lZQlcabsqOL+aHti5OpEWXO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771848735, "uuid": "e78c1be6-911d-42bc-95f0-a573c554ad71", "value": 137820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848735, "uuid": "0d000310-644c-4ba5-b5ae-f6cdc76c1393", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f745e3d2-10b2-11f1-8369-82aee05be84a", "comment": "Malware payload (SnakeKeylogger)", "timestamp": 1771849626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849626, "uuid": "91b80549-920e-4d7e-8ce1-7f10e956a549", "comment": "Malware payload (SnakeKeylogger)", "value": "dbe603658eb0c040b8533fbd19b9f23a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849626, "uuid": "ad7e504c-819d-4c89-90d1-0a200a9e0bca", "comment": "Malware payload (SnakeKeylogger)", "value": "3622f540ffb22e0834c103fd6d7d4c35d0915de921ef72d07df73c7669299dc2", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849626, "uuid": "5b43b226-a221-4bb0-b15a-0eee8bc70ca6", "value": "T1FD7408FA1223AC8FC9260E40D14D0217DC78B87B72F85598FE44D67058E9668DDF1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849626, "uuid": "64c4dd63-e34c-4212-b8ee-3122f0d8b570", "value": "6144:PSQ7D0qyZugA6s+qo/33x9FA8V9qX3cFle7p5fQKlUNoKsQ1aBmP4zsd6PX89wzL:PSQ5y4TX5dsc13", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771849626, "uuid": "5988f1bf-46c7-4ce1-a04e-c2b7dcb0479b", "value": 367276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849626, "uuid": "9d3406ac-7976-4d4e-956f-197637cd7fdd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60045bf6-0d78-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771849810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849810, "uuid": "311ecdac-e0b1-4563-8bc9-bcbc8680b449", "comment": "Malware payload", "value": "3b5d0754c15b713738948ed28cc0590f", "object_relation": "md5", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849810, "uuid": "6f1a0e77-5c48-493c-85a8-4eb6dee1fe19", "comment": "Malware payload", "value": "9f02a716895a67f25ac36de23628490fe466bdf9360d3a4f76ccfbb344434023", "object_relation": "sha256", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849810, "uuid": "0841162e-9a2e-4a4e-8521-5ecbd6027812", "value": "T14FB523B19503BEC61F7B2844E4602564AD55A8D7C3B2242CFA467DF868DA438EF7C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849810, "uuid": "d1d597f5-20bc-4ae7-8386-2411ff974303", "value": "49152:8A3C2JyJiuj0gtd7D5188bLtUqh9Scxrkm:8QFcXj0gP7l1Fircxrn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771849810, "uuid": "0a3cd085-35fa-44bf-b134-0cec9c67bf2e", "value": 2447431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849810, "uuid": "b45915fd-1030-4614-b211-ab7382fc50ea", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aae01240-10b3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771849927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849927, "uuid": "20bf221d-f3be-40f9-9b73-3e0bcf3e7620", "comment": "Malware payload", "value": "b83fcdb0b74b1cf9a053517c2c55fb05", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849927, "uuid": "614b4aab-1ad6-45dc-9500-ef2d58f1215b", "comment": "Malware payload", "value": "3e0778e06f111340c1d6b038396523bf27ec40c2dcc12a1ea37f16be74361424", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849927, "uuid": "d9f002e5-cf69-476c-ab5b-546c0553c0f8", "value": "T121E4A0FA5395AC9F0F1C0955F4081B4A1C2C48D7E6B8D2F87A82B8F886561A44EFDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849927, "uuid": "cbfee207-260c-4b4d-b8c0-17165c8b5918", "value": "12288:SVILnw+6FNX3i4WrDhRjgcuZptoWvOZInitvkfcvE82i/0BrND:gnNi4WrDhRsPZLoWvPiZkfcvoi/0BrJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771849927, "uuid": "40ab623b-f4d6-490f-961c-250fecaea765", "value": 675840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849927, "uuid": "62f47ec8-cd3f-4c73-8ef0-50e87d4af6e6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81344c0d-0ad1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771849988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849988, "uuid": "361cc0e3-f995-4542-a24e-13c718941023", "comment": "Malware payload", "value": "8b2051f5e2d428947bdee1e903029343", "object_relation": "md5", "Tag": [ { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849988, "uuid": "6704580e-fa6f-47b7-8b1b-f9f2a40d4bd9", "comment": "Malware payload", "value": "656991f4dabe0e5d989be730dac86a2cf294b6b538b08d7db7a0a72f0c6c484b", "object_relation": "sha256", "Tag": [ { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849988, "uuid": "d4f4d45c-b4c1-4d7b-af1f-8637780c5b4e", "value": "T195D58C36A2A2FDD5432A2DE8C1843D120C9C4AD7577142ECFEC94ACFA06E154DBBD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849988, "uuid": "391d53e4-afb6-44ee-aa64-90fddea165ff", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGPM0wgHGnv3UcN:8UixbItdTrJoFVPMvXGNzkx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771849988, "uuid": "e328704a-519b-406f-bd26-c80aa612aad4", "value": 2900144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849988, "uuid": "1c5339da-32b2-41a3-bd4f-d42c5a255e29", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ab17fba-10b4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771850276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771850276, "uuid": "f90b7a34-0fb4-4c0d-b72f-71615e42faf2", "comment": "Malware payload (Mirai)", "value": "6430063dc1e9152f2ac4b1b2a26bdde4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771850276, "uuid": "df3b45d7-2c4b-4271-bf5f-bb9f25c83d1c", "comment": "Malware payload (Mirai)", "value": "d81df7fb144d48b80492ee597ba5b1806e8bf6b90b5788739c07657a4c463442", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771850276, "uuid": "630da6af-7797-4d07-851a-51fba3112a43", "value": "T102E3A85A7E228F6EF269877047F38E30A75877DA26E1D580E16CE5441F602CD241FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771850276, "uuid": "2f8244b5-6ccc-4f8c-ae63-13aab9730ed3", "value": "3072:BEPsaFq/Gk3rgEnGA/EVUqgYP27IaGcj4Sc7KP+xj7bq47X:BEPsOquk7gAGA+kjftj4kW7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771850276, "uuid": "880ba131-9006-4a19-8a86-e93aa2b67452", "value": 145668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771850276, "uuid": "332ef1a7-5253-4e98-9d0d-4af2512fd7d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cc5f9d1-10b8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771851997, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771851997, "uuid": "f6124486-1af3-4525-ae39-2ddd9e5f669e", "comment": "Malware payload (Mirai)", "value": "ed844a30a692c23f039716cb801a0368", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771851997, "uuid": "ac1c77a5-5d10-49d9-94fa-d74e1ac19996", "comment": "Malware payload (Mirai)", "value": "83632cc0a034ab0a21e939e3c7070984a8d2096655c6eb32e0b011148a50bb76", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771851997, "uuid": "0b69c80a-655a-4407-ab03-81fa45bc1734", "value": "T1D2B31A52BD528F23C5C321F7BBAE42483B136B7CD6EA3142ED257FA127464EA0E275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771851997, "uuid": "54ace42a-ca95-4845-a1ab-50ee6d959a9a", "value": "1536:NB7KNhU/k1RIOJuHUdkxSCXhI9JIgvkAdnbdsmPFe9UGXcwbOTKbw+OLs6lKsbf/:f7X/k12eJCXhmZkAhBtPFe9NcGZT1S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771851997, "uuid": "7cd8d649-1e72-4d19-8908-a720dba3aa29", "value": 113012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771851997, "uuid": "f40cf518-83fa-43b6-9839-6faa1ea2a829", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3262b826-10b9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771852302, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771852302, "uuid": "e93b3e71-906e-4fbc-b62b-f994467b69df", "comment": "Malware payload (Mirai)", "value": "c3a8299e599558b59916a7e2796cb96c", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771852302, "uuid": "ee2af914-c438-4476-8f0d-17e94ef949b5", "comment": "Malware payload (Mirai)", "value": "1c373650e95d5fea729400838a7616d478dc7c713d8046e0adbb4e8f16edc677", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771852302, "uuid": "ef57af68-a9ce-4495-a576-6ccbdf696c97", "value": "T13BC31A16B992DB11D1C315BAFB9E514933136FB8E3EE3202DD206FA067864EB0E775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771852302, "uuid": "3303cb20-45f6-4eaa-a171-49d694dc3e1a", "value": "3072:wvVJE3w5WziQ8yXq6uXIRzpaXITNOBTO/iGxTyY:AE3w5dQBXFuYRFa4wBTKxy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771852302, "uuid": "b882dffc-43ac-4431-b264-9d41fbe7d85a", "value": 120848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771852302, "uuid": "8af498d2-3133-4db0-ae87-fa20c9ac2a91", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "997aca1d-10b9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771852475, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771852475, "uuid": "a1bf137e-6222-4473-b143-d32528247e3f", "comment": "Malware payload (Mirai)", "value": "c61a0e7de6ed0b8093efd7c9e1022007", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771852475, "uuid": "b9ab5055-2948-42dc-b7ac-1f69ed156cb8", "comment": "Malware payload (Mirai)", "value": "91c96c7317dc97ee0946810dcfd436e52f0ec2fde41087d0889445b66c74fae8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771852475, "uuid": "616c32bb-ca04-4d83-ab5c-1e539687d62e", "value": "T1F8145B47EEC90ECFC45BCDB086AE836B2AEB559B8CD1F1F5543CCC0C755928A46A35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771852475, "uuid": "7d4a8e7b-7d34-4336-a38b-02335f3500d9", "value": "3072:/F5cg2hwoqjlkOJJ+EUhRimaapuTZzxuTL4W73DMjz/ialf/stSsDq:PDuOOCz24W73wjzJ8tSsDq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771852475, "uuid": "923189a1-8c1e-4480-a171-881b1f044299", "value": 196972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771852475, "uuid": "0fea79f5-e0f5-4c15-9d78-b2a39520947d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9011ef56-10ba-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771852889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771852889, "uuid": "d7870cfe-2569-4b5a-bd03-c0869459133e", "comment": "Malware payload", "value": "deb109305674552a108a95940c4f5343", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771852889, "uuid": "23a24605-52c3-4d61-8967-37312f408fe5", "comment": "Malware payload", "value": "734016ba5dd6b4263d891973a88c3ee84b0fb3ed64ce6a3152bd7f91a79c877f", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771852889, "uuid": "191f7197-0b7a-48ed-8424-b009018b57dc", "value": "T1FF9623FE6154335CC01688385533B948F2F6851F52EAC89EB5DB7E907F6B821EA42F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771852889, "uuid": "9fc9d96a-f6e0-4239-8ca6-b9e9abddf001", "value": "b4436fe2ccd1a0108c1cda48be61b0bf", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771852889, "uuid": "5ceeeca6-1fd4-485a-805f-492f1984c8e3", "value": "196608:JylFh9sVUB8NQv7t9lmPScZV4QIKqlGBeR45OC6jIZR8IwFQnVAsfE3:8rsVUBqQvdLQIKElR45HTRJpVXe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771852889, "uuid": "a9b40886-b976-4b05-aecf-a4e74848d21b", "value": 9342976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771852889, "uuid": "58f6742a-66b4-49a8-a9ab-ee1e2266c3a4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05ab5a1d-10bb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771853086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853086, "uuid": "32807c35-833e-4758-a7a9-ae2d335af368", "comment": "Malware payload (Mirai)", "value": "cb230d385a7b1455ffd7c7e46ed2c54f", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853086, "uuid": "4a80da08-ee97-4866-bfaa-cb63a3ceb4a3", "comment": "Malware payload (Mirai)", "value": "efadcd45f36238e8a41ea0c27ebf8491927946c0d20ad55d9fdb5d0a69c4b1ec", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771853086, "uuid": "7af869d4-e088-4146-9f56-3aee4b816173", "value": "T183E47E9CFE4E3C42E2D7E3789E4987E1722771E0D72391A37982434CD5CA9E98BB15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771853086, "uuid": "46e60438-ee45-437c-8e61-f4dbb5fa3725", "value": "12288:53lo5ERyjvaa0MwecSt5ywT0+/un4ULWrfUm1Y5gxpnSJw5dWMyc5a:3gxvaaBHywT0+24U6Dfojfc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771853086, "uuid": "b218e768-5bb5-442b-976a-ccde787ad552", "value": 697648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771853086, "uuid": "eb3a3a01-7f3f-498a-8bc3-97406bf4c906", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c544d9c1-10bb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771853407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853407, "uuid": "eb479f44-1ede-4009-b0ef-8feadbfd195c", "comment": "Malware payload (Mirai)", "value": "91a54a754348addbd4f46d385bee6f5a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853407, "uuid": "0108102b-35c2-4f1e-946e-9bcaecdd014e", "comment": "Malware payload (Mirai)", "value": "a345a5b053af4236edcb497fb38092af7bd2dd10b9918bd4bd16a8ff1d5027c8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771853407, "uuid": "a81c79b0-3896-4fe7-bbfe-4033e78b402b", "value": "T1E2E3E706BB610FB7ECABDD7702E90B1128CCB95B25B53B7A7534E854B60A1CB09D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771853407, "uuid": "2a0c07e0-7e3f-40fa-acc9-8f1617f9637f", "value": "3072:eBrhgUaQz2YAJiks5igevDvdvZGIm3XFmV:sAQK7JikssgOpvZGhm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771853407, "uuid": "57447e20-4d24-4c19-86d6-871e2fcaef3b", "value": 149492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771853407, "uuid": "8ab66f9f-b903-4e7d-9a6e-b9061bd2b1d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6c6f681-10bc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771853840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853840, "uuid": "e4612d74-4208-49f8-9274-9dd608fab251", "comment": "Malware payload (Mirai)", "value": "1d4c8afe4eadf0667180481b0bfc44c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853840, "uuid": "2877f074-e425-4db5-863d-e4c0acddd64c", "comment": "Malware payload (Mirai)", "value": "55dbb22b2f93973a3db609e6183db5fee47f0ebd1493d35466273e6f00ac022b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771853840, "uuid": "fecd5bd5-bf0c-4ee8-9dea-16c48fe17faa", "value": "T1E8156C4BB2B374BDD053C43443ABDAB2A935B42902226E7B65C4D7303E17E741B1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771853840, "uuid": "2ed8538c-b0b0-471a-94ae-7a7f1e791817", "value": "12288:oWegN4uGLd14sdBD/jkg3s8dSQv4wvr4htCf5YLeeyhS3U10UfofgbdzuFUrrJyO:AuM4sDkg3Bfgwz4htSYLeervUXgKn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771853840, "uuid": "fbeb6c7e-6b92-47d3-9b3c-762bdaadad85", "value": 894696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771853840, "uuid": "55977b70-fa62-464e-b69d-c7b23214b4c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9562c31-10c0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771855562, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771855562, "uuid": "d306f19f-491f-4ac4-800b-865288398a3a", "comment": "Malware payload", "value": "fc45910183a1062874fe5b6933024b1b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771855562, "uuid": "4c5afbd2-d86b-47a3-9041-0f5fb95223db", "comment": "Malware payload", "value": "84e1a52aa9e46d529f2a4609d8f5bbfd41446a451d687df71b4a5b38937cc12c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771855562, "uuid": "a695115a-7bf1-4af7-8807-cd0981e6e760", "value": "T1378308327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771855562, "uuid": "df2f246f-de51-43ba-9eb3-e42190b75bd1", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnNWaKVN/:XEKltp9txAX/yr2pbNWDVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771855562, "uuid": "18020393-1d7b-4d60-aa1e-8c7372cd6267", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771855562, "uuid": "42956685-10fe-47df-9bbb-912c2a592dfd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4dacd6b0-10c3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771856643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856643, "uuid": "9d56f2fd-db11-49c6-8bb5-6239866532d8", "comment": "Malware payload", "value": "dbb32ba7070027abee66f449fa951854", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856643, "uuid": "dfed5ac4-a48c-4dbf-b807-66a9d95da79a", "comment": "Malware payload", "value": "c324936085ec7c870e72710729879874cf216425a203595490c68f3dec3e2003", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856643, "uuid": "5320121e-06da-4ba6-ac95-e885efac90ab", "value": "T140F30A09EF510EFBD8AFCE3701AC0B4635CC654722A93F793678D918B60A64B4AD3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856643, "uuid": "6940bc30-84fa-4651-aafb-2e7125af8b24", "value": "3072:oeUhx2Ek3wYCtDIvAg+9cGIUOC6lWy/f9jTqftuMU:zMTk3ziyGIJlWy/fFqFuM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771856643, "uuid": "cadbe7fa-4303-4a33-a6bc-bb705fa6c16f", "value": 167836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856643, "uuid": "23aeaf94-3a73-403a-a507-6a9821b74dbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e7e0e32-10c3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771856671, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856671, "uuid": "075fad6a-52d0-47a9-be3f-c57161374b8d", "comment": "Malware payload", "value": "2b8da2336504ee6235b84087c44278e8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856671, "uuid": "4afac09f-3023-4c72-9795-b039d1652848", "comment": "Malware payload", "value": "188e294b49121d608334e4b1ef7ae52811c5eddeabb1d1d43f9fc27849746dd1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856671, "uuid": "62750c83-20d3-4e29-ab71-c1bc25648424", "value": "T1A011DC0856E34107658BA8522FA5B60426E39453448AEE233ACDB784CFC936884EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856671, "uuid": "8da07d69-5ebe-4131-9c74-3605788320af", "value": "24:hYtvuvFmRqcDhbFUEq0J8JfWh0SrRlUFLFR5GWvqUc4T:39QHUZ0J8J+VlqLFRpvvvT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771856671, "uuid": "62139313-5ed4-478b-bca8-d2e86425f5ae", "value": 1100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856671, "uuid": "8a27b38a-a415-4b94-8b1c-4dadb9476fb3", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "711c68c0-10c3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771856702, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856702, "uuid": "d1bf8bd7-7753-45c7-927b-cc2b970dabef", "comment": "Malware payload (Mirai)", "value": "50a47af7e91d733a8b042f3295654cee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856702, "uuid": "d0237ccb-e083-4e14-80a2-fdba70517e3f", "comment": "Malware payload (Mirai)", "value": "40192cbb87bf2fa267204af50a197d762daebab1d2ef0c0cc4f9fbc0145495a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856702, "uuid": "421265ad-7526-4dcf-8a2c-e4649b953679", "value": "T10CB32902B71D0F43D1632CF02B7B1BE19799FEA119F4A580B12EFAC592759F62146E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856702, "uuid": "b19ee6e0-3814-40fd-994e-6d7bcc933731", "value": "1536:vg1MoU4u/fSNQG/HhpLhdiqmEJ+Qqr2gjiX9+r/fKllWVB+wcV7ZWf6npfrSU:vI8nS27WJ+QbaOEwlWb+F9YU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771856702, "uuid": "f02631e3-0629-49d6-b554-ebce8f2f177d", "value": 117208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856702, "uuid": "b6f142c4-d802-4198-8996-05ca57ec7cf6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79dc883c-10c3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771856717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856717, "uuid": "dd301d53-c107-46ae-9599-9aa3c4ba39cd", "comment": "Malware payload", "value": "9c126829e7998a05487f3f411900777f", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856717, "uuid": "cc416c1b-e7b5-4a0e-854b-7c8ef613e219", "comment": "Malware payload", "value": "04a33e6ac3ce8f8e832d51a452ef935f19cb3e16e8f41375945e7092b211c335", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856717, "uuid": "01825332-c4b6-4540-95df-ddf8cca3a059", "value": "T1646612A8F62021847D915818807F7E97CE3BC152E092CEBF6E6876DBE79BCC75590C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856717, "uuid": "7f9ce245-4bf5-43c6-9c9d-06f92f8a16eb", "value": "192:+aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaj:PY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771856717, "uuid": "bd3259b0-174a-4a4e-85da-5a729dc45986", "value": 6636767, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856717, "uuid": "4383e61f-db84-4e60-b475-01f525846fbc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08e63224-10c6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771857816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771857816, "uuid": "1c758686-f8aa-4f75-81d6-3f6f6c650616", "comment": "Malware payload (Mirai)", "value": "da4de1d251e0ecc67469d09d2af28eab", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771857816, "uuid": "6a4f5d25-40a9-4169-83a9-d7b67af9aae9", "comment": "Malware payload (Mirai)", "value": "91f9e1a24ea700822b660eee81789c7811256f5e7e8d0fb866a29dd7ec680702", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771857816, "uuid": "457120e2-096f-45a6-a5e2-10769417883c", "value": "T169142A46AA404B13C4D627BAF6EF42453333A76493E773059528AFB43F8679E4F236", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771857816, "uuid": "4a751aa5-ad89-4b3c-b972-d378eb6aeb7f", "value": "3072:iw3BJeWWuTCC24fAcmaNnQehqu42l40ej6P6OB5ioLM/RK3i6B:iQTeWAC2mbmaNnQehquZ6j6P6O/jLM/W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771857816, "uuid": "fa7252e4-8135-4e0c-858b-c908397747d6", "value": 192484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771857816, "uuid": "10a35609-dd5e-47f1-927d-53bd69152da9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d213b48d-10c6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771858153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858153, "uuid": "623879c7-006c-4887-ad82-495a617e787f", "comment": "Malware payload (Mirai)", "value": "40f3d9c6ff0e6463b9be5fe0308651bd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858153, "uuid": "c560ed95-c3f7-4958-9ca9-7d996732c62f", "comment": "Malware payload (Mirai)", "value": "f4646d3ed97f7a0f985f067571d1066c1f8d0b9061f7162c051ea51efc986acf", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858153, "uuid": "59183a01-b4d5-4216-ac8f-87678f836428", "value": "T164D32A41FC415F23C6D622BBFB5E428D372917A9D2EF720398216F65378685B0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858153, "uuid": "8596897b-1fb0-45b8-8a48-0d6a8ccd960b", "value": "1536:H75q4P/FG5rFe3xNkY4ExkB0aOWvAcd54VId+TwklDNzngVJOsVWL/LONantokrT:b5q4PaHIhNWvP4g+7DNzghsiYtoGac", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771858153, "uuid": "e0333635-dcde-42a5-aebc-2241bd4ee779", "value": 138016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858153, "uuid": "18a2b8e7-4382-4a72-8ae7-a2ea465f388b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1771858387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858387, "uuid": "e217a70e-3bdd-4aaa-a371-53a0c82ccf8b", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858387, "uuid": "021758a2-99f5-4772-812a-b1267a54094e", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858387, "uuid": "9ab96ee7-f1a2-42e4-80c5-792667a4c117", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858387, "uuid": "2ffdbee4-8fd0-4241-a965-23ff5e67d143", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771858387, "uuid": "9461eb4b-5d44-46e2-8a64-fc5efbeb464f", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858387, "uuid": "356ba546-282f-4257-b1d2-dfb1286350c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858387, "uuid": "04860424-58b5-4ec8-8cb5-7e12ee89f1ed", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1771858388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858388, "uuid": "16e20b76-a4ac-483c-ba6a-6cb893c55811", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858388, "uuid": "ee23c997-db47-45f0-ba96-0ff08b0bf92d", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858388, "uuid": "bf05a6c1-6b94-4050-b575-3239c9acbdfe", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858388, "uuid": "c46635d5-8059-4057-835f-177aeb5c4e0d", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771858388, "uuid": "d3c68209-9b31-4e2e-8032-2ffc23678976", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858388, "uuid": "85947be1-edde-45a6-b943-1f382b850ce9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858388, "uuid": "605fadab-009f-4d55-bcb9-fa19468a927c", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1771858389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858389, "uuid": "495fee4b-d61f-47c4-9979-9dae839ce86a", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858389, "uuid": "2987e82b-f086-4202-8de8-5573d4030200", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858389, "uuid": "75f6b370-b6d8-47a3-97f9-6ca5ba330cb1", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858389, "uuid": "9e73ad57-d900-4a6e-89cb-769b43dbfe3d", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771858389, "uuid": "b6152d52-f561-4a32-b272-df8d3c257945", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858389, "uuid": "693418ac-036d-4183-ba4d-89765c4ca46c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858389, "uuid": "e95340c6-ad1d-41b2-9c09-55973a7c5050", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1771858396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858396, "uuid": "929fb228-e377-43e0-9b06-b41c5b611e46", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858396, "uuid": "19bd12cb-db2c-4ed6-811c-3b6636e4c057", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858396, "uuid": "85f20aec-1780-4173-9428-c08b95974af9", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858396, "uuid": "4d8f6580-6f6b-4257-9274-3b8bae87f00f", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771858396, "uuid": "f07aceec-e466-44fb-b7b5-50935d4ae412", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "708fb5de-10d0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771862285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771862285, "uuid": "46c11ff1-8bf1-4b42-87e8-57a3447d62d3", "comment": "Malware payload", "value": "5e2771417a3457db117db760b801a08c", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771862285, "uuid": "c2e088ba-2486-4b78-955b-3e17cadcf707", "comment": "Malware payload", "value": "32e87f74a8bcc388c5596fe1404f64826e4083c4181e21658a71d7504794bc1b", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771862285, "uuid": "96a38e7b-f5e5-47be-91bc-d91ac75425a6", "value": "T152631A26AB56443BF041093182944BBF8ABD6C333169201FFF949DF63CB499AC545E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771862285, "uuid": "6f37ddcc-8c5d-4520-a83b-eb8ebf1a758a", "value": "c4b8b0aba9f9c876ca624bdbda64d516", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771862285, "uuid": "6d127607-adb1-4601-90a0-fb6c17df9cf2", "value": "768:MepnjAK/y7yXdQxlVfnHKQtV7eSHs1Iqzy7NIaH/f74tFGXnedGiB9G12uZFHQzW:MepnjAK/yGtQNqydHjq6j4tu/2uCoz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771862285, "uuid": "1955b323-ba04-4ec9-b169-ae7e2c1201f9", "value": 71163, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771862285, "uuid": "2154fd1b-55f0-4869-b5f0-f35bda931390", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd73941f-10d2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771863380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863380, "uuid": "f3a0710b-7ee3-4c14-8004-1d491b989217", "comment": "Malware payload", "value": "1abd2b29820046a6dc3934f1a3ca3fc2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863380, "uuid": "143237ed-5f65-4284-8e4a-fc2130126e30", "comment": "Malware payload", "value": "1e9e9acbd73fdf8a35085cba607abbdc6d1b81f4303704082766429842383f3d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863380, "uuid": "732eb530-3ba4-4e60-93de-15d202ad73d0", "value": "T1E3871256E2F900E8E97BC0B8C6575517EBB1344517309BEB52A48A692F37FE0AE3D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863380, "uuid": "25028210-a261-417b-ac84-388c4bae2fe0", "value": "70d2e884fa127843c5bcbb53da86b6c8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863380, "uuid": "49f14cce-e6dd-4b40-8e40-d04e14b3f176", "value": "786432:H5HIhtzhWNsKpjGct8To61nEPwd49C880XsChY:JIhtzEnpjGi8T1nEPtw8z8CG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771863380, "uuid": "8db7989b-3172-48a1-8928-f0e3d708c5fa", "value": 36214696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863380, "uuid": "90637a70-08f9-466b-8f5b-180ab7c44e84", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbeeef2e-0bd4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771863546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863546, "uuid": "dff72b1f-7e5b-4748-9df5-f9ebce82ae76", "comment": "Malware payload", "value": "18bd2b846c8c70341f3c6a77cf5ff929", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863546, "uuid": "59c54d83-df7f-4e1f-8040-fd33a3e4fd0b", "comment": "Malware payload", "value": "55ed77b15797c81f13f3cddc818d23e293d90d08b0764a675505ce99b94b1c3f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863546, "uuid": "c315f6ba-700e-4ed2-a493-369b75ad09c3", "value": "T1C5233BF60723ADCF972B0D21E50C1205ECA8E8A772D990BDFF8109594EE9518CDB4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863546, "uuid": "b3b05cc9-a134-4611-a678-0ed8fde67b18", "value": "1536:D68wy0cvvO+9ADZZ2VAryLgKg0vZMjmg8Ks+VB:D683TOYQ2VcykKg0BOt8V+VB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771863546, "uuid": "b43cd765-c398-4b1e-9e40-3efff1e4ba89", "value": 49839, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863546, "uuid": "103ab986-bdd5-452d-b90a-9b4ead8405a4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76c5d13b-0c9d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771863607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863607, "uuid": "4e4f7cbe-f652-4268-8d65-f641ff5e616d", "comment": "Malware payload", "value": "ab4e96f77203e63120b102d90e1befd4", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863607, "uuid": "b2fa1186-0815-45b8-9d53-bdc4fa4c887c", "comment": "Malware payload", "value": "0e09737078063e76658646f95390ac60d197e6f7f4d10cdbbae060c601450271", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863607, "uuid": "e408b574-3c10-47a4-9482-e84ede3f8ab3", "value": "T1F3234BF60723EDCF872B0D15E40C1205ECA8E8A732D565BDFF841A598AE9518CEB4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863607, "uuid": "7da83400-adcb-42ca-ac10-2aae114c70dd", "value": "1536:inD0u5U1jO+9ADZZ2VAgyLgKg0vZMjmg8Ks+VU:inDKVOYQ2VvykKg0BOt8V+VU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771863607, "uuid": "fd2f3dcf-f5d1-411c-b964-623f4d9aa825", "value": 49839, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863607, "uuid": "2a6a3744-d7ef-4b07-b56c-28ee2c3487fb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84935448-10d3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771863607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863607, "uuid": "e4dabc82-2aab-4d20-a9ea-6c4b4aa86a3f", "comment": "Malware payload", "value": "7ed9c811a5533a522bc802760151c27a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863607, "uuid": "3717f944-4ccb-4961-a3fa-ff31cd8e4aac", "comment": "Malware payload", "value": "4719266a6a3ddf2592931a35251dbbffcbad48a7500f6817f7b83971a3b03819", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863607, "uuid": "18ce8c99-ee77-4a2f-940c-5f0e070199ba", "value": "T1F9335CF50B23EDDF5B370E51E50C1215DCA8EDA732E8906DBF84855A0BB81588DB4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863607, "uuid": "9f5e6046-e7fa-4a33-9ec1-01f42d77ad27", "value": "1536:iacATaHrzcmODtZyqMKb4ojs1Cvv5PW7f+Vv:hcAGLxOXyDAdqCn5Pof+Vv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771863607, "uuid": "8a17849a-08d2-45f2-8d9e-86e689f522ff", "value": 51887, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863607, "uuid": "a24ad5de-8b74-478f-92aa-ac5a15d430c1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76edc240-0c9d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771863607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863607, "uuid": "6c31079e-0c2e-4534-a566-17efd9a0fde2", "comment": "Malware payload", "value": "4cc7985dcd2350bd9fffc2280310df44", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863607, "uuid": "6e2b965f-3962-4fcd-86fc-1e58eb0b3ff4", "comment": "Malware payload", "value": "231173ffd32e70fba706b68a247a9dc9505a539022884eecde45d606f9e7bb0a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863607, "uuid": "f59a23c9-a82f-4947-9f6c-dce6b8838f0d", "value": "T148740AFA1223AD8FCD260D00E00D0117ECB4BC7B72E554B8FE4495B059AA558EDF5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863607, "uuid": "8c3b412c-e41c-4421-8efd-70c12c99e776", "value": "6144:EkHMsxGACdSkBKOeZV7QzEtks4dGQexrxEs3bfVdtgxCw:tHMs8E5trxrfV7a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771863607, "uuid": "fceca442-eb78-4896-a5d2-3e6ec53e25db", "value": 363867, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863607, "uuid": "d3521ef3-afc3-4ba9-83d6-81b6444768c7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76ca1828-0c9d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771863666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863666, "uuid": "9f7a3290-d816-473b-a2c6-6389fd5ad316", "comment": "Malware payload", "value": "b0a1050f69a9ced5915412d080fa62fe", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863666, "uuid": "0a18d528-f36c-4ab9-8bc5-16b593c6e049", "comment": "Malware payload", "value": "f2351a69a5f002bcab083355f2e5b73925de14c38d570ef9c3d48477229e8b24", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863666, "uuid": "55cd4969-7928-471a-9f6a-b391e497da43", "value": "T156235CF60723ED8F872B0E15F40C2201ECA8AD9771D994BDBF8909994AE851CDC74E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863666, "uuid": "f05d13b3-0a32-4929-a6ba-987cd30a79ca", "value": "1536:U9CPqr6w9cGRMBY7R5Yo01/tSGbErz/V17eaT7+Vi:U9/ryqMBYgo0ivlT7+Vi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771863666, "uuid": "a8526068-8c7c-45b3-abbe-3477bea99f08", "value": 49155, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863666, "uuid": "12352d03-b95d-446b-af0c-6fb696f39848", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50f4f2be-10d9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771866097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771866097, "uuid": "d86584d3-173e-4918-831d-18231cbf3d3c", "comment": "Malware payload (Mirai)", "value": "adc87c5b73ba7b6e43227180c9c85a79", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771866097, "uuid": "98d2fd70-5dea-4b88-8c22-bb0b23e2ed5e", "comment": "Malware payload (Mirai)", "value": "765b06d48da8554cdd725bc6a1649a19ff741668a5e0846b7eaccf5877c6eab4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771866097, "uuid": "8570b039-4b3a-41c8-abb8-77815f575087", "value": "T125C36B73C869AF68CA58D474F0708FB82B53A54581871FBE58A7C2754087E9CFA067", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771866097, "uuid": "63a2402c-5e56-4cf1-9779-a05dd0b4dc6f", "value": "1536:x9x06mbD/LL+QdZ6I0g2HFgiCVmK2W0/xsZfCj1g9WHfXDvx4OAN:x9x0xDzL+7IilgiUZ2SZq29W/XjNc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771866097, "uuid": "8d4ca8c0-28be-4884-8fb5-8351d9b74a28", "value": 125792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771866097, "uuid": "d3f9954d-8611-4607-84c4-bfcf5d3987d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771868952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771868952, "uuid": "5d4d2216-a5be-4793-94f0-0720d22d2a99", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771868952, "uuid": "763b8626-0be5-4c06-81cc-ec4fb79aad2a", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771868952, "uuid": "293002d1-175c-40ad-a5cd-5858d6357661", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771868952, "uuid": "fd89d094-b776-48aa-8316-1a1cb18457da", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771868952, "uuid": "d15e513d-b15c-4a27-8912-25f62541b15a", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24fbe1ec-10ea-11f1-8369-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1771873325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771873325, "uuid": "fb770250-bec4-4668-9307-fb5ec8c83a44", "comment": "Malware payload (njrat)", "value": "0a79f47cdc25e3abce14406055914603", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771873325, "uuid": "864b326b-8572-41b7-b8f9-ffed8965da7e", "comment": "Malware payload (njrat)", "value": "dd04f418685c2c03217c4d17c371a1ab82b2f67e8d7f723b7990e209d8be9b51", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771873325, "uuid": "ca0496dc-af09-48e3-a8e8-8a319e14f0de", "value": "T124B47EE74C97B05D80478754062AE9485FDFEAD18BE025B928DD950A0F4C3D0BEA7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771873325, "uuid": "5dd2aad1-3391-4b26-9852-7a5b5757cb7d", "value": "12288:ZTo55MyUQsKqWcHXF0Pk77NFmCf3o7L3vhtovyDO:V+myUQQ7b2L3vh6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771873325, "uuid": "581e2e5b-42cd-4b12-b216-418898ace874", "value": 510337, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771873325, "uuid": "7e6642a4-989f-4fe7-80ea-570b85a0d04d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a7d18c0-10ea-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771873388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771873388, "uuid": "9201886b-ffd7-45aa-8b05-d3d6a681b454", "comment": "Malware payload", "value": "6667dfe2ff34d6e78a7ec44167fdb96d", "object_relation": "md5", "Tag": [ { "name": "7z", "colour": "#f91abd", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771873388, "uuid": "44b7604e-7bd0-4bcc-a96c-43bb0becfda1", "comment": "Malware payload", "value": "a075a1d32a9dbaa3dcbe16ebbaa30fd0bdfbb75cdbd5684c3a063139d7beab95", "object_relation": "sha256", "Tag": [ { "name": "7z", "colour": "#f91abd", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771873388, "uuid": "8708cf0a-0f0a-47d3-b653-3a955d0a8e39", "value": "T13552D0D6E900AA72E07B922C3B3073CBE696CB7C6E9DAA533B148D8485F324555D11", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771873388, "uuid": "13d55bf8-663c-44bf-a2bb-6ddbc8df15d9", "value": "384:POlL5bDllo7y4SDWagzbm5l4F01amFjKyGHh:2lL5bQ7thbmYFWamFdGB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771873388, "uuid": "4059e081-6f27-4352-a409-4bbe11100978", "value": 14292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771873388, "uuid": "560952b6-5323-413e-baae-29ecaf2cb7d8", "value": "application/x-7z-compressed", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a857fc9-10ee-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771875052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771875052, "uuid": "c9451d32-bff2-46c1-85eb-953054fbf0ca", "comment": "Malware payload (Mirai)", "value": "4e5998b08c7265dbdb30a4a34169c70b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771875052, "uuid": "9d48aa24-53a4-4f5f-a4b9-1eb6fb175d1a", "comment": "Malware payload (Mirai)", "value": "5b31e71ff674c1424e8c16ea5ba01c392294aa332a5cd1b71752175430822217", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771875052, "uuid": "f5f98d27-8a86-4fac-a4d5-bbe5333b42b4", "value": "T1DF04C716AB650EFBDCABDD3706E9070539CCA41B22A43B353674D528F54F60B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771875052, "uuid": "357152ec-b5d8-48a7-a41a-fbeb2ad22a6f", "value": "3072:E+GokYuajQhfKgoPL/EY3iVNHjN+OdJS:UokYuajGSgoPQYSV5N+Od", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771875052, "uuid": "93ab9546-3f54-4f81-b556-56813700dc66", "value": 186672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771875052, "uuid": "ba2a24f7-a845-4c78-b5f3-7fcc5a0d7ebd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1771875949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771875949, "uuid": "aceecb84-dc2d-45c3-ae49-a3f144f48467", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771875949, "uuid": "2ab061f4-a3b7-4690-a97f-d50abe346185", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771875949, "uuid": "ea7e902b-2b49-4f12-859c-f15f317bcbd8", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771875949, "uuid": "bd93fc07-1e08-4baf-8c3e-1f33d208060d", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771875949, "uuid": "b8ceb878-af37-4a30-91fc-113ad19c52d3", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "746012d4-10f0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771876035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771876035, "uuid": "17055199-82ec-40dd-a46b-7dd1ec7fb618", "comment": "Malware payload (Mirai)", "value": "cbea98f69c867cc048d367b2e403255c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771876035, "uuid": "26c3488a-7d44-46ac-a399-5fd06d989916", "comment": "Malware payload (Mirai)", "value": "d8210d5d87b3f19f695d7cda8f4784c65d108de01cd46ab293806d4b951d4a72", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771876035, "uuid": "5520b2a0-f032-4875-ae52-8e402c699cbf", "value": "T160D34C06731C0E47D1632EB43A3F27E093EFEA8121E4F644255F9B8A9271E361586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771876035, "uuid": "5160e566-f4ef-4884-947d-df10eb2028bc", "value": "1536:sr+hkkA6zFJcaH74w6xfDIWEPtOB2N071Yf4E/vALjFrkSe+5Nnqs3wCko:s36Mw4w6xVEkL71U4FLAjo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771876035, "uuid": "e5acc4ab-f1fc-4791-9f23-95921727875e", "value": 142228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771876035, "uuid": "f634e9b1-b646-4b1b-b3c8-22ad741962ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c31e4a0-10f1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771876424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771876424, "uuid": "40764936-0cef-470f-b792-b5bc4d020995", "comment": "Malware payload (Mirai)", "value": "3ef9779652eebc86926502d04ed2e24a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771876424, "uuid": "772f8888-1fe9-4248-a1ee-f9e28d827a92", "comment": "Malware payload (Mirai)", "value": "9ad89d40aee596b71735143afccc0d6840f87cd192ece7cdaa8d73e1d655bf6e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771876424, "uuid": "71a63bca-443b-4dfb-b5b1-246cd9bc7307", "value": "T13EE33907B5C184FDC4A9C2B48F9BB13BD936F5591238B26B2BC4AA171E4DE309F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771876424, "uuid": "04a01b1b-a053-43cb-a0a1-705d1066d2b6", "value": "3072:yA4T6zR6CBn46Ahfw30Ij6q95yEOTU7sgxRBCuzjtKkpZUdSo:H4T6zR6CB46Ahfw30O6tbwTBtqSo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771876424, "uuid": "cff8f1e8-53b0-4276-a2ac-44a1b8e6dff4", "value": 146472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771876424, "uuid": "423e8a2d-0682-4496-a8e4-25f7fc2ac759", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fd070e8-10f2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771877886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771877886, "uuid": "2a5076b9-7621-4059-8229-dfdd2f548323", "comment": "Malware payload (Mirai)", "value": "7aef2c60db4351e24bad3f486c4c077e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771877886, "uuid": "e6b72b6c-2564-4391-935e-1f5cc95a67ac", "comment": "Malware payload (Mirai)", "value": "5f5d7b3031e2c91155490fe2232bd4e7474a42c60da1fb40ffc4a192cee105cb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771877886, "uuid": "ce8fd75d-8464-460f-bd55-89c4a0c92809", "value": "T1B2D31B41B9405F27C6D622BBFB5E42CD372917A8D2EF72039D216F25378686B0D3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771877886, "uuid": "4663b596-54cc-40e4-b26a-54c0fdb62e3f", "value": "1536:OaEGpCNE5LpLpLf6vsfhhMs8OitA5qemu4VI6fNHTEieNbvWVJOdXAP90N74Elv+:OaEGmU5hZ8jDk4HhleNb+OPElQfJc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771877886, "uuid": "f25bf7be-6f83-401d-aa64-e902022be789", "value": 142112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771877886, "uuid": "1d42146f-2ab4-4956-accf-f6680e48d62e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "911dbad4-10ea-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771877930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771877930, "uuid": "02043611-3e09-465f-9767-074610bbc85a", "comment": "Malware payload (Mirai)", "value": "dca0caefaf7b5a92afdfbbd687158c98", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771877930, "uuid": "fbe006f4-ae2e-4f9c-88f3-1f0ea2d3432e", "comment": "Malware payload (Mirai)", "value": "a98d617bc125d4f8863b5c0e02590a3a72d206bbb80f2e62958cbe82503c3fac", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771877930, "uuid": "27717aed-c570-4553-ad27-f43a6844283e", "value": "T11F04B71E6F228F7DF668873447B78E25A75C33DA26E1D640E1ACC1105E6039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771877930, "uuid": "a9a5084f-b41b-41ba-b328-c67caf1ce2c3", "value": "3072:MnzRP5SbWro6i7+pin+tpuwrZaWsaQ5jPh:AzJo5so+HrNsD5jPh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771877930, "uuid": "48b16ebc-b170-4cb3-93ba-8d90584738c3", "value": 185968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771877930, "uuid": "30a700d1-bcfa-4dda-9d48-7bffee6026fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771804937, "uuid": "ea55159d-104a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.112.100:60789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771806370, "uuid": "40c50b76-104e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.19.188:34790/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771806371, "uuid": "41118dc6-104e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.23.82:42151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771806544, "uuid": "a8c016e7-104e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.23.82:42151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771807516, "uuid": "eb884a0a-1050-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.94:45611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771807993, "uuid": "07e9a944-1052-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.215:48041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771808112, "uuid": "4f0965e7-1052-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.227.215:57263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771808230, "uuid": "95a2d6a5-1052-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.19.188:34790/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771808290, "uuid": "b94c0880-1052-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.12.235:35961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771808355, "uuid": "e00221e5-1052-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.12.235:35961/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771808425, "uuid": "0963cfa6-1053-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.68.20:42087/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809149, "uuid": "b8fc5c90-1054-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.53.173:49123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809682, "uuid": "f718dd51-1055-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.112.66:41492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809860, "uuid": "611591a0-1056-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.215:48041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771809922, "uuid": "85c65b22-1056-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.47.73:58480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810584, "uuid": "10b127dd-1058-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.53.173:49123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810692, "uuid": "509a34b2-1058-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.68.20:42087/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771810879, "uuid": "c03257ed-1058-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.80.62:60967/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771811174, "uuid": "706b9b08-1059-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.225.239:39000/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771811610, "uuid": "74411424-105a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.102.193:55056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771811653, "uuid": "8de93423-105a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.171.225:39677/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771811654, "uuid": "8e273b91-105a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.249.120:58184/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771811842, "uuid": "fe0b0bbf-105a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.167.214:37554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771811962, "uuid": "46026894-105b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.47.73:58480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771812499, "uuid": "86058b8d-105c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.148.18:39445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771812556, "uuid": "a7c3fc2b-105c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.57.53:59084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771813217, "uuid": "31b0ea57-105e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.167.214:37554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771813397, "uuid": "9d51845d-105e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.51.191:41154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771813570, "uuid": "03fdcfcf-105f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.1:56939/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771813697, "uuid": "50302857-105f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.231:37286/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771814005, "uuid": "07bb8570-1060-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.1:56939/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771814063, "uuid": "2a444eb0-1060-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.78:42228/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771814241, "uuid": "940d4e4e-1060-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.241:35788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771814777, "uuid": "d38a04a8-1061-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.206.127:52203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771814834, "uuid": "f5db3965-1061-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.159.10:60196/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771814890, "uuid": "1725e61c-1062-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.14.229:52188/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771814894, "uuid": "19369740-1062-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.231:37286/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771814954, "uuid": "3d68b93d-1062-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.78:42228/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771815246, "uuid": "eb379eaf-1062-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.103.246:48265/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771815799, "uuid": "34dc19fb-1064-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.206.127:52203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771816335, "uuid": "7424fbdd-1065-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.241:35788/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771816637, "uuid": "2848d7dd-1066-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.0.118:35993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771816637, "uuid": "284f287d-1066-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.14.229:52188/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771816747, "uuid": "6a191b9e-1066-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lg1kpu12.microzen.digital/?=check&&actmn=pJUtqigIrxBgGPdv", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771816811, "uuid": "8feb4dc9-1066-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.0.118:35993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771817111, "uuid": "42c63ad2-1067-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.73.108:55353/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771817768, "uuid": "ca4b8481-1068-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.82.255:37572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771817896, "uuid": "1689b84f-1069-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.82.255:37572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771818066, "uuid": "7c348501-1069-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7332146992/0Ont1ef.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771818201, "uuid": "ccb6c337-1069-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.128.130:41564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771818318, "uuid": "128fda24-106a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.157.207:48180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771818375, "uuid": "34106a4f-106a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.212.248:42631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771818671, "uuid": "e49922b7-106a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.81.165:51759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771818736, "uuid": "0ba4f67a-106b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.13:58883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771818737, "uuid": "0c23b86f-106b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.128.130:41564/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771818979, "uuid": "9c35ce28-106b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.238.46:56217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771819457, "uuid": "b91be009-106c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.176:45602/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771819457, "uuid": "b95a5614-106c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.227.215:57263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771819699, "uuid": "49534422-106d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.176:45602/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771819758, "uuid": "6c7cb9e5-106d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.170:51951/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771819815, "uuid": "8ec9518b-106d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.29.39.213:54915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771819817, "uuid": "8f8829dc-106d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.12.246:35835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771820118, "uuid": "42ebb0f0-106e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.86.71:59886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771820230, "uuid": "860d9eac-106e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.81.165:51759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771820895, "uuid": "12613257-1070-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.238.46:56217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771820957, "uuid": "370b4eba-1070-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.102.87:41651/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771821370, "uuid": "2d3db9ce-1071-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.170:51951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771821548, "uuid": "9764f2c0-1071-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.12.246:35835/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771821786, "uuid": "25a526be-1072-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.8.53:40597/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771821851, "uuid": "4c3524cb-1072-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.86.71:59886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771822216, "uuid": "259831ad-1073-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.13:58883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771822277, "uuid": "49ffa861-1073-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.136.22:39843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771822334, "uuid": "6bfc9158-1073-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.102.87:41651/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771822517, "uuid": "d91494c2-1073-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.26.71:42171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771822696, "uuid": "43d2e2a1-1074-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.128.10:43302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823232, "uuid": "836bcce0-1075-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.26.71:42171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823296, "uuid": "a935fc45-1075-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.136.22:39843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823418, "uuid": "f23bdeeb-1075-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.8.53:40597/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823478, "uuid": "15c4db5d-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.15/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823478, "uuid": "1604d9dc-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.15/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823478, "uuid": "16056dfd-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.15/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823478, "uuid": "16194330-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.15/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823478, "uuid": "161b78d2-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.15/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823479, "uuid": "16579568-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.15/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823479, "uuid": "1657c6cd-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.15/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823479, "uuid": "1666d974-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.15/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823479, "uuid": "1666e662-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.15/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823479, "uuid": "1675940f-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.15/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823479, "uuid": "1675d73b-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.15/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823479, "uuid": "16981083-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.15/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "1843f556-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.165/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "185204cb-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.165/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "18525df6-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/morte.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "1853b220-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/morte.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "1853b4d9-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/morte.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "1853bf41-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/morte.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "1855d19a-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/morte.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "18571532-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/morte.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "1857ae98-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/morte.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "1858e06b-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.165/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "185dce07-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/morte.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "1860537c-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/morte.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "1861093b-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/morte.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "18635c80-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/morte.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "1864516f-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/morte.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "186c4ef6-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/morte.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823482, "uuid": "1872d477-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/debug", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823538, "uuid": "39b62e38-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.128.10:43302/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823538, "uuid": "39c9718a-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.165/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823538, "uuid": "39c98fab-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.165/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823538, "uuid": "39ca4429-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.165/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823538, "uuid": "39ca457c-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.165/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823538, "uuid": "39cae0e8-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.165/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823538, "uuid": "39cb901c-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/morte.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771823538, "uuid": "39d15d49-1076-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.165/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771824249, "uuid": "e1b42d0f-1077-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.51:45253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771824500, "uuid": "77530738-1078-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.225.239:39000/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771824501, "uuid": "77d67f37-1078-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.35.128:46594/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771824980, "uuid": "950525a6-1079-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.237.81:48541/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771825400, "uuid": "8f974f1e-107a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.54.183:45614/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771825450, "uuid": "ad86ef17-107a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.198.178:38548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771825635, "uuid": "1b4c0795-107b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.198.178:38548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771825750, "uuid": "6069d0ec-107b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.51:45253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771826236, "uuid": "81dfd234-107c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.204.79:39005/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771826424, "uuid": "f1caade3-107c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.237.81:48541/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771826714, "uuid": "9e75ded1-107d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.197:39506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771826774, "uuid": "c29524d0-107d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.88.208:34299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771827011, "uuid": "4fef7835-107e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.170.14:54425/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771827189, "uuid": "ba0bb8ab-107e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.170.14:54425/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771827254, "uuid": "e0c0508a-107e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.0.211:50912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771827862, "uuid": "4b3a6244-1080-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.215:44164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771828281, "uuid": "4499e2c7-1081-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.178.94:57074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771828327, "uuid": "6019c2e7-1081-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.88.208:34299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771829355, "uuid": "c501cf2a-1083-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.215:44164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771829357, "uuid": "c61cb791-1083-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.78:43348/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771829531, "uuid": "2defadb4-1084-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.120.159:39128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771829775, "uuid": "bf5ea499-1084-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.51.191:41154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830388, "uuid": "2c760702-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.11.86:44787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830445, "uuid": "4e45705f-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830652, "uuid": "c9dee1d1-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.78:45392/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830664, "uuid": "d1395af3-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.140/run.sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830664, "uuid": "d165c1fd-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/bvExecuter.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830665, "uuid": "d188a394-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://deusxeno.ws/Bootsta%D1%80%D1%80erUl.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: ryos", "colour": "#51c7ee", "exportable": true, "hide_tag": false }, { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830665, "uuid": "d1c8cdbf-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://deusxeno.ws/Bootstappe%D0%B3UI.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: ryos", "colour": "#51c7ee", "exportable": true, "hide_tag": false }, { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830677, "uuid": "d8f7a591-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunme.onters.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830696, "uuid": "e46d6846-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file/7awd5u10ypifz8n/Request_for_Quotation_15100053_QSOLAR.lzh/file", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830724, "uuid": "f4d6354d-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.159.81//arm", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830724, "uuid": "f4d7e918-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.159.81//mips64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830724, "uuid": "f4d8ce06-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.159.81//sparc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830726, "uuid": "f6490d74-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/CVE-2021-40449_poc.e", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830727, "uuid": "f67446dd-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/create_doc.py", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830728, "uuid": "f71f6ba6-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/cve-2022-21907.py", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830728, "uuid": "f7524644-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/custom_macro.vba", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830731, "uuid": "f91c290f-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.159.81//sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830731, "uuid": "f921c52c-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/go_update.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830731, "uuid": "f9222e03-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.159.81//i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "f98ab6af-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/follina.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "f9921599-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/payload.vba", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "f9a3402d-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/doc3.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "f9caea39-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.159.81//arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830732, "uuid": "f9dfb574-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.159.81//ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "f9f728e6-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/JuicyPotatoNG.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "f9fe85f8-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/go2.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa008bfa-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/LocalPotato.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa1b6b2e-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/final.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa1ce07d-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.159.81//mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa387eae-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/patch_update.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa3a67ce-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.6.82.222:8081/bot.sh4", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa3b43a1-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.6.82.222:8081/bot.x86_64", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa3d578c-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/cmd_patch.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa3f3936-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.6.82.222:8081/bot.powerpc-440fp", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa410425-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.6.82.222:8081/bot.powerpc", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa427a76-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/phish_final.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa446a64-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.6.82.222:8081/bot.armv5l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa44ed8b-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.6.82.222:8081/bot.mipsel", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa45e38d-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.6.82.222:8081/bot.armv4l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa464658-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.6.82.222:8081/bot.i486", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa475899-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/agent.exe", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa4da17e-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/dde_payload.doc", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa52ccd7-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.6.82.222:8081/bot.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa554fa7-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.159.81//arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa55c69f-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.159.81//x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa58eed0-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.6.82.222:8081/bot.armv6l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa6ed00e-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.159.81//arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830733, "uuid": "fa706104-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/Inveigh.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830734, "uuid": "fa8bba7e-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.6.82.222:8081/bot.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830734, "uuid": "faa868a9-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.159.81//mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830734, "uuid": "faaf5031-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/DavRelayUp2.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Rubeus", "colour": "#3E32C5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830734, "uuid": "fb019d3a-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.6.82.222:8081/bot.i586", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "fbd1d1fd-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/dde_payload.docx", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "fbde3e09-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.159.81//m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "fc008b20-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/beacon.exe", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "fc3894dc-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.159.81//arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "fc3c58e7-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.6.82.222:8081/bot.armv7l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "fc3c9bea-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.159.81//x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "fc3d1dbb-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/follina_payload.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "fc3f640e-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/COMahawk64.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830736, "uuid": "fc43df10-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/GodPotato.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830737, "uuid": "fc978710-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/DavRelayUp.exe", "Tag": [ { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830737, "uuid": "fc9ffdcd-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/KrbRelayUp.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Rubeus", "colour": "#3E32C5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830737, "uuid": "fcbcc1c6-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.6.82.222:8081/bot.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830740, "uuid": "fe394a40-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/chisel.exe", "Tag": [ { "name": "Hive", "colour": "#30ec1d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830740, "uuid": "fe929aca-1086-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/LaZagne.exe", "Tag": [ { "name": "Lazagne", "colour": "#0dc975", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830749, "uuid": "03f7f9cf-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.80.78:43348/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830785, "uuid": "1963e206-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/poly.jpg", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830786, "uuid": "1990988b-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/write_and_run.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830786, "uuid": "19f521d7-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/poly.gif", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830786, "uuid": "19f9d1e3-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/revshell.vbs", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830787, "uuid": "1a3e70bb-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/PetitPotam.py", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830788, "uuid": "1b2b87ee-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/update.exe", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830789, "uuid": "1be4ee06-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/rev64.exe", "Tag": [ { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1bfde53b-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/vpn_config.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1bfdf74a-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/update5555.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1c021b99-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/SharpRDP.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1c03e41d-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/rev5555.odt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1c243b77-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/urgent_update.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1c2575cc-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/SpoolFool.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1c268bf3-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/PrintSpoofer.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1c2a3f66-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/runascs/RunasCs.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1c2b8493-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/runascs/RunasCs_net2.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1c2db6f8-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/sc64.bin", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1c398b4b-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/update.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1c47c938-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/x64_payload.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1c495b23-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/shell5555.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1c6f22b9-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/revshell.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830790, "uuid": "1c6f2548-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/rev.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830791, "uuid": "1c853cc9-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/ps_payload.doc", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830791, "uuid": "1c854bce-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/Rubeus.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Rubeus", "colour": "#3E32C5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830791, "uuid": "1c90b50b-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/revshell.hta", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830791, "uuid": "1c98ff9e-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/SweetPotato.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830791, "uuid": "1d0dda5e-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/revshell.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830792, "uuid": "1d8cbc02-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/update", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771830794, "uuid": "1ebbf218-1087-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.16.44.75:8080/wp.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771831270, "uuid": "3a4f6ad7-1088-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://frostprotectionsys.makeoverwinter.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771831447, "uuid": "a40bd33c-1088-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://climatecontrolunit.makeoverwinter.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771831763, "uuid": "607165c7-1089-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.58.2:56727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771831940, "uuid": "c9c5590d-1089-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.55/bins/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771831952, "uuid": "d0e21c9a-1089-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.29.30:56710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832016, "uuid": "f6fdffc9-1089-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.222.141:48095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832054, "uuid": "0d5f4ed4-108a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://echorp.shop/bins/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832054, "uuid": "0d61d58d-108a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://echorp.shop/bins/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832055, "uuid": "0e5a83b0-108a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://echorp.shop/bins/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832060, "uuid": "11598e60-108a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://echorp.shop/bins/spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832069, "uuid": "165cc470-108a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.11.86:44787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832069, "uuid": "166114e8-108a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://echorp.shop/bins/arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832069, "uuid": "16611a61-108a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://echorp.shop/bins/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832069, "uuid": "16611a99-108a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://echorp.shop/bins/mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832069, "uuid": "16611e6f-108a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://echorp.shop/bins/ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832069, "uuid": "16613130-108a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://echorp.shop/bins/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832069, "uuid": "166137bf-108a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://echorp.shop/bins/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832955, "uuid": "26838538-108c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.91.127.182/00101010101001/morte.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832956, "uuid": "27026252-108c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://echorp.shop/bins/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832956, "uuid": "2702724c-108c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://echorp.shop/bins/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771832959, "uuid": "28f71062-108c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.78:45392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771833261, "uuid": "dcd443f7-108c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.222.141:48095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771833332, "uuid": "078779ae-108d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.26.79:49731/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771833485, "uuid": "626e69b4-108d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.150.220.218/4SLEYpfAk57hGubo/her7zi1rut6.wav", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771833545, "uuid": "861d1baa-108d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.150.220.218/4SLEYpfAk57hGubo/nu6wyj9sur2.psd", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771833547, "uuid": "87aaf3ca-108d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.150.220.218/4SLEYpfAk57hGubo/fo0suc2ki2.rtf", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771833704, "uuid": "e4ceecf8-108d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.85.144:35648/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771833757, "uuid": "04af6563-108e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.178.16:59154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771833851, "uuid": "3c6e53e8-108e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://winterupdatestack.makeoverwinter.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834100, "uuid": "d11790d2-108e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.249.120:58184/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834222, "uuid": "19ca160b-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834222, "uuid": "19ca34cc-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834222, "uuid": "19ca4379-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834222, "uuid": "19d1e0e7-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.151.195.33/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834222, "uuid": "19fef236-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.237:8088/389242390482/3atoNational.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834222, "uuid": "19fffbe8-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.237:8088/389242390482/3atoNational.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834222, "uuid": "1a0018b0-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.237:8088/389242390482/3atoNational.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834222, "uuid": "1a007aa4-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.237:8088/389242390482/3atoNational.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834222, "uuid": "1a15ef14-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.237:8088/389242390482/3atoNational.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834225, "uuid": "1b75ef19-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.237:8088/389242390482/3atoNational.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834225, "uuid": "1b75ef2d-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.237:8088/389242390482/3atoNational.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834225, "uuid": "1b75f0e1-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.237:8088/389242390482/3atoNational.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834225, "uuid": "1b75f68f-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.237:8088/389242390482/3atoNational.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834225, "uuid": "1b788ea7-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.161/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834225, "uuid": "1b9cc673-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.87.43.237:8088/389242390482/3atoNational.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834568, "uuid": "e845df50-108f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hydrological-collector.rapidbrook.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834685, "uuid": "2e03bcd0-1090-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ocrfebthutl.blogspot.com/lundchikha.doc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834686, "uuid": "2e23288a-1090-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ocrfebthutl.blogspot.com/atom.xml", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834744, "uuid": "510a2713-1090-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://09c1d5c3-1a6e-4c05-8e4e-eff75c6b5dd6.usrfiles.com/ugd/09c1d5_dbf4d46c87164e8697606231ef00b2f2.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771834949, "uuid": "cb600406-1090-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.213.85.144:35648/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771835060, "uuid": "0d3685aa-1091-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.1.28:42879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771835165, "uuid": "4c23e76a-1091-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hotfeb2622.blogspot.com////////////////////holakshwola.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771835291, "uuid": "96b9c79f-1091-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-flow-point.rapidbrook.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771835466, "uuid": "ff8482d4-1091-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://vo230hqh.cybervox.digital/?=check&&actmn=odRcSBHAUChvXJVg", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771835538, "uuid": "2a489e09-1092-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.63.27:54544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771835587, "uuid": "479c2d6b-1092-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.239/robomegadom", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771835904, "uuid": "0478fe2f-1093-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.74.238:39189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771836031, "uuid": "50212431-1093-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.63.27:54544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771836445, "uuid": "46b29edf-1094-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.196.142:44225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771836550, "uuid": "8578e099-1094-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://water-network-node.rapidbrook.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771836742, "uuid": "f7a629ae-1094-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.255.106:59432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771836861, "uuid": "3ea3d0fb-1095-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.50.138:43731/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771836984, "uuid": "87ecb094-1095-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.31.119:35932/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771837039, "uuid": "a9223f88-1095-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.241.57:44437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771837162, "uuid": "f23c5aa8-1095-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.91.94:46360/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771837163, "uuid": "f2b31a29-1095-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.91.94:46360/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771837446, "uuid": "9b3f74a3-1096-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://tenbravoid.icu/encrypted_data.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771837628, "uuid": "08190c07-1097-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.50.138:43731/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771837879, "uuid": "9d49fedf-1097-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.17.81:47383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771837929, "uuid": "bb36ada6-1097-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://rapid-stream-data.rapidbrook.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838046, "uuid": "015fb243-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gateway.lighthouse.storage/ipfs/bafybeiglav5n6cekzmy5szszt3gko62zw6aixefv3l2l7s6ozyttts6cka", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838047, "uuid": "01b3a2d7-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gateway.lighthouse.storage/ipfs/bafkreigbl2q3x5x2bgljw7jzc6vpbsqxvkezpcdbxym7pdjqtt3hyb4hzu", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "encoed", "colour": "#145d44", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838167, "uuid": "492b1030-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://priorityflowcontrol.bloodsubsequen.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838174, "uuid": "4d82955f-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.29.30:56710/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838286, "uuid": "9003b539-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://valve-sustainability-glasses-icons.trycloudflare.com/PhF172.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838286, "uuid": "900cc5ba-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://valve-sustainability-glasses-icons.trycloudflare.com/PhF191.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838286, "uuid": "900d0f78-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://valve-sustainability-glasses-icons.trycloudflare.com/PhF192.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838286, "uuid": "900d26e0-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://valve-sustainability-glasses-icons.trycloudflare.com/PhF091.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838286, "uuid": "9014a10a-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cottages-resolutions-grew-indirect.trycloudflare.com/PhF2SU.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838286, "uuid": "901a97bc-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://interracial-buyers-keyword-enclosure.trycloudflare.com/pm/1PhJ14.wsf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838286, "uuid": "901e9a11-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://valve-sustainability-glasses-icons.trycloudflare.com/PhF092.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838287, "uuid": "90bf88ec-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://seeking-packard-allowed-joke.trycloudflare.com/fop/Inv05903925092.pdf.wsh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838288, "uuid": "917204a5-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://interracial-buyers-keyword-enclosure.trycloudflare.com/pm/PhF17.wsf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838289, "uuid": "91b8954d-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://valve-sustainability-glasses-icons.trycloudflare.com/PhF131.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838289, "uuid": "91b8be0a-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://valve-sustainability-glasses-icons.trycloudflare.com/PhF132.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838289, "uuid": "91b8d8b2-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://valve-sustainability-glasses-icons.trycloudflare.com/PhF171.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838289, "uuid": "91c05c8a-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cottages-resolutions-grew-indirect.trycloudflare.com/PhF2SU.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838290, "uuid": "92be4c90-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cottages-resolutions-grew-indirect.trycloudflare.com/PHSep01x86_Ayoo.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838292, "uuid": "93a38d7f-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cottages-resolutions-grew-indirect.trycloudflare.com/PhF2ST.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838297, "uuid": "96c9783b-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cottages-resolutions-grew-indirect.trycloudflare.com/PhF2MA.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838466, "uuid": "fb8da1cc-1098-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://no.windowupdateservice.com/Bin/ScreenConnect.ClientService.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838711, "uuid": "8d7d6e20-1099-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.31.119:35932/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838769, "uuid": "afee61d2-1099-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://vitalstatisticsunit.bloodsubsequen.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838776, "uuid": "b46e3780-1099-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.8.68:49886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771838887, "uuid": "f69b10b2-1099-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://solar-energy-control.brightvale.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839020, "uuid": "455fb215-109a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.34.77:35111/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839020, "uuid": "455fb765-109a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.34.77:35111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839250, "uuid": "ce9bf131-109a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://start-review-myacc.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=&c=&c=&c=&c=&c=&c=&c=Install%20Traffic", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839368, "uuid": "15595674-109b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.74.238:39189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839426, "uuid": "37d86e78-109b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.138.89.117/a/ps.txt", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839487, "uuid": "5bffeb47-109b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://light-valley-hub.brightvale.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839488, "uuid": "5c7ae09e-109b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://defragglerupdate.com/software.zip", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839491, "uuid": "5e329f85-109b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.17.81:47383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839491, "uuid": "5e3ca4b5-109b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.8.68:49886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839491, "uuid": "5e914534-109b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.32:46927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839545, "uuid": "7e8ff82d-109b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.95.12.162/captcha.php", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839607, "uuid": "a36f6f9d-109b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.138.89.117/a/ps.txt", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839608, "uuid": "a3eb9069-109b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.138.89.117/", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839608, "uuid": "a3eb93d6-109b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.138.89.117/", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771839797, "uuid": "14f3051b-109c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.132.80:57637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771840025, "uuid": "9cf44ed4-109c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://region-sync-base.brightvale.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771840749, "uuid": "4c69fcf9-109e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.50.253.3/run.exe", "Tag": [ { "name": "BABADEDA", "colour": "#c25d29", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771840750, "uuid": "4c8ef67e-109e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.50.253.3/bin.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771840929, "uuid": "b7c4e2f1-109e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bright-field-stat.brightvale.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841226, "uuid": "688fece5-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.229:8080/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841226, "uuid": "689d7772-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.229:8080/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841226, "uuid": "68abf9ae-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "6a2d41e5-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.229:8080/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "6a2de2d2-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.229:8080/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "6a43b307-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "6a43b5d9-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "6a43b8f2-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "6a4916d0-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "6a4bb0c6-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.64/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "6a4fb6f7-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.229:8080/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "6a4fbc8a-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "6a53fb57-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "6a54e1b8-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.64/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841229, "uuid": "6a5d2f08-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.229:8080/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841233, "uuid": "6ce27bc1-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841233, "uuid": "6ce298ed-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841237, "uuid": "6ece881d-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.229:8080/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841237, "uuid": "6ee10338-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841237, "uuid": "6ee11fd6-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841237, "uuid": "6eef0472-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841357, "uuid": "b6c18bd5-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.235/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841357, "uuid": "b6c437bb-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.235/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841414, "uuid": "d88229f8-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.229:8080/bins.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841414, "uuid": "d8824171-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.229/bins.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841414, "uuid": "d893923f-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.118.16/nuts/bolts", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841414, "uuid": "d8a420cb-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841414, "uuid": "d8abacef-109f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.64/run.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841527, "uuid": "1be92756-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.124.205:40956/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "406fbd01-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.64/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "406ff2b7-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.64/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "4070b2f4-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.64/bins/xnxnxnxnxnxnxnxnm68kxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "4070bc42-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.64/bins/xnxnxnxnxnxnxnxnmipsxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "407297b7-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.64/bins/xnxnxnxnxnxnxnxni386xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841588, "uuid": "4073a660-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.64/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841594, "uuid": "441076da-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.64/bins/xnxnxnxnxnxnxnxnor1kxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841594, "uuid": "44108256-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.64/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841594, "uuid": "44108703-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.64/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841650, "uuid": "656c0c80-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://atmospheric-sensor-unit.quietwind.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841657, "uuid": "694c880a-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.64/bins/xnxnxnxnxnxnxnxnsh2xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841657, "uuid": "69564f2a-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.64/bins/xnxnxnxnxnxnxnxnsh4xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841775, "uuid": "afd25648-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.187.66:58646/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841828, "uuid": "cf3f3243-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://kariyersokagi.com.tr/files/Enquiry.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841829, "uuid": "cff5905d-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ia600506.us.archive.org/11/items/amd_msi/optimized_MSI.png", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841830, "uuid": "d0503cea-10a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-6f7fb0d0ae0f40fbad68520fce393d92.r2.dev/222.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771841961, "uuid": "1ea00c1e-10a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://user.keio.ac.jp/~rhotta/hellog/upload/upl/q4bRYpi9WFXyAHO4dIYG/python312x86.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842065, "uuid": "5cccbf7e-10a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.101.19/33/sdfiuisdiwewekjfjksdjaksjfkjkjdfkj.hta", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842068, "uuid": "5e3b7800-10a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.101.19/33/sdfiuisdiwewekjfjksdjaksjfkjkjdfkj.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "encodd", "colour": "#e003c4", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842128, "uuid": "8234c3e6-10a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.101.19/img/optimized_MSI.png", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842310, "uuid": "ee82b8ac-10a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://silent-flow-node.quietwind.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842426, "uuid": "33f6bf28-10a2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://weather-station-data.quietwind.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842666, "uuid": "c298226b-10a2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://quiet-air-monitor.quietwind.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842735, "uuid": "ebcded47-10a2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.69.194:38331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842847, "uuid": "2e759e08-10a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.38.129.77/HXUGmKrAljTiKGkDGL55.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842907, "uuid": "52c75662-10a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.38.129.77/RDkmaVQECQNm94.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771842910, "uuid": "548305a2-10a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://botanical-research-archive.wildfern.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771843089, "uuid": "bef94812-10a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file/jvbcb1k8d7v0ih4/hsGEfru137.bin/file", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771843089, "uuid": "bef98495-10a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file/uvqn5dmxcf1mdvt/Humouristic108.sea/file", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771843101, "uuid": "c62a5581-10a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.32:46927/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771843149, "uuid": "e2e15448-10a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bvaco.com/arquivo_20260223131604.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771843150, "uuid": "e33e29fc-10a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.100.220/img/optimized_MSI.png", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771843210, "uuid": "06e1c57b-10a4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://forest-deep-sync-node.wildfern.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771843220, "uuid": "0d23edd9-10a4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://floneimf.ydns.eu/webcontents/drsgtsrhydtesrtshtigushdfhsdufhuhdsfrgsthfxh/ibKUVSEfbgrnsrkgtsdzthsftgzhthsthsfg/contents.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771843274, "uuid": "2d5a07e9-10a4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.187.66:58646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771843514, "uuid": "bc05bfb7-10a4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7180287117/7XYtN5P.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771843637, "uuid": "05598bee-10a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.69.194:38331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771843809, "uuid": "6c15931f-10a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://nature-logic-base.wildfern.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771844234, "uuid": "698c5853-10a6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.166.249:49474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771844419, "uuid": "d7b59e69-10a6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.166.249:49474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771844778, "uuid": "ad8701a9-10a7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:50133/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771844827, "uuid": "cabccae9-10a7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://wild-leaf-trace.wildfern.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771844836, "uuid": "d030e362-10a7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.124.205:40956/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771845189, "uuid": "a2b635d4-10a8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.188.177:44892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771845246, "uuid": "c467354f-10a8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.188.177:44892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771845247, "uuid": "c52eed41-10a8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://wood-processing-unit.smartpine.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771845917, "uuid": "5475266d-10aa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:50133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771846638, "uuid": "02348586-10ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.118.243:37090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771846687, "uuid": "1f6d37df-10ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://smart-timber-track.smartpine.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771846879, "uuid": "9235520e-10ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.168.255:33759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771847062, "uuid": "fee2cfa9-10ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.117.203:44175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771847408, "uuid": "cd69ed16-10ad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://central-pine-node.smartpine.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771847420, "uuid": "d4be7f4c-10ad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.42.220:42525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771847474, "uuid": "f48f3364-10ad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.42.220:42525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771847584, "uuid": "366db37c-10ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.57.147.191/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771847648, "uuid": "5c6f23dc-10ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://au72nuxzv2.ufs.sh/f/4LhV5B1sDCwIYWWUZQpbSAVwYF8Qr21pjZDLd0EK49n7XgHx", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771847653, "uuid": "5f71d4c8-10ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.57.147.191:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771847708, "uuid": "7fd562f0-10ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://yaso.su/raw/twmKRmuh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771847885, "uuid": "e9c4a2ba-10ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.252.24.15/185.252.24.15/masabikk/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771847887, "uuid": "eaf8243b-10ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.252.24.15/vixc/SECURE.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848007, "uuid": "32143205-10af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hotfeb2622.blogspot.com/atom.xml", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848007, "uuid": "321af9c9-10af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hotfeb2622.blogspot.com/holakshwola.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848127, "uuid": "79a55b74-10af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.124.212.141/dd/bin.e", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848129, "uuid": "7adc9e01-10af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.124.212.141/dd/dd.sala", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848200, "uuid": "a589c570-10af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bursaelektriktamir.com/Jesuchristi/SECURE.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848250, "uuid": "c2e7dfdc-10af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://it-pine-management.smartpine.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848250, "uuid": "c31bfc65-10af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.66.174:45190/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848319, "uuid": "ec7be170-10af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.168.255:33759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848436, "uuid": "32011321-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.117.203:44175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848486, "uuid": "4fd412d4-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bafybeidv6v7pezugmfpzwl2k2ni56nhvlyv5vaibriswtsthae5loxskpi.ipfs.dweb.link/?filename=Machinery%20singapore.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848557, "uuid": "7a05f999-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.58.104:34771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848607, "uuid": "97f045ff-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.js-hurling.com/wp-contents/wp-content/qweyytrooznfuzsdifoseeyeiebgwefgbgwqazxcvdfehfnjroemdjhejg/contents.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848667, "uuid": "bc001fc0-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.216:2213/Video.lnk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848667, "uuid": "bc01b455-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.216:2213/AV.lnk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848668, "uuid": "bc260e4b-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.216:2213/Photo.lnk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848669, "uuid": "bcff25ea-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.252.224.245:5005/Video.lnk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848669, "uuid": "bcff2887-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.252.224.245:5005/AV.lnk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848669, "uuid": "bd043ac8-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.252.224.245:5005/Photo.lnk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848671, "uuid": "bdda43f2-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.252.224.245:5005/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848671, "uuid": "bdde4d4a-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.116.149.250:9980/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848671, "uuid": "bddef1a9-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.252.224.245:5005/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848673, "uuid": "bf58a881-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.216:2213/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848673, "uuid": "bf77e983-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.216:2213/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848673, "uuid": "bf7bdd7f-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.252.224.245:5005/AV.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848674, "uuid": "bfdd53fd-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.30.204.216:2213/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848674, "uuid": "bfe3709a-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.116.149.250:9980/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848675, "uuid": "c0908ff7-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.160.213.179:86/Video.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848675, "uuid": "c0b80bc0-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.160.213.179:86/Photo.scr", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848735, "uuid": "e3fe7e0d-10b0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.58.104:34771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771848848, "uuid": "2754921f-10b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.235.196:55916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849162, "uuid": "e2baf518-10b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/huhu/titanjr.", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849162, "uuid": "e2c8610b-10b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849162, "uuid": "e2c98314-10b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/hiddenbin/boatnet.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849162, "uuid": "e2cab94c-10b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.127/hiddenbin/boatnet.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849393, "uuid": "6c8cba9d-10b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://redstone.rockinred.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849453, "uuid": "901b447a-10b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.129.145.75:41170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849626, "uuid": "f752bb36-10b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bvaco.com/arquivo_20260223164236.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849747, "uuid": "3f92a919-10b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://rockember.rockinred.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849810, "uuid": "6532fa76-10b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/hold-8fad5.firebasestorage.app/o/forst%2Fpic8.jpg?alt=media&token=6ecd6f25-6a77-46d2-975c-bc4394ce7217", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849811, "uuid": "65d1e3e3-10b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://au72nuxzv2.ufs.sh/f/4LhV5B1sDCwIHfBMavimV1wYLDs37pB90InRJlTjGyKWqAcN", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849876, "uuid": "8c8cc2da-10b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.143.82:59701/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849926, "uuid": "a9ff93f2-10b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.197:5124/1/pp1/mmnmy.png", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849928, "uuid": "ab127c41-10b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.183/arquivo_20260222225726.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849932, "uuid": "ad92712b-10b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.143.82:59701/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849986, "uuid": "ce08e304-10b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.197:5124/1/pp1/optimized_MSI.png", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849988, "uuid": "cf3f35ee-10b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.197:5124/1/pp1/secusxjhsd.png", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849989, "uuid": "cf8004bb-10b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://crimsonbeat.rockinred.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771849989, "uuid": "cfb081a4-10b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.197:5124/1/pp1/sujkajsd.png", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771850167, "uuid": "39987b4f-10b4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://windvoice.blowofmike.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771850348, "uuid": "a5d4a5a8-10b4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.219.1.198:33773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771850410, "uuid": "ca6785ca-10b4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://micblast.blowofmike.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771850827, "uuid": "c31cb35f-10b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.235.196:55916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771851248, "uuid": "be1fe2ab-10b6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://echocharge.blowofmike.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771851322, "uuid": "ea01836e-10b6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.18.50:60344/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771851669, "uuid": "b9452243-10b7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://springclaim.takeoverspring.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771851733, "uuid": "def0922a-10b7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.219.1.198:33773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771851799, "uuid": "0660e064-10b8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.137.204:34258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771852211, "uuid": "fc12ef3c-10b8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/png/raw/refs/heads/main/Document_%23ww9kVmjNR4dx2HEX2k.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771852227, "uuid": "058ec774-10b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.97.121:38250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771852267, "uuid": "1dc9371d-10b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/bell/raw/refs/heads/main/msconfig.png", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771852268, "uuid": "1e2c2381-10b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/bell/raw/refs/heads/main/bellconf.jpg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771852275, "uuid": "22753191-10b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/yos/raw/refs/heads/main/%23766K06GGi.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771852328, "uuid": "420803fd-10b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/yos/raw/refs/heads/main/4FJuyVAHcy5clCHuIZ.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771852331, "uuid": "4384fc3e-10b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/yos/raw/refs/heads/main/DOC%237OM6OZyA7KIA1moKnx.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771852331, "uuid": "43bfc5f4-10b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/yos/raw/refs/heads/main/DOC_INV%23KHXX8yocKW3MNn9cva.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853227, "uuid": "596ef388-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://aidiyet.esb.org.tr/landpage?ms=http://bloomshift.takeoverspring.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853229, "uuid": "5ab88921-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://stonewing.sparrowinrock.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853231, "uuid": "5bf86197-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/png/raw/refs/heads/main/aVswFsQLgpq.jpg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853231, "uuid": "5c5e796b-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/png/raw/refs/heads/main/Y7psFIyqTra6Fzv2.jpg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853232, "uuid": "5cd250c2-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/png/raw/refs/heads/main/k64mAgeMomnemkX.jpg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853234, "uuid": "5dee55d5-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/png/raw/refs/heads/main/L77EUSt1dgn.jpg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853235, "uuid": "5e336f2d-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/png/raw/refs/heads/main/miYcgVVbUscV1zy9.jpg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853241, "uuid": "61e1a720-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/yos/raw/refs/heads/main/INV-Docu_PDF%2358ZZBX49YH1.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853241, "uuid": "61e4510b-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/yos/raw/refs/heads/main/Doc%23yuUydYv6gnpWcwz1.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853241, "uuid": "624cedc4-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/2ing/raw/refs/heads/main/2Package.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853242, "uuid": "62aadc2e-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/2ing/raw/refs/heads/main/1Package.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853243, "uuid": "62fdcf54-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/jpg/raw/refs/heads/main/ydIeL9RnhCgp.jpg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853243, "uuid": "631da018-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/jpg/raw/refs/heads/main/lQZadH.jpg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853243, "uuid": "631e1c9a-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/jpg/raw/refs/heads/main/3F5tFR.jpg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853243, "uuid": "63812bb9-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/jpg/raw/refs/heads/main/OrUm0vVa.jpg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853243, "uuid": "63835411-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/yos/raw/refs/heads/main/DOC_7OM6OZyA7KIA1moKnx.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853245, "uuid": "6428fe40-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/2ing/raw/refs/heads/main/3Package.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853245, "uuid": "64296529-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/jpg/raw/refs/heads/main/6wvJiS.jpg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853245, "uuid": "642b4262-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/jpg/raw/refs/heads/main/VURhhTfBB.jpg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853245, "uuid": "643f66e0-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://freshuprise.takeoverspring.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853245, "uuid": "64636037-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/jpg/raw/refs/heads/main/tn17JKZ3K8m.jpg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853245, "uuid": "64883f0e-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/jpg/raw/refs/heads/main/nbQzZB0KN.jpg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853245, "uuid": "6497b3bb-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/jpg/raw/refs/heads/main/fcOR5EMfrW.jpg", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853245, "uuid": "64aab4ba-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/2ing/raw/refs/heads/main/5+Package.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853248, "uuid": "661da5c8-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/yos/raw/refs/heads/main/gfplkger%2098ni43gnm%2098.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853248, "uuid": "66484203-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/yos/raw/refs/heads/main/INV-Document_PDF%2333RgcW1dQlGUwVNJnz8q2CZ.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853248, "uuid": "66713704-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/yos/raw/refs/heads/main/Document_%236xqIgw18uWY8Qjw5Yp.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853249, "uuid": "66fe1cbb-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/yos/raw/refs/heads/main/Document%238QzzExFsPNOwL45Ri9.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853249, "uuid": "66fe2fa7-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/2ing/raw/refs/heads/main/4Package.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853250, "uuid": "672f3b37-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/yos/raw/refs/heads/main/Factura-pendiente-01182026.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771853253, "uuid": "693285a6-10bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/png/raw/refs/heads/main/ifmrosh.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771854187, "uuid": "95bdc4e4-10bd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cliffbird.sparrowinrock.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771854188, "uuid": "963c85c2-10bd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://rockfeather.sparrowinrock.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771854194, "uuid": "9a46c1ab-10bd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bloomshift.takeoverspring.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771854194, "uuid": "9a4c9065-10bd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://calmbreeze.quietwind.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771854195, "uuid": "9a960078-10bd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/crminfos/png/raw/refs/heads/main/pakyrar.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771854199, "uuid": "9d50bc6f-10bd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.191.80:34884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771854200, "uuid": "9dbc95ad-10bd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.206/1.sh", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771854308, "uuid": "de3177cf-10bd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://softgust.quietwind.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771854387, "uuid": "0d6738dc-10be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.104.20:36283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771854440, "uuid": "2ce19a72-10be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.104.20:36283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771854503, "uuid": "524caa37-10be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.149.26:49386/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771854667, "uuid": "b415d7f4-10be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://silentdraft.quietwind.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771854967, "uuid": "66a0dc5c-10bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://forestfrond.wildfern.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771855220, "uuid": "fd9f2ef5-10bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.192.158:45553/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771855338, "uuid": "43b368fb-10c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.191.80:34884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771855386, "uuid": "60cbcda3-10c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://greenwild.wildfern.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771855566, "uuid": "cbb22ce0-10c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://central-monitoring-hub.clearcrest.ru/service/check.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771855570, "uuid": "ce593a9a-10c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.195.2:39971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771855686, "uuid": "138430f4-10c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://t0ijoagy.crystalbit.digital/?=check&&actmn=WSvNePvrQpYFSZHK", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771855883, "uuid": "8912bd03-10c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.90.175:37138/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771855935, "uuid": "a79fb11c-10c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.149.26:49386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771855987, "uuid": "c6da8e71-10c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://crest-logic-point.clearcrest.ru/service/check.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856001, "uuid": "cf302cae-10c1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.192.158:45553/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856124, "uuid": "186f4451-10c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.176.125:42328/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856286, "uuid": "78e2ec73-10c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://high-altitude-sensor.clearcrest.ru/service/check.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856287, "uuid": "79546595-10c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.18:49860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856420, "uuid": "c8ca42b7-10c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.182:58326/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856528, "uuid": "095741bc-10c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-crest-auth.clearcrest.ru/service/check.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856709, "uuid": "74ed1d38-10c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://urban-infrastructure-node.urbanstone.in.net/service/check.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856774, "uuid": "9c1c279b-10c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.124.89:37762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771856890, "uuid": "e115e232-10c3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.233.124:56294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771857008, "uuid": "273a253c-10c4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://stone-solid-base.urbanstone.in.net/service/check.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771857136, "uuid": "73a7f77f-10c4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.56.72:49784/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771857189, "uuid": "933717a5-10c4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://city-stone-track.urbanstone.in.net/service/check.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771857195, "uuid": "968e035e-10c4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.195.2:39971/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771857426, "uuid": "206e2ed8-10c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://street-level-sync.urbanstone.in.net/service/check.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771857612, "uuid": "8f60fc35-10c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.233.124:56294/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771857614, "uuid": "905a2679-10c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.74.127:2751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771857786, "uuid": "f6e351f4-10c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ocean-harbor-gate.coolharbor.ru/service/check.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771857851, "uuid": "1d859fdf-10c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7615186854/UrYlAzP.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771857925, "uuid": "4a07847c-10c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.152.135:60151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858040, "uuid": "8e2e643e-10c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.90.175:37138/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858208, "uuid": "f2729511-10c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.235:39473/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858209, "uuid": "f313402e-10c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool-port-storage.coolharbor.ru/service/check.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858337, "uuid": "3fa36e0e-10c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.82.83:57322/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858387, "uuid": "5d88e6a5-10c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.144.121/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858388, "uuid": "5df24597-10c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ship-dock-control.coolharbor.ru/service/check.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858389, "uuid": "5e7d9e00-10c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.14.165:8084/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858390, "uuid": "5edb9c75-10c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.14.165:8083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858393, "uuid": "60a4145a-10c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.46.38:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858396, "uuid": "6296a27f-10c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.244.135.53:34814/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858396, "uuid": "62b534c7-10c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.167.40.122:18129/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858398, "uuid": "63bbc47d-10c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.14.165:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858398, "uuid": "63cde8a9-10c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.136.158:8085/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858401, "uuid": "6580cf57-10c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.118.128.34:30117/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858511, "uuid": "a757fbc9-10c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.11.164:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858512, "uuid": "a790af22-10c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.45.188:2003/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858512, "uuid": "a7fa0615-10c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.5.20:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858747, "uuid": "34012466-10c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-cool-harbor-sys.coolharbor.ru/service/check.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858758, "uuid": "3a4fc7aa-10c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.74.127:2751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771858986, "uuid": "c26af2ef-10c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bright-cliff-edge.brightcliff.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771859347, "uuid": "99716fc8-10c9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://high-wall-monitor.brightcliff.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771859417, "uuid": "c359f345-10c9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.129:50698/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771859539, "uuid": "0bf29a42-10ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.152.135:60151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771859766, "uuid": "93360839-10ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://vertical-data-flow.brightcliff.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771859835, "uuid": "bca104f5-10ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.82.83:57322/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771860068, "uuid": "478940bf-10cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cliff-side-sync.brightcliff.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771860311, "uuid": "d81a1211-10cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://storm-bay-watch.stormbay.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771860369, "uuid": "faac30c8-10cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.21.157.107:35047/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771860850, "uuid": "1992c9eb-10cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://weather-warning-system.stormbay.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771861036, "uuid": "8836a6f2-10cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.129:50698/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771861097, "uuid": "ac621d99-10cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.35.120:44626/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771861398, "uuid": "5ffe779f-10ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.52.119:50462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771861758, "uuid": "36a265a5-10cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.21.157.107:35047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771861818, "uuid": "5a0a4d12-10cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.98.2:53253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771861996, "uuid": "c47fc7d5-10cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.98.2:53253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771862285, "uuid": "7098f1d8-10d0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/784733736/wJlUWCd.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771862302, "uuid": "7ae0ec42-10d0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.139.236:33041/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771862476, "uuid": "e271940d-10d0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.35.120:44626/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771862601, "uuid": "2cd804f9-10d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.52.119:50462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863375, "uuid": "fa796042-10d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunhx.onters.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "PureCrypter", "colour": "#131792", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863380, "uuid": "fda581fb-10d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://webinvitemeeting.com/File/Zoomworkspace.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863388, "uuid": "02445868-10d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.29.85:47362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863390, "uuid": "03090566-10d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/svExecuter.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863547, "uuid": "60b4bace-10d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.63/dealer/yunewfile.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863607, "uuid": "8495ec23-10d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.63/dealer/gftrlls.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863607, "uuid": "849b47f6-10d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.63/dealer/ConvertedFilesol.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863607, "uuid": "849f6338-10d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.63/dealer/oilandgasxwormugo.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863607, "uuid": "84f1e558-10d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.63/dealer/ugooilnewsnake.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863666, "uuid": "a8176fb8-10d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.63/dealer/ebukaxworm.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863726, "uuid": "cba713a5-10d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8408827406/GbY0R7a.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863797, "uuid": "f5db66e0-10d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.139.236:33041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771863922, "uuid": "4076920e-10d4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.52.245:45446/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771864579, "uuid": "c8194710-10d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.29.85:47362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771864691, "uuid": "0a8b6711-10d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.110:41604/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771865114, "uuid": "070ee051-10d7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.110:41604/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771866503, "uuid": "4304a000-10da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.57.36.202:58264/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771866676, "uuid": "a9afc0ee-10da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.64.135.181:35789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771866736, "uuid": "cdf6ff35-10da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:33873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771866791, "uuid": "eeae2d1c-10da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.66.174:45190/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771867273, "uuid": "0da4527c-10dc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.103.246:48265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771867522, "uuid": "a24df5d3-10dc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.66.14:51752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771867994, "uuid": "bbafa89b-10dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.19.6:44096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771868047, "uuid": "db265dcf-10dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.57.36.202:58264/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771868234, "uuid": "4a557310-10de-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.19.6:44096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771868477, "uuid": "dbad0653-10de-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:33873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771868952, "uuid": "f6877281-10df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.72.15:34649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771868955, "uuid": "f87bbbd3-10df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.167.150:51460/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771869191, "uuid": "850b6583-10e0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.198.40:37104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771869282, "uuid": "bb1accf8-10e0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.104.23:36573/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771869916, "uuid": "3539365a-10e2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.202:44445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771869916, "uuid": "3542d3b4-10e2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.72.15:34649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771870278, "uuid": "0cb23173-10e3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.112.202:49689/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771870397, "uuid": "538fbf07-10e3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.243.167.150:51460/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771871116, "uuid": "001540a0-10e5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.242:33559/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771871477, "uuid": "d75e17ec-10e5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.202:44445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771871648, "uuid": "3d7f0f69-10e6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.229:44641/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771873325, "uuid": "2514ec89-10ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/stevencohn8888-max/NEW8933/refs/heads/main/SECURE.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771873388, "uuid": "4a8a21eb-10ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/stevencohn8888-max/NEWOWNOW/raw/refs/heads/main/P0-678766887678.7z", "Tag": [ { "name": "7z", "colour": "#f91abd", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771873445, "uuid": "6cd121fb-10ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/stevencohn8888-max/GJH/raw/refs/heads/main/documento_pdf.7z", "Tag": [ { "name": "7z", "colour": "#f91abd", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771873445, "uuid": "6cd12414-10ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/stevencohn8888-max/johnj/raw/refs/heads/main/Documento.iso", "Tag": [ { "name": "iso", "colour": "#f7044c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771873445, "uuid": "6cd500e2-10ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/stevencohn8888-max/ghjjhj/refs/heads/main/ENCRYPT.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771873446, "uuid": "6cf748df-10ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/stevencohn8888-max/ghghg/refs/heads/main/SECURE.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771873446, "uuid": "6cf8f2bd-10ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/stevencohn8888-max/6789098778909876/raw/refs/heads/main/Documento%236124.7z", "Tag": [ { "name": "7z", "colour": "#f91abd", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771873446, "uuid": "6d1e0948-10ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/stevencohn8888-max/t354454323432/raw/refs/heads/main/Documento_6789789_pdf.cab", "Tag": [ { "name": "cab", "colour": "#c061e9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771873512, "uuid": "94a105f6-10ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/stevencohn8888-max/hj/refs/heads/main/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771873704, "uuid": "06f83153-10eb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.70.146:60629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771874787, "uuid": "8c5f7932-10ed-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.95.219:55765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771875738, "uuid": "c36dbadf-10ef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.70.146:60629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771876348, "uuid": "2ea6890a-10f1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.170.205:35255/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771876404, "uuid": "5005091a-10f1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.91.66:50446/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771876810, "uuid": "428c206d-10f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://silver-zone-sync.silverfield.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771876865, "uuid": "6328ba14-10f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://radius-spoke-investments-cst.trycloudflare.com/PhF2SU.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "txt", "colour": "#fdcfb6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771876866, "uuid": "63cad87e-10f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://advise-visual-playstation-closer.trycloudflare.com/uha/Re_0483902492.pdf.wsh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "wsh", "colour": "#589827", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771876867, "uuid": "64566868-10f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://swog3mgt.openmatrix.digital/?=check&&actmn=QvVvjcqNDWiPekAZ", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771876868, "uuid": "651f9056-10f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://radius-spoke-investments-cst.trycloudflare.com/PHSep01x86_Ayoo.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771876869, "uuid": "65af112a-10f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://radius-spoke-investments-cst.trycloudflare.com/PhF2SU.bat", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771876930, "uuid": "89c43986-10f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://radius-spoke-investments-cst.trycloudflare.com/PhF2ST.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771876930, "uuid": "89c44bde-10f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://radius-spoke-investments-cst.trycloudflare.com/PhF2MA.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771877300, "uuid": "665d22f2-10f3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.66.14:51752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771877540, "uuid": "f51cbec8-10f3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.169.44:55398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771877888, "uuid": "c4c2a6c6-10f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://quick-harbor-unit.quickharbor.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771877957, "uuid": "eda773cb-10f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.170.205:35255/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771878081, "uuid": "37c49ddf-10f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.16.104:56666/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771878382, "uuid": "eaf67b77-10f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.135.86:39416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771878400, "uuid": "f5d58680-10f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.238.199.55:56645/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771878561, "uuid": "55fceb5a-10f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.167:35315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771878731, "uuid": "bb00d29c-10f6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.16.104:56666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771878923, "uuid": "2de9827d-10f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-port-logic.quickharbor.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771879223, "uuid": "e0a69844-10f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.176.66:56386/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771879224, "uuid": "e107a7f3-10f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.129.35:37434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771879338, "uuid": "252437e6-10f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.51.109:33285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771879338, "uuid": "253d875e-10f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.69.58:38363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771879388, "uuid": "429fac52-10f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://transit-harbor-node.quickharbor.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771879445, "uuid": "64f5cdee-10f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.104/build1.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771880000, "uuid": "afe1c49d-10f9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.175.205:53696/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771880288, "uuid": "5b3b4786-10fa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-quick-dock.quickharbor.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771880528, "uuid": "ea5fc27d-10fa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://swift-canyon-pass.swiftcanyon.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771880596, "uuid": "13191b09-10fb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.69.58:38363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771880767, "uuid": "78a94838-10fb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://depth-canyon-monitor.swiftcanyon.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771880838, "uuid": "a361241b-10fb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.78:39309/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771880898, "uuid": "c7016177-10fb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.176.66:56386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771881125, "uuid": "4e63ed90-10fc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.78:39309/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771881307, "uuid": "bae29f1c-10fc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-rock-sync-base.swiftcanyon.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771881558, "uuid": "5021a603-10fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.47.228:46927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771881667, "uuid": "918cdbb6-10fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://swift-flow-node.swiftcanyon.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771881799, "uuid": "dfae3596-10fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.47.228:46927/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771881847, "uuid": "fc5bd9ac-10fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://silver-path-way.silverpath.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771881966, "uuid": "43753ff4-10fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7290860719/f1FlzK6.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771882447, "uuid": "623eeeb8-10ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://direct-access-line.silverpath.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771882753, "uuid": "18b60a56-1100-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.202.94:38495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771882869, "uuid": "5d6bc91f-1100-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-silver-route.silverpath.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771882875, "uuid": "61740215-1100-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.129.35:37434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771882926, "uuid": "7f94681d-1100-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.97.113.40:54119/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771882927, "uuid": "7ffe9e7f-1100-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.175.205:53696/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771883347, "uuid": "7a67a108-1101-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://path-logic-unit.silverpath.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771883607, "uuid": "15602f07-1102-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.245.138:53116/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771883768, "uuid": "755fbc6d-1102-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://rapid-dune-sand.rapiddune.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771884254, "uuid": "97559a3c-1103-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.210.190:39354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771884310, "uuid": "b88da786-1103-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://desert-storm-monitor.rapiddune.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771884853, "uuid": "fc50dd2f-1104-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.37.208:43281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771884909, "uuid": "1d794660-1105-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.203.252:42583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771885027, "uuid": "63ec1699-1105-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://heat-sync-node.rapiddune.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771885518, "uuid": "8864cdca-1106-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.9.97:57447/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771885814, "uuid": "390ab0fc-1107-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.210.190:39354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771886108, "uuid": "e83ea25b-1107-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://dune-logic-base.rapiddune.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771886113, "uuid": "eb79fa4e-1107-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.37.208:43281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771886113, "uuid": "eb7dff0b-1107-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.245.138:53116/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771886171, "uuid": "0e20036d-1108-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.203.252:42583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771886653, "uuid": "2d6f3a00-1109-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.159:56014/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771886894, "uuid": "bd06bbfa-1109-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.97.113.40:54119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771886949, "uuid": "dd804f82-1109-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://silent-meadow-base.silentmeadow.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771887069, "uuid": "2523dced-110a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://quiet-field-monitor.silentmeadow.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771887253, "uuid": "92a78e9c-110a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.45.147:53603/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771887547, "uuid": "41e68d55-110b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://nature-silent-sync.silentmeadow.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771887850, "uuid": "f687257a-110b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6847912187/FnckCRv.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771887850, "uuid": "f6a0322e-110b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.235.37:53181/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771887851, "uuid": "f7211940-110b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://f2i32y9f.silvernode.digital/?=check&&actmn=mBntqeCswGETrRAO", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771887853, "uuid": "f87c2468-110b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.16.97:45265/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771887971, "uuid": "3ec3a7c0-110c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.235.37:53181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771887972, "uuid": "3f7263b2-110c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.41.251:52730/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771888446, "uuid": "5a158892-110d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://grass-land-node.silentmeadow.in.net/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771889408, "uuid": "971557a6-110f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://urban-ridge-city.urbanridge.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771889536, "uuid": "e349fb07-110f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.16.97:45265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771889710, "uuid": "4b1c85f9-1110-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://high-rise-monitor.urbanridge.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771890368, "uuid": "d378f594-1111-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://city-ridge-sync.urbanridge.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771890396, "uuid": "e42124d4-1111-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.234.176.202/new/k.php", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771890396, "uuid": "e4245df2-1111-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.234.176.202/new/c", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771890615, "uuid": "66e47cff-1112-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.50.167:36321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771890667, "uuid": "85b02082-1112-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://urban-data-point.urbanridge.ru/service/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771890856, "uuid": "f659f8aa-1112-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.92.142:34793/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830723, "uuid": "f48560e6-1086-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.6.82.222", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858384, "uuid": "5b3d524c-10c7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.136.158", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771814884, "uuid": "13bae9a3-1062-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.14.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771826764, "uuid": "bcac60cd-107d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.88.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839484, "uuid": "5a7c440d-109b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.39.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771818663, "uuid": "dfc48190-106a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.81.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771825444, "uuid": "aa073629-107a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.198.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771818364, "uuid": "2ddaabfa-106a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.212.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771813564, "uuid": "0094ebb5-105f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.230.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771880824, "uuid": "9ad994e4-10fb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.233.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771878364, "uuid": "e05e0508-10f5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.238.199.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771869244, "uuid": "a498fc32-10e0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.104.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771882744, "uuid": "12f3fed8-1100-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.202.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771857606, "uuid": "8b9352d1-10c5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.226.74.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848665, "uuid": "ba59e6b3-10b0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.252.224.245", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771868944, "uuid": "f1c8ab7a-10df-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.72.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771835884, "uuid": "f8519042-1092-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.74.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771879324, "uuid": "1c9d9f39-10f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.69.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856885, "uuid": "de27cee8-10c3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.233.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771879206, "uuid": "d642de86-10f7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.129.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771824484, "uuid": "6d8777e6-1078-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.35.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830365, "uuid": "1f02974c-1086-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.11.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808284, "uuid": "b5d121fa-1052-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.12.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771812484, "uuid": "7d2ef071-105c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.148.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771885505, "uuid": "81080f68-1106-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.9.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771844224, "uuid": "633ed592-10a6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.166.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841763, "uuid": "a85eafd4-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.187.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771836965, "uuid": "7c9e34ec-1095-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.31.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771833665, "uuid": "cdeafd7b-108d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.213.85.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771831744, "uuid": "54c4ef0d-1089-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.58.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858384, "uuid": "5b3d7d4d-10c7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.5.20", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771868944, "uuid": "f1c8a68d-10df-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.243.167.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771860363, "uuid": "f750bd44-10cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.21.157.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858384, "uuid": "5b411f38-10c7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.46.38", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771884906, "uuid": "1bcb0414-1105-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.203.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771855563, "uuid": "ca52a9dc-10c0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.195.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771887844, "uuid": "f2ca076a-110b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.16.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771854185, "uuid": "94842d3f-10bd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.191.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771851306, "uuid": "e0aabc78-10b6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.18.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771862284, "uuid": "6fd7fab3-10d0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.139.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856106, "uuid": "0ded90fc-10c2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.176.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771827005, "uuid": "4becfab2-107e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.170.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771837023, "uuid": "9f692620-1095-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.241.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771890845, "uuid": "ef96a67f-1112-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.92.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771831925, "uuid": "c0d50319-1089-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.29.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838765, "uuid": "adea0d4e-1099-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.8.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771842725, "uuid": "e61437b1-10a2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.69.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771876383, "uuid": "43c1aa91-10f1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.91.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771843145, "uuid": "e04cb299-10a3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.100.220", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848124, "uuid": "77e863cc-10af-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "147.124.212.141", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771840744, "uuid": "4984f760-109e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "147.50.253.3", "Tag": [ { "name": "BABADEDA", "colour": "#c25d29", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863544, "uuid": "5f19a94d-10d3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.211.63", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771829524, "uuid": "2960202c-1084-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.120.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841524, "uuid": "1a2a4e2b-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.124.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771825384, "uuid": "86442045-107a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.54.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771837866, "uuid": "958997a4-1097-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.17.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771831985, "uuid": "e4a0e7ed-1089-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.222.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771870263, "uuid": "040fb7b7-10e3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.112.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771861083, "uuid": "a438d636-10cd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.35.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771847406, "uuid": "cbebaa53-10ad-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.42.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771828263, "uuid": "3a2a1624-1081-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.178.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771887964, "uuid": "3a561355-110c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.41.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771822264, "uuid": "4298340b-1073-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.136.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849865, "uuid": "85e74dd0-10b3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.143.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771846864, "uuid": "8929a91f-10ac-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.168.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771824964, "uuid": "8b8fb638-1079-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.237.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771820943, "uuid": "2ec27013-1070-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.102.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771883583, "uuid": "0732fa22-1102-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.245.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771833725, "uuid": "f15cd051-108d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.178.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863364, "uuid": "f3afbe46-10d2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.29.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771884843, "uuid": "f688e001-1104-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.37.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848665, "uuid": "ba596894-10b0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.30.204.216", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858384, "uuid": "5b3f2599-10c7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.118.128.34", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839425, "uuid": "36dd0a9f-109b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.138.89.117", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771835585, "uuid": "45f48854-1092-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.242.3.239", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771847885, "uuid": "e95779c5-10ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.252.24.15", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823464, "uuid": "0d9f8404-1076-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.91.127.182", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830723, "uuid": "f484ce5f-1086-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.16.44.75", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false }, { "name": "Hive", "colour": "#30ec1d", "exportable": true, "hide_tag": false }, { "name": "Lazagne", "colour": "#0dc975", "exportable": true, "hide_tag": false }, { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "mimikatz", "colour": "#0ee234", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Rubeus", "colour": "#3E32C5", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771866484, "uuid": "373851a4-10da-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.57.36.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848543, "uuid": "72115bfa-10b0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.58.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848244, "uuid": "bfcb6be2-10af-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.66.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771879983, "uuid": "a5b80e82-10f9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.175.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771821783, "uuid": "236ed70f-1072-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.8.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771806363, "uuid": "3ca25256-104e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.23.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771811164, "uuid": "6a112cfd-1059-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.225.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771855863, "uuid": "7d2b366f-10c1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.90.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771811643, "uuid": "87dceec6-105a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.249.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856766, "uuid": "96e35323-10c3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.124.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771879206, "uuid": "d64371dc-10f7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.176.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771881544, "uuid": "4831142a-10fd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.47.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771811584, "uuid": "64d07b9b-105a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.102.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771847044, "uuid": "f4976682-10ac-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.117.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771846624, "uuid": "f9c182ed-10ab-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.118.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771820105, "uuid": "3b3f0057-106e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.86.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771847584, "uuid": "36149de9-10ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.57.147.191", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771854364, "uuid": "ff94aa18-10bd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.104.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771819805, "uuid": "88cee75d-106d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.12.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771822683, "uuid": "3c00cf27-1074-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.128.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848845, "uuid": "25ac172b-10b1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.235.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858384, "uuid": "5b3ee60c-10c7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.146.14.165", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771818965, "uuid": "93d56a75-106b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.238.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771887844, "uuid": "f2c9e479-110b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.235.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771887244, "uuid": "8d8e443c-110a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.45.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863906, "uuid": "3717216c-10d4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.52.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771890604, "uuid": "602d9750-1112-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.50.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858324, "uuid": "37c54fa0-10c7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.82.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771818184, "uuid": "c2b67f57-1069-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.242.128.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771806363, "uuid": "3ca2577f-104e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.19.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771861384, "uuid": "57c68324-10ce-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.52.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771874763, "uuid": "7e55eeee-10ed-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.95.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771857123, "uuid": "6c12544e-10c4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.56.72", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771811643, "uuid": "87dceacb-105a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.171.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771851784, "uuid": "fdb591af-10b7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.137.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823464, "uuid": "0d9fe7cc-1076-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.153.34.165", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771823464, "uuid": "0da033ec-1076-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.156.87.15", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771890365, "uuid": "d18e5b0a-1111-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.234.176.202", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771834205, "uuid": "0fb774be-108f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.87.43.237", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771867506, "uuid": "9894063f-10dc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.66.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858384, "uuid": "5b3e5412-10c7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.45.188", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771809904, "uuid": "7af433df-1056-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.47.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771873683, "uuid": "fa76c277-10ea-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.70.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839785, "uuid": "0d76f5b9-109c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.132.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771826225, "uuid": "7afb0091-107c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.204.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848665, "uuid": "ba5a46a1-10b0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.160.213.179", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771808406, "uuid": "fe4b84b9-1052-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.68.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771818304, "uuid": "0a2a5073-106a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.157.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771854185, "uuid": "948490e1-10bd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.89.163.206", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839544, "uuid": "7dc5694d-109b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.95.12.162", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771842843, "uuid": "2c14cef3-10a3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.38.129.77", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849924, "uuid": "a9026564-10b3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.11.167.183", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858384, "uuid": "5b406636-10c7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.144.121", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771876865, "uuid": "62e8dab1-10f2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "advise-visual-playstation-closer.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771853226, "uuid": "58d8a4b7-10bb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "aidiyet.esb.org.tr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841648, "uuid": "645f86a6-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "atmospheric-sensor-unit.quietwind.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848484, "uuid": "4e8fa687-10b0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bafybeidv6v7pezugmfpzwl2k2ni56nhvlyv5vaibriswtsthae5loxskpi.ipfs.dweb.link" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771853226, "uuid": "58d8d85a-10bb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bloomshift.takeoverspring.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771842907, "uuid": "5258c6c4-10a3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "botanical-research-archive.wildfern.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858983, "uuid": "c0b5b99e-10c8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bright-cliff-edge.brightcliff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771840925, "uuid": "b4dedfcf-109e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bright-field-stat.brightvale.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848185, "uuid": "9c76b934-10af-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bursaelektriktamir.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771854187, "uuid": "9603f665-10bd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "calmbreeze.quietwind.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771855564, "uuid": "ca71aec7-10c0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "central-monitoring-hub.clearcrest.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771847406, "uuid": "cbf6f765-10ad-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "central-pine-node.smartpine.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771890365, "uuid": "d1bf698f-1111-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "city-ridge-sync.urbanridge.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771857185, "uuid": "9092965e-10c4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "city-stone-track.urbanstone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771882865, "uuid": "5b327379-1100-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-silver-route.silverpath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771860064, "uuid": "44c47a78-10cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cliff-side-sync.brightcliff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771854185, "uuid": "9495e26f-10bd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cliffbird.sparrowinrock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771831444, "uuid": "a1faaff9-1088-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "climatecontrolunit.makeoverwinter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858205, "uuid": "f0cf63a9-10c6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool-port-storage.coolharbor.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838285, "uuid": "8f9e7904-1098-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cottages-resolutions-grew-indirect.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771855984, "uuid": "c4eed72b-10c1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "crest-logic-point.clearcrest.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849985, "uuid": "cd1e1c8b-10b3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "crimsonbeat.rockinred.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839485, "uuid": "5a8c479d-109b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "defragglerupdate.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771880764, "uuid": "76ee70fc-10fb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "depth-canyon-monitor.swiftcanyon.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771884305, "uuid": "b5a5eadf-1103-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "desert-storm-monitor.rapiddune.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771882443, "uuid": "600a1c6e-10ff-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "direct-access-line.silverpath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771886104, "uuid": "e617ff8e-1107-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "dune-logic-base.rapiddune.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771851246, "uuid": "bce1ca9c-10b6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "echocharge.blowofmike.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771832045, "uuid": "0841478f-108a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "echorp.shop" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771887849, "uuid": "f5d1a93d-110b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "f2i32y9f.silvernode.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771835285, "uuid": "934bfe07-1091-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-flow-point.rapidbrook.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771878905, "uuid": "22cc1afd-10f7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-port-logic.quickharbor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771843205, "uuid": "03d86370-10a4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "floneimf.ydns.eu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771843205, "uuid": "03f0ccb0-10a4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "forest-deep-sync-node.wildfern.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771854964, "uuid": "654a7031-10bf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "forestfrond.wildfern.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771853226, "uuid": "58d785e3-10bb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "freshuprise.takeoverspring.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771831265, "uuid": "376f7690-1088-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "frostprotectionsys.makeoverwinter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838044, "uuid": "000c23d8-1098-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "gateway.lighthouse.storage" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771881304, "uuid": "b905e74e-10fc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-rock-sync-base.swiftcanyon.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771888443, "uuid": "5839b380-110d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "grass-land-node.silentmeadow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771855384, "uuid": "5f89346d-10c0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "greenwild.wildfern.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771885024, "uuid": "62065f83-1105-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "heat-sync-node.rapiddune.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856283, "uuid": "77751781-10c2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "high-altitude-sensor.clearcrest.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771889706, "uuid": "490b2384-1110-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "high-rise-monitor.urbanridge.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771859345, "uuid": "9847392b-10c9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "high-wall-monitor.brightcliff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771835165, "uuid": "4bceec20-1091-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hotfeb2622.blogspot.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771834563, "uuid": "e54b9bc7-108f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hydrological-collector.rapidbrook.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841826, "uuid": "cde5531d-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ia600506.us.archive.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838285, "uuid": "8faa31a5-1098-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "interracial-buyers-keyword-enclosure.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771848244, "uuid": "bfd6429c-10af-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "it-pine-management.smartpine.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841826, "uuid": "cddfdfaa-10a0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "kariyersokagi.com.tr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771816745, "uuid": "68c636bc-1066-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lg1kpu12.microzen.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839485, "uuid": "5a8bfc83-109b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "light-valley-hub.brightvale.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863364, "uuid": "f3c4709d-10d2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunhx.onters.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771830664, "uuid": "d1150d42-1086-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunme.onters.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858745, "uuid": "326e1835-10c8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-cool-harbor-sys.coolharbor.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856525, "uuid": "076c5188-10c3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-crest-auth.clearcrest.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771880284, "uuid": "59102b8a-10fa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-quick-dock.quickharbor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771850407, "uuid": "c8b55b90-10b4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "micblast.blowofmike.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771843804, "uuid": "694f1d18-10a5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "nature-logic-base.wildfern.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771887543, "uuid": "3fc1c638-110b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "nature-silent-sync.silentmeadow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838464, "uuid": "fa2c7799-1098-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "no.windowupdateservice.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771857784, "uuid": "f5a9256b-10c5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ocean-harbor-gate.coolharbor.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771834685, "uuid": "2dba397b-1090-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ocrfebthutl.blogspot.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771883343, "uuid": "78538809-1101-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "path-logic-unit.silverpath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838165, "uuid": "47d82c09-1098-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "priorityflowcontrol.bloodsubsequen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771877885, "uuid": "c342a704-10f4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "quick-harbor-unit.quickharbor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771842663, "uuid": "c14d1a58-10a2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "quiet-air-monitor.quietwind.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771887065, "uuid": "226c3ef0-110a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "quiet-field-monitor.silentmeadow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771876865, "uuid": "62e661f8-10f2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "radius-spoke-investments-cst.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771883764, "uuid": "7323f9e2-1102-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "rapid-dune-sand.rapiddune.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771837924, "uuid": "b8688974-1097-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "rapid-stream-data.rapidbrook.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849387, "uuid": "68d50c54-10b2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "redstone.rockinred.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771840023, "uuid": "9bac59ef-109c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "region-sync-base.brightvale.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771849743, "uuid": "3d43d889-10b3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "rockember.rockinred.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771854185, "uuid": "949ff80a-10bd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "rockfeather.sparrowinrock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838285, "uuid": "8fa9c0f6-1098-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "seeking-packard-allowed-joke.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771858384, "uuid": "5b57f8e5-10c7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ship-dock-control.coolharbor.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771842307, "uuid": "ed2048d3-10a1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "silent-flow-node.quietwind.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771886943, "uuid": "da1edd35-1109-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "silent-meadow-base.silentmeadow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771854665, "uuid": "b2c0176e-10be-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "silentdraft.quietwind.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771881843, "uuid": "fa676b83-10fd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "silver-path-way.silverpath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771876806, "uuid": "401e7493-10f2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "silver-zone-sync.silverfield.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771846685, "uuid": "1e2ce6e6-10ac-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "smart-timber-track.smartpine.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771854305, "uuid": "dc7624e0-10bd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "softgust.quietwind.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838884, "uuid": "f4cf17ab-1099-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "solar-energy-control.brightvale.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771851665, "uuid": "b699a251-10b7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "springclaim.takeoverspring.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771839243, "uuid": "caa96f70-109a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "start-review-myacc.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771857005, "uuid": "257a00a0-10c4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "stone-solid-base.urbanstone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771853225, "uuid": "58bc37e0-10bb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "stonewing.sparrowinrock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771860307, "uuid": "d5b6b7d9-10cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "storm-bay-watch.stormbay.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771857424, "uuid": "1f325ac7-10c5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "street-level-sync.urbanstone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771880524, "uuid": "e834e1c0-10fa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "swift-canyon-pass.swiftcanyon.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771881663, "uuid": "8f0a2d60-10fd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "swift-flow-node.swiftcanyon.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771876865, "uuid": "62fec36e-10f2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "swog3mgt.openmatrix.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771855684, "uuid": "12144617-10c1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "t0ijoagy.crystalbit.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771837444, "uuid": "9a2940c5-1096-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "tenbravoid.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771879384, "uuid": "40b9c05e-10f8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "transit-harbor-node.quickharbor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771890663, "uuid": "83610367-1112-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "urban-data-point.urbanridge.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771856706, "uuid": "73681ab6-10c3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "urban-infrastructure-node.urbanstone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771889404, "uuid": "94926d6c-110f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "urban-ridge-city.urbanridge.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771841945, "uuid": "14dd3d66-10a1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "user.keio.ac.jp" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838285, "uuid": "8f9b7030-1098-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "valve-sustainability-glasses-icons.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771859764, "uuid": "9214129f-10ca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "vertical-data-flow.brightcliff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771838765, "uuid": "adf7c440-1099-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "vitalstatisticsunit.bloodsubsequen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771835464, "uuid": "fe5c92e7-1091-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "vo230hqh.cybervox.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771836543, "uuid": "818d33e3-1094-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "water-network-node.rapidbrook.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771842424, "uuid": "32c02afb-10a2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "weather-station-data.quietwind.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771860848, "uuid": "17e41583-10cd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "weather-warning-system.stormbay.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771863364, "uuid": "f3d08144-10d2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "webinvitemeeting.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771844824, "uuid": "c968cad8-10a7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "wild-leaf-trace.wildfern.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771850163, "uuid": "377934ed-10b4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "windvoice.blowofmike.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771833844, "uuid": "388bc2d7-108e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "winterupdatestack.makeoverwinter.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771845245, "uuid": "c3cd41af-10a8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "wood-processing-unit.smartpine.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771847706, "uuid": "7ed5d73f-10ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "yaso.su" } ] } }